This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
File:                     nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json)
Hash identifier:          S2TJsj/xHVsFV6LuptzpcVrqvp8TE9OnnXSFyNsqQrw=
Subject key identifier:   8B:84:54:6C:32:5E:DF:D6:4E:FB:72:3C:71:34:C1:C4:6D:1E:86:31
Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71
Certificate issuer:       /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
Manifest number:          0119
Signing time:             Tue 23 Dec 2025 03:46:47 +0000
Manifest this update:     Tue 23 Dec 2025 03:46:47 +0000
Manifest next update:     Tue 30 Dec 2025 03:46:47 +0000
Files and hashes:         1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: 5138ywP5GCk0OmYgTcS/ywbPyvbzAx28UI9FJC7vj0Y=)
                          2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: C3woTmy4KRh8oZfuokqoz+ySn5YpmljqQzslPnXWG7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl
                          rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91113E7, serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
        Validity
            Not Before: Dec 23 03:46:47 2025 GMT
            Not After : Dec 30 03:46:47 2025 GMT
        Subject: CN=694a10a7-64e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:af:73:9c:ae:d5:06:9f:2e:ce:1f:47:cc:
                    c1:3d:d0:a1:b1:36:56:c8:9f:c7:9f:50:78:bf:a4:
                    38:b7:39:e4:ac:ad:74:4a:af:43:a2:f3:50:ca:fd:
                    7c:0b:ca:77:ce:71:a1:3f:d0:72:88:ed:a8:ec:10:
                    a8:4c:35:f0:12:fe:24:01:08:e7:80:60:7a:38:ee:
                    96:4d:59:a5:1b:77:8a:47:8c:2b:8b:c1:5d:75:68:
                    48:ba:9c:38:b3:f4:2c:c4:83:40:0d:97:a6:07:ce:
                    20:34:72:07:1a:1f:da:bf:ea:3c:b1:18:45:f9:40:
                    31:7f:65:c6:c1:5d:15:d1:ac:16:94:51:99:c6:4b:
                    20:27:62:b5:ed:f3:70:e1:db:83:f0:ee:f9:5a:37:
                    50:27:08:42:f2:b7:65:eb:e1:88:5e:d9:94:c4:3a:
                    85:9d:f1:39:40:e9:65:fd:21:00:71:35:4a:70:79:
                    16:88:13:a4:aa:f6:78:1d:6d:d9:5f:0e:19:28:61:
                    83:5d:8a:1f:49:a6:dc:7f:45:d9:bc:a1:31:80:52:
                    8a:68:25:2c:e1:4c:79:d4:93:bf:72:ac:9b:3b:fc:
                    1e:40:ac:06:cd:c1:c7:74:fa:e7:95:11:d2:01:d5:
                    b1:5b:37:0b:d0:21:a0:6a:65:9c:3f:9f:83:95:8e:
                    98:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:84:54:6C:32:5E:DF:D6:4E:FB:72:3C:71:34:C1:C4:6D:1E:86:31
            X509v3 Authority Key Identifier:
                keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2b:7c:3f:55:45:f6:60:bc:f4:c4:ae:a8:08:d6:b5:8d:ec:
         bd:24:40:12:ab:23:fb:db:e3:3a:2f:67:48:35:9d:91:ed:c8:
         c4:ac:64:89:b4:7b:2c:db:49:2a:bb:d8:2e:5d:81:cf:f5:7c:
         9d:6b:b4:0f:62:26:0a:22:a9:3f:98:11:e9:79:c6:31:25:05:
         fc:c4:3b:56:a8:70:4b:01:78:3d:91:d9:10:02:31:05:a7:93:
         40:50:da:d2:d7:60:db:bc:6f:1d:26:bf:2f:df:bb:e5:6e:bf:
         4f:42:35:bf:9f:05:17:85:a0:2f:a2:97:41:16:0a:5b:b4:8b:
         d8:e0:44:b6:cd:98:d3:71:d8:b8:01:2e:ae:6c:f9:3d:a3:3d:
         47:72:55:fd:3c:27:22:c3:64:6b:d0:ac:28:0b:d6:f4:22:41:
         e4:d6:93:8b:28:b6:95:f0:12:98:c8:34:2d:70:8d:9b:bd:0c:
         e2:47:88:2a:11:fc:f7:10:a7:2e:a6:ad:63:b0:8a:2d:ea:fb:
         8d:de:5b:df:ce:58:83:da:7f:75:46:44:9e:e3:2a:9d:cf:8f:
         0e:4f:66:89:a4:93:17:12:30:0d:e9:62:51:68:7f:71:97:a0:
         3d:ea:05:50:cd:e2:da:15:25:0e:98:40:3b:b6:4b:c8:00:00:
         55:86:01:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:51 2025 by rpki-client