This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
File:                     NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json)
Hash identifier:          EpcHWuARamFNbhWXarROrWezlj7K2vUqwjkNrP+SoeU=
Subject key identifier:   B7:AE:8A:E2:54:70:4B:5B:D8:88:C9:AF:4A:F0:B7:73:AA:7C:51:A2
Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
Certificate issuer:       /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Certificate serial:       108B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
Manifest number:          107C
Signing time:             Sat 20 Dec 2025 17:06:20 +0000
Manifest this update:     Sat 20 Dec 2025 17:06:19 +0000
Manifest next update:     Sat 27 Dec 2025 17:06:19 +0000
Files and hashes:         1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: GVA6tqaqCSt5zG/BIt8R/2J9ADgaWPsdkTTbV8ukocg=)
                          2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: vKUrCad/wDAN8DcFXzUyprhlGMmsi4Oqt3ZrPDf4rA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
                          rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4235 (0x108b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
        Validity
            Not Before: Dec 20 17:06:19 2025 GMT
            Not After : Dec 27 17:06:19 2025 GMT
        Subject: CN=6946d78b-6656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:71:76:68:2c:72:16:e0:a6:55:1e:7f:07:
                    86:dc:13:89:de:e8:a5:ec:3c:65:41:a7:25:03:aa:
                    56:88:81:da:bc:3f:f1:b1:99:1c:18:3f:50:61:2f:
                    13:cf:1d:b7:f5:5e:ed:08:1a:e0:3e:fe:b9:76:94:
                    a0:38:44:a4:51:44:30:f0:28:2d:2d:10:96:14:00:
                    60:9e:5d:4c:92:66:db:db:12:25:81:e7:18:6a:f0:
                    07:31:4c:0d:07:04:6e:db:3e:1d:91:c0:9c:ca:b7:
                    89:0e:09:81:5d:6c:5d:9f:90:f3:e3:0f:b0:b3:b2:
                    88:f9:ae:bc:92:cd:63:cc:cd:84:17:45:3b:ec:ea:
                    a3:5a:88:41:1b:31:cc:80:ea:54:55:23:6c:4f:e0:
                    cd:95:6a:44:5f:b3:25:25:9c:09:10:43:81:51:5a:
                    cb:e1:73:1f:1d:e4:25:e4:f3:f5:77:8f:cf:84:3c:
                    14:f4:7a:80:34:40:ce:e5:f6:b4:b2:27:98:83:b5:
                    12:42:54:e0:dd:ea:b3:c1:ce:e0:c5:8c:52:00:d5:
                    34:6c:b4:85:96:4d:fd:1c:41:cf:48:f6:fa:ff:56:
                    fc:da:b6:7b:6f:75:0a:d4:84:5d:29:a0:07:d3:39:
                    7c:cb:e1:2d:1d:11:57:e8:62:d0:40:b1:7c:d2:c5:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AE:8A:E2:54:70:4B:5B:D8:88:C9:AF:4A:F0:B7:73:AA:7C:51:A2
            X509v3 Authority Key Identifier:
                keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d8:1e:80:0d:66:03:04:2b:65:c9:75:58:36:db:a9:9b:fa:
         30:d1:3a:06:ca:45:5a:8d:df:bb:e1:dd:5a:f7:9d:58:05:0f:
         08:c7:28:5f:e2:22:da:b8:a7:41:91:63:3c:d9:8c:a1:05:53:
         28:52:1c:a4:ff:35:87:de:e0:00:34:b9:30:70:9e:a3:ef:02:
         ef:5a:7e:ee:e1:29:e2:52:6e:ff:3e:54:a3:43:a2:82:79:58:
         c6:ef:ec:4d:44:8f:8b:41:15:7e:6c:b6:67:1d:68:f4:3f:af:
         8e:12:4f:c6:66:1c:61:49:ca:0f:40:0d:63:11:65:03:f7:ca:
         76:3f:12:d3:03:25:e4:22:20:db:9f:7d:ed:0e:b4:e4:28:7e:
         fe:40:fe:25:26:ed:e1:06:88:9a:c6:88:ea:c2:3b:09:89:1f:
         d3:ae:47:7f:6b:bb:99:75:a7:80:12:16:53:c7:65:9c:b3:b4:
         8b:0e:8d:f7:f1:3a:c8:33:21:83:4a:d6:19:30:7f:2c:06:71:
         be:8e:bb:20:42:14:1c:29:f2:46:d4:6f:82:c2:f2:ac:50:ab:
         38:9b:70:86:72:04:e9:c4:95:7d:f0:ec:f8:01:b9:7e:6c:ab:
         05:19:2c:2d:b4:1c:9a:36:a7:ed:b4:2c:85:fe:e1:47:a0:8b:
         1e:53:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:01:44 2025 by rpki-client