This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
File:                     nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json)
Hash identifier:          2l9a6Vfcbr3ofwHKFH7ProyZfSH5l5nw8xAVUr727RY=
Subject key identifier:   A7:22:93:0E:A5:30:59:3A:DA:28:4B:A1:6E:96:A2:3A:EE:AF:94:AE
Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Certificate issuer:       /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Certificate serial:       0716
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
Manifest number:          0711
Signing time:             Mon 22 Dec 2025 21:08:37 +0000
Manifest this update:     Mon 22 Dec 2025 21:08:36 +0000
Manifest next update:     Mon 29 Dec 2025 21:08:36 +0000
Files and hashes:         1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: H5eYCzHa4QHpCthui0Lz87M/qHN8D6dG62iz+FskkTg=)
                          2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: AGJnIVMVxGCqhPBai/J+rGCznBK2uUe21t16AbPm6pM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
                          rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814 (0x716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
        Validity
            Not Before: Dec 22 21:08:36 2025 GMT
            Not After : Dec 29 21:08:36 2025 GMT
        Subject: CN=6949b354-70f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:a0:09:f0:d9:91:1a:2c:8f:c0:56:f7:eb:
                    6d:5e:12:fd:e5:0e:28:22:bd:84:fb:86:4f:cf:a5:
                    1d:d2:93:e4:aa:e7:49:61:3c:d6:c2:86:11:48:e0:
                    de:7b:1d:75:5c:3e:4c:6e:19:9c:10:19:1f:0d:6d:
                    b0:c2:1d:aa:81:54:da:00:84:94:7f:61:9b:74:68:
                    f8:f3:f2:e7:e8:d8:fc:f8:59:88:5b:95:08:6d:8c:
                    85:93:4b:6b:b9:7d:36:c2:8b:a1:81:d9:09:28:8f:
                    39:48:e7:80:61:bf:d1:4e:5e:87:06:db:dc:a3:8f:
                    ab:2c:cc:08:4e:6a:40:3d:32:8d:27:c6:91:1a:e0:
                    39:53:78:55:8a:fe:24:aa:5d:1e:f0:f7:d5:59:3c:
                    43:d8:67:64:55:45:2f:e3:7a:ad:95:b5:a4:89:fd:
                    9a:4b:57:8b:11:ae:a0:fd:0f:e5:23:7b:e3:c4:fe:
                    56:cc:47:79:c5:60:91:4a:c2:b0:c0:72:dd:cb:1c:
                    eb:c0:57:87:78:1f:a5:1c:a1:3b:d2:57:fa:81:17:
                    44:bb:71:f6:23:7c:f5:33:c4:3a:27:95:26:50:82:
                    50:3b:ab:37:96:dc:44:4d:1f:4e:de:70:cf:45:89:
                    cc:f1:b1:32:f2:92:be:a5:14:1d:e3:64:9c:16:4e:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:22:93:0E:A5:30:59:3A:DA:28:4B:A1:6E:96:A2:3A:EE:AF:94:AE
            X509v3 Authority Key Identifier:
                keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:77:5c:fa:e6:df:ea:c3:30:c6:6a:cd:8b:a9:b0:88:bd:89:
         0c:23:91:86:fc:77:79:c7:17:13:e4:69:31:95:d0:2b:40:ed:
         32:af:cd:18:b9:f8:cf:c5:76:a3:d4:62:57:9f:2e:b8:85:71:
         13:7d:f7:fe:a1:d6:1a:66:3a:8e:19:6a:39:82:78:c9:cd:e0:
         cd:77:1b:93:00:e3:eb:13:52:03:7a:e3:58:b4:c8:f6:b4:47:
         87:ed:22:4b:a1:04:96:e3:48:ce:70:4c:79:d3:2a:34:ac:46:
         d3:6c:6d:60:45:8e:97:e9:8e:96:af:23:32:a1:82:9d:85:e0:
         d3:5a:51:fd:3a:c5:76:c3:e4:a7:48:43:01:a1:cf:2e:9e:e2:
         be:db:81:68:2f:b2:d4:e5:3b:38:57:b9:a0:37:44:0e:a3:ee:
         34:ba:29:56:fa:e8:55:e8:70:ef:19:ac:1a:01:b4:0b:66:70:
         4a:2e:17:90:67:3c:8f:3f:c6:97:48:bf:b3:92:ad:9d:81:0a:
         e0:44:92:d9:33:19:70:97:f3:fa:f0:48:dd:15:8b:8e:16:ea:
         ef:31:df:73:8c:64:af:6f:3e:5a:be:5f:ac:d6:e9:82:34:ab:
         bf:f0:53:cf:d6:ef:5c:05:bc:60:24:fd:b6:b6:ed:0a:95:42:
         43:26:76:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZBNjUxMTAvBgNVBAUTKDlDRjZBOTYxMDAwQzk3Njk0N0JCQkVCMUQxNzNDMjNF
OTA5Rjk1NDQwHhcNMjUxMjIyMjEwODM2WhcNMjUxMjI5MjEwODM2WjAYMRYwFAYD
VQQDDA02OTQ5YjM1NC03MGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+mgCfDZkRosj8BW9+ttXhL95Q4oIr2E+4ZPz6Ud0pPkqudJYTzWwoYRSODe
ex11XD5MbhmcEBkfDW2wwh2qgVTaAISUf2GbdGj48/Ln6Nj8+FmIW5UIbYyFk0tr
uX02wouhgdkJKI85SOeAYb/RTl6HBtvco4+rLMwITmpAPTKNJ8aRGuA5U3hViv4k
ql0e8PfVWTxD2GdkVUUv43qtlbWkif2aS1eLEa6g/Q/lI3vjxP5WzEd5xWCRSsKw
wHLdyxzrwFeHeB+lHKE70lf6gRdEu3H2I3z1M8Q6J5UmUIJQO6s3ltxETR9O3nDP
RYnM8bEy8pK+pRQd42ScFk7FrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcikw6l
MFk62ihLoW6Wojrur5SuMB8GA1UdIwQYMBaAFJz2qWEADJdpR7u+sdFzwj6Qn5VE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkE2NS85MzVEQ0ZCRTY2
MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwybEh1NzZ4MFhQQ1BwQ2Zs
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25QYXBZUUFNbDJsSHU3NngwWFBDUHBDZmxVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkE2NS85MzVEQ0ZCRTY2MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwy
bEh1NzZ4MFhQQ1BwQ2ZsVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnd1z65t/qwzDGas2LqbCIvYkMI5GG/Hd5xxcT5GkxldArQO0yr80Y
ufjPxXaj1GJXny64hXETfff+odYaZjqOGWo5gnjJzeDNdxuTAOPrE1IDeuNYtMj2
tEeH7SJLoQSW40jOcEx50yo0rEbTbG1gRY6X6Y6WryMyoYKdheDTWlH9OsV2w+Sn
SEMBoc8unuK+24FoL7LU5Ts4V7mgN0QOo+40uilW+uhV6HDvGawaAbQLZnBKLheQ
ZzyPP8aXSL+zkq2dgQrgRJLZMxlwl/P68EjdFYuOFurvMd9zjGSvbz5avl+s1umC
NKu/8FPP1u9cBbxgJP22tu0KlUJDJnbA
-----END CERTIFICATE-----
Generated at Tue Dec 23 04:11:47 2025 by rpki-client