This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File:                     nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier:          7drynwTRUJgo7+1xZAjYHZQ8tbFLRixAmEKbacGAvdQ=
Subject key identifier:   51:60:5F:02:3B:83:1D:22:D3:B5:9E:B6:B6:C7:D9:08:0D:0D:E2:A6
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer:       /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial:       1E62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number:          1E53
Signing time:             Thu 18 Dec 2025 15:59:08 +0000
Manifest this update:     Thu 18 Dec 2025 15:59:07 +0000
Manifest next update:     Thu 25 Dec 2025 15:59:07 +0000
Files and hashes:         1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: Xmm/n+hDB+eNmMdU9kJSoSe5fyMLiMgoHszhk/vFZSA=)
                          2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
                          rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7778 (0x1e62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
        Validity
            Not Before: Dec 18 15:59:07 2025 GMT
            Not After : Dec 25 15:59:07 2025 GMT
        Subject: CN=694424cc-556e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ce:c8:13:01:b5:05:e6:cd:37:42:11:99:81:
                    9f:99:1a:ae:79:f5:03:9b:2e:4f:11:7d:3b:d2:db:
                    c4:dd:40:57:6b:4f:aa:e6:ef:57:05:68:8d:38:db:
                    a5:96:59:55:09:74:f6:87:38:16:b6:01:36:9a:7d:
                    72:9e:d6:0e:8d:95:a3:12:cd:7b:46:35:b5:3d:56:
                    04:b1:70:8a:a1:76:9b:68:6c:6d:e8:7d:6c:d8:70:
                    b3:ab:9c:2c:b1:03:f4:16:6d:e3:80:78:cc:4c:ff:
                    43:9a:d2:bf:f4:cc:59:bc:6c:d2:e1:e5:88:5d:83:
                    a8:45:74:e6:57:18:99:d6:0d:8f:6a:be:c6:a8:c9:
                    b3:cf:fb:29:21:19:cf:57:c7:55:bb:e2:50:5c:21:
                    67:ef:11:ff:62:93:b7:5c:e5:0f:bc:d6:fe:8f:82:
                    4f:67:e3:fc:e8:2c:7a:c2:c7:1c:b7:4f:11:ad:5c:
                    1d:d9:a5:2a:b2:ca:df:f6:c0:72:ce:8c:92:d5:3c:
                    24:f3:97:89:48:1d:91:39:d4:b0:59:31:9e:eb:73:
                    82:72:0e:f5:65:d8:a6:1f:64:ac:a5:66:2c:09:e9:
                    c2:2a:6b:cb:89:e6:d2:e9:13:22:02:78:ea:4d:a3:
                    65:3d:3e:fd:1c:48:c7:28:65:33:c0:26:42:81:b4:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:60:5F:02:3B:83:1D:22:D3:B5:9E:B6:B6:C7:D9:08:0D:0D:E2:A6
            X509v3 Authority Key Identifier:
                keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:81:13:2f:79:34:31:a5:dc:10:44:bd:3e:c5:52:b1:7e:d5:
         5f:84:66:47:72:07:9c:a9:da:c4:2e:f9:d1:24:78:82:95:55:
         c9:1a:b6:2c:65:20:d4:9c:34:aa:ce:62:24:cb:94:ef:97:5e:
         97:5e:e3:5e:0e:21:98:0e:f4:db:31:b0:e2:e1:13:36:cb:9f:
         c6:54:bb:51:4a:11:ef:b4:be:30:97:86:1d:31:1f:6d:c4:40:
         ac:6c:44:ad:70:e4:a9:60:48:08:32:92:59:96:94:f7:76:34:
         5e:ab:eb:ce:7b:93:c2:bb:d8:2d:75:6e:7c:89:72:46:2d:46:
         a5:87:e9:2d:57:fd:44:01:74:17:c4:d6:fd:c7:83:78:38:ee:
         28:96:12:31:b9:31:57:6e:fc:1c:a9:bf:7a:93:5e:eb:6f:5f:
         2a:00:f3:7b:4e:75:83:87:61:6f:92:a7:c8:dc:1f:5a:34:9f:
         89:6d:7d:a5:41:04:84:9b:b1:17:79:ef:e9:19:77:ed:bc:b8:
         20:8f:05:42:cf:b9:3d:06:c7:cc:f3:8c:6f:4d:3f:8f:10:3d:
         1f:08:92:f0:a1:18:6a:40:3b:9f:62:00:d2:aa:b4:5d:08:b0:
         eb:96:f1:e0:85:e6:fa:ac:eb:8b:74:af:f1:ab:10:b2:05:98:
         46:37:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:32:36 2025 by rpki-client