This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
File:                     N6Zf20DoxlmxflAA-ommVoCXbVs.mft (raw, json)
Hash identifier:          BkhTEqG0EkK8BNJSEyiW8WxPrxxM3Dt+Ma9/2V88Ouw=
Subject key identifier:   78:F2:73:21:F9:CF:33:FB:E7:C4:58:DE:79:F6:4F:28:3F:2D:09:3C
Authority key identifier: 37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B
Certificate issuer:       /CN=A91A6F56/serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
Manifest number:          44
Signing time:             Wed 03 Dec 2025 05:38:21 +0000
Manifest this update:     Wed 03 Dec 2025 05:38:21 +0000
Manifest next update:     Wed 10 Dec 2025 05:38:20 +0000
Files and hashes:         1: N6Zf20DoxlmxflAA-ommVoCXbVs.crl (hash: 7JauQ438Pb1/M1uwiwfF/BAKHsLY8UO4QLwc6MvFh74=)
                          2: 482874AE710E11F0B4CBA430C4F9AE02.roa (hash: ZwA3RLDFZuJuq+OnGHO5YHGm+YL4BWQ+qyec67LETqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F56, serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
        Validity
            Not Before: Dec  3 05:38:21 2025 GMT
            Not After : Dec 10 05:38:20 2025 GMT
        Subject: CN=692fcccd-4615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:06:f2:e9:5b:6a:37:d4:d0:63:f0:43:32:
                    09:b9:67:4a:9c:9a:c1:8c:17:97:77:42:c7:d1:2b:
                    90:16:ca:53:57:b8:e2:d6:2e:b8:df:87:b4:44:e0:
                    30:69:dd:76:66:b4:78:f3:18:e8:ee:72:e1:0a:4c:
                    24:1a:7a:b6:2e:e9:f8:37:d0:ca:28:fd:6f:ba:f9:
                    37:50:6b:ec:58:3d:29:c2:a7:04:a5:d5:93:44:ef:
                    70:af:dd:85:e0:d5:46:53:6e:52:3e:ff:c2:e7:1e:
                    54:c5:71:a7:ed:32:24:c0:a4:34:ae:fd:4b:2d:7e:
                    19:d0:3c:30:5a:29:a9:d9:b2:f8:a1:a4:90:b6:3a:
                    52:da:b2:58:48:47:56:19:1d:e8:ff:8c:a7:64:41:
                    44:b8:67:5d:db:62:19:37:06:3e:5d:d8:60:36:60:
                    4b:3e:a1:fa:12:e2:8d:c5:f6:25:ea:52:23:d0:36:
                    6d:40:6f:b1:a5:bb:7b:f4:b0:23:01:6f:9f:26:5b:
                    46:6a:40:ce:a2:58:07:25:64:85:10:a4:05:88:40:
                    5d:8a:f1:7d:93:96:64:62:e7:d9:fc:a2:79:ca:fc:
                    55:19:f5:f3:f6:13:d4:86:79:07:84:9b:4d:ca:92:
                    b4:e9:7d:a1:c8:99:89:93:e6:66:46:7e:16:12:63:
                    dc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F2:73:21:F9:CF:33:FB:E7:C4:58:DE:79:F6:4F:28:3F:2D:09:3C
            X509v3 Authority Key Identifier:
                keyid:37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:f4:b3:eb:dc:58:ca:b7:33:45:55:4e:6c:7e:94:76:46:
         86:9c:33:5c:5d:32:63:cd:2b:36:8f:6b:99:fd:01:aa:93:fe:
         6c:e2:04:be:c8:f4:3e:93:81:5e:c7:16:63:fd:48:54:96:28:
         7e:18:9e:1e:6a:da:6c:dd:b6:2c:14:ef:93:21:6c:a9:91:5c:
         8d:da:fd:26:ba:49:c9:ec:ce:58:90:30:ec:95:94:70:74:82:
         d9:0c:84:68:99:b2:41:20:34:2d:9a:49:e8:d5:df:33:a6:3d:
         5d:7e:7f:e4:db:4c:ec:54:ed:31:4b:2c:bf:bf:2b:6a:96:92:
         11:cf:f4:a8:ed:9a:4b:66:aa:62:52:e9:07:a5:91:54:f7:4e:
         86:45:7e:87:7b:f6:2b:58:4c:b1:3b:75:b7:be:c0:e7:4f:8c:
         cb:22:4d:03:55:aa:85:2b:d7:d6:05:60:72:8f:40:84:ff:f6:
         f7:e9:d5:36:b8:2a:b4:31:fe:ab:8e:2a:89:0b:bc:ae:92:9f:
         82:5f:c4:58:1d:21:ca:e1:7e:67:6e:7a:84:50:b9:55:d3:2c:
         61:4e:0c:d7:46:80:a0:f9:46:93:1f:84:9b:a7:74:07:75:fe:
         0c:46:b6:d6:df:65:f3:18:ef:60:3f:ad:ee:d8:f2:6e:98:77:
         2e:81:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:44 2025 by rpki-client