This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
File:                     n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json)
Hash identifier:          CDOFk+ZHIbOgBwWWQPnqNhKsIFkFnstUa1smbuNQNGo=
Subject key identifier:   2C:2B:34:A2:C6:C6:C3:D7:07:CB:51:18:A7:2B:70:79:A7:47:9E:C9
Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8
Certificate issuer:       /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
Manifest number:          0169
Signing time:             Tue 09 Dec 2025 02:04:55 +0000
Manifest this update:     Tue 09 Dec 2025 02:04:54 +0000
Manifest next update:     Tue 16 Dec 2025 02:04:54 +0000
Files and hashes:         1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: XS+ykWK0CbnqpYhyJG2opukrBznahcI4rwvMNC8gBLI=)
                          2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 02:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
        Validity
            Not Before: Dec  9 02:04:54 2025 GMT
            Not After : Dec 16 02:04:54 2025 GMT
        Subject: CN=693783c6-402e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:9e:88:1e:36:ac:94:b8:6a:77:d3:02:0e:
                    0a:ba:2b:0f:0d:d5:53:aa:25:91:c7:f6:a2:48:16:
                    2b:5f:59:b7:a3:ba:98:1e:88:be:df:4e:45:d4:6e:
                    54:55:94:11:62:22:2f:1c:4e:4a:e8:c3:49:38:d9:
                    26:fc:86:6c:c9:cb:c0:85:fd:c9:7c:55:d5:86:f1:
                    7a:86:fe:50:cf:dd:33:e7:e1:5e:bd:b9:55:11:5c:
                    2f:ac:c4:b3:35:79:c1:ad:9d:3a:f9:e7:a8:6c:94:
                    58:10:af:3b:35:b1:bd:25:23:09:fc:9e:12:44:6d:
                    fb:8b:9e:0c:dd:54:fd:7a:0e:4d:f0:43:80:13:23:
                    30:be:96:9a:7e:22:54:4f:69:82:98:73:a8:5f:d3:
                    b6:01:9a:d8:29:49:e4:55:98:0a:b5:cd:e5:b2:38:
                    ce:ad:b0:d3:13:8a:4a:e2:95:5e:8a:6b:37:4a:63:
                    34:a7:14:5e:92:df:51:02:93:d1:e8:9d:81:d9:a9:
                    af:f8:ab:31:63:ee:ef:9e:7f:90:b4:f9:ab:0f:be:
                    25:c7:2c:ac:76:84:8d:0f:9f:74:6e:fe:bc:5c:77:
                    ac:05:25:f1:35:f0:14:d1:93:c4:ca:9a:bf:cb:84:
                    be:bb:14:bf:b3:2b:00:0e:94:ea:48:ac:99:5e:7e:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2B:34:A2:C6:C6:C3:D7:07:CB:51:18:A7:2B:70:79:A7:47:9E:C9
            X509v3 Authority Key Identifier:
                keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:6d:e3:84:22:b8:31:54:90:2e:b5:b0:26:b9:48:80:25:
         03:9f:ec:f8:fa:19:31:dc:23:43:f3:50:ea:50:c6:41:18:8c:
         f7:63:ba:b8:85:25:1e:ac:7b:8f:10:6b:7a:b4:91:d7:98:90:
         67:a1:55:81:d3:43:6c:ce:2f:d1:1d:81:d5:1d:04:03:3c:3b:
         ab:a2:4b:b2:f2:1a:df:8b:d5:83:16:2e:c6:fb:cd:57:3a:86:
         1d:19:21:e3:69:8d:15:17:1f:bb:05:fd:0a:df:11:99:3b:36:
         1e:c9:8a:0e:f8:29:84:d2:00:72:a1:f7:c7:79:63:97:ce:dc:
         3a:ad:a6:5d:99:3f:7c:c3:74:67:13:c2:a4:20:db:e9:50:ff:
         2a:8e:e4:88:c6:34:8e:24:bf:28:79:3d:b1:39:92:b8:bb:97:
         a3:3b:12:9b:d8:de:d1:2b:38:cd:6f:93:c5:17:88:87:34:8d:
         66:57:97:26:23:c1:0d:4c:67:72:c7:1f:69:df:2f:00:a9:8e:
         37:90:df:b6:10:98:5c:22:ce:53:83:d6:91:39:cb:d9:5a:c9:
         a8:be:b5:41:78:a8:3e:d8:f9:6e:b6:48:0b:6d:10:bc:d5:57:
         53:bf:37:26:6d:73:6f:e6:86:5c:cf:8b:67:84:c2:ae:c0:28:
         b1:88:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:33:14 2025 by rpki-client