This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File:                     nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier:          yE2W5fRifRrl4S+ON7uzjNL+ZNdgnEsuKXKWQMWmBX0=
Subject key identifier:   E7:77:40:89:ED:84:76:D3:A0:1D:4A:35:DF:A5:3A:99:0A:75:48:E0
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer:       /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number:          80
Signing time:             Fri 19 Dec 2025 05:44:59 +0000
Manifest this update:     Fri 19 Dec 2025 05:44:58 +0000
Manifest next update:     Fri 26 Dec 2025 05:44:58 +0000
Files and hashes:         1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: lVfPVXCrKyvB7i4P/r8ZnAGeGuyXPGKHxvKHHUce/QQ=)
                          2: 06B2C184C06711F094A5BC25C4F9AE02.roa (hash: XHsWgt14mba6jCHltNoKhdxGvt+PpB0JF3/BXTo/7EM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
                          rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
        Validity
            Not Before: Dec 19 05:44:58 2025 GMT
            Not After : Dec 26 05:44:58 2025 GMT
        Subject: CN=6944e65a-7453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:18:a8:21:9d:af:38:38:32:9c:46:97:d6:
                    33:c9:13:22:db:b4:98:47:b0:7f:5d:07:7c:8c:c0:
                    bb:57:b4:13:e8:3c:26:96:a6:eb:b0:98:81:cb:47:
                    c7:17:ed:4d:f7:be:d2:1e:91:27:c5:52:6e:f5:90:
                    5e:69:3e:42:46:08:c6:22:4e:70:91:19:28:f7:e8:
                    c2:b4:a4:e2:1c:8b:4f:15:4a:15:12:eb:8d:91:d2:
                    01:f7:d9:47:a6:2f:bb:ea:1f:9d:02:f1:18:33:01:
                    12:81:18:f4:ae:c9:de:76:51:23:29:1b:f9:29:b3:
                    9d:ac:76:f5:d5:13:de:7f:1d:74:22:20:80:ff:cf:
                    1c:f8:60:15:ed:49:b9:48:c3:8b:e1:4a:29:11:b5:
                    99:73:c8:55:4b:2d:a4:c0:4d:2a:b9:e8:68:f8:24:
                    11:95:7d:25:11:2c:2e:33:77:8c:b6:93:67:b2:ed:
                    21:8e:84:16:e1:a1:90:06:d6:33:c6:6c:a7:02:22:
                    35:0d:cd:4f:a7:21:99:65:ae:2d:b7:32:cc:9d:33:
                    ec:9e:c0:e6:c0:87:3c:e5:d6:d1:c3:ff:a7:05:4b:
                    47:f2:0a:2c:97:af:d7:1e:ad:80:55:f9:8d:1f:97:
                    0c:48:94:a3:3f:5c:d1:8f:f4:7b:f0:f1:18:2d:70:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:40:89:ED:84:76:D3:A0:1D:4A:35:DF:A5:3A:99:0A:75:48:E0
            X509v3 Authority Key Identifier:
                keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:cb:9d:33:8a:0d:27:bc:b1:f6:79:48:8d:18:c8:07:4e:d5:
         9b:87:dd:a6:80:42:e9:ff:7d:56:17:ea:fb:c0:d1:0f:07:3a:
         db:39:d1:33:67:15:d4:66:46:a2:56:cb:4e:a4:fe:a3:a6:e5:
         2f:80:ae:e8:15:54:76:19:df:26:bd:7a:53:db:7e:00:45:78:
         9f:bc:04:89:61:ed:8d:b4:bb:99:bc:63:5c:36:50:d3:fc:d2:
         2f:d0:3a:76:25:e8:4b:60:48:b6:40:c2:be:7d:5b:92:b8:80:
         88:06:6c:f8:17:58:dc:1c:69:1f:83:fb:97:d5:9d:25:de:51:
         ab:ee:5f:93:da:9c:05:07:1a:30:3d:b6:2b:59:47:1f:cb:68:
         bf:40:cf:0d:1a:9c:ff:20:ee:31:6a:f6:7f:9f:12:29:9e:f8:
         9f:b5:b1:b9:2c:23:1d:ab:3f:e3:92:9d:43:1c:7a:21:47:0a:
         08:3f:62:e6:58:bc:43:13:22:80:2d:00:9e:59:4d:5a:2a:d3:
         56:40:82:da:c9:19:9a:d7:89:fa:8a:ea:5d:8c:3a:a9:4f:38:
         cc:4b:83:77:08:f9:c6:53:b9:48:7d:d0:b4:dd:a1:6d:fb:29:
         18:c8:f2:b3:b1:3f:9a:43:fd:04:85:b8:f9:ce:dc:63:e7:95:
         75:4e:4e:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJFREUxMTAvBgNVBAUTKDlEQjI1OEMxNzBCMjMyMjk0RDg2M0Y2MEQyREMwMTIz
Q0RBQUU3ODkwHhcNMjUxMjE5MDU0NDU4WhcNMjUxMjI2MDU0NDU4WjAYMRYwFAYD
VQQDDA02OTQ0ZTY1YS03NDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnZ8YqCGdrzg4MpxGl9YzyRMi27SYR7B/XQd8jMC7V7QT6DwmlqbrsJiBy0fH
F+1N977SHpEnxVJu9ZBeaT5CRgjGIk5wkRko9+jCtKTiHItPFUoVEuuNkdIB99lH
pi+76h+dAvEYMwESgRj0rsnedlEjKRv5KbOdrHb11RPefx10IiCA/88c+GAV7Um5
SMOL4UopEbWZc8hVSy2kwE0queho+CQRlX0lESwuM3eMtpNnsu0hjoQW4aGQBtYz
xmynAiI1Dc1PpyGZZa4ttzLMnTPsnsDmwIc85dbRw/+nBUtH8gosl6/XHq2AVfmN
H5cMSJSjP1zRj/R78PEYLXBHlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd3QInt
hHbToB1KNd+lOpkKdUjgMB8GA1UdIwQYMBaAFJ2yWMFwsjIpTYY/YNLcASPNqueJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkVERS81NUNCMkUwNDFB
QjQxMUYwODVERDY5NEFDNEY5QUUwMi9uYkpZd1hDeU1pbE5oajlnMHR3Qkk4MnE1
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25iSll3WEN5TWlsTmhqOWcwdHdCSTgycTU0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkVERS81NUNCMkUwNDFBQjQxMUYwODVERDY5NEFDNEY5QUUwMi9uYkpZd1hDeU1p
bE5oajlnMHR3Qkk4MnE1NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCny50zig0nvLH2eUiNGMgHTtWbh92mgELp/31WF+r7wNEPBzrbOdEz
ZxXUZkaiVstOpP6jpuUvgK7oFVR2Gd8mvXpT234ARXifvASJYe2NtLuZvGNcNlDT
/NIv0Dp2JehLYEi2QMK+fVuSuICIBmz4F1jcHGkfg/uX1Z0l3lGr7l+T2pwFBxow
PbYrWUcfy2i/QM8NGpz/IO4xavZ/nxIpnviftbG5LCMdqz/jkp1DHHohRwoIP2Lm
WLxDEyKALQCeWU1aKtNWQILayRma14n6iupdjDqpTzjMS4N3CPnGU7lIfdC03aFt
+ykYyPKzsT+aQ/0Ehbj5ztxj55V1Tk4A
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:51:36 2025 by rpki-client