This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
File:                     N_UNneVOb9butTKnYVzzDtJC72E.mft (raw, json)
Hash identifier:          NAaLoYu/o+xFN8Y9rQI41Fj3CIJRZ1BO+bce64Ipu8s=
Subject key identifier:   6F:46:B3:88:5D:2C:41:F1:57:C6:8F:3D:BD:7D:0C:1F:80:F4:46:4D
Authority key identifier: 37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61
Certificate issuer:       /CN=A91B42CA/serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61
Certificate serial:       17D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
Manifest number:          53C9
Signing time:             Mon 22 Dec 2025 14:58:26 +0000
Manifest this update:     Mon 22 Dec 2025 14:58:25 +0000
Manifest next update:     Mon 29 Dec 2025 14:58:25 +0000
Files and hashes:         1: N_UNneVOb9butTKnYVzzDtJC72E.crl (hash: +OUJcvMiQYkacDc4j1ocXT2kS4K1au/GU5Olexq0M3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl
                          rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 14:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6105 (0x17d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B42CA, serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61
        Validity
            Not Before: Dec 22 14:58:25 2025 GMT
            Not After : Dec 29 14:58:25 2025 GMT
        Subject: CN=69495c92-4403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:99:ac:83:84:50:98:7c:ee:d5:e8:02:fb:
                    81:50:ed:71:e3:cc:03:5f:23:9a:95:cd:66:0d:b4:
                    7b:4d:91:12:92:5d:5d:78:3f:1a:8b:ab:0d:6f:5c:
                    65:ab:b9:fe:0c:8a:16:e3:9b:8c:db:33:52:4d:19:
                    9e:de:97:94:76:20:a2:6d:c2:1f:f5:e7:c6:4b:27:
                    f0:1d:28:f4:84:71:26:0c:46:15:66:3e:4e:ec:9f:
                    c7:06:2a:10:f9:21:71:f3:67:bd:9b:83:b0:6b:dd:
                    6f:ff:f2:a1:5a:5f:75:9f:0f:d7:3a:8e:3c:93:7d:
                    7e:8b:fe:66:08:0d:2a:50:d0:28:2a:60:95:7b:fd:
                    81:dc:87:2d:d5:b9:2d:e7:da:45:4b:94:cd:92:81:
                    ea:16:06:f5:93:26:f5:60:3a:a0:b1:4a:e2:4f:f6:
                    34:a2:86:d4:1f:9c:09:3d:12:01:a5:7e:22:57:94:
                    a3:47:2f:14:68:f6:d7:36:31:fc:35:18:a0:91:4b:
                    0d:81:f7:4d:43:62:17:30:3c:f0:fb:36:33:9a:39:
                    5a:04:b7:8e:62:13:d7:fb:f1:25:c9:60:9f:13:e0:
                    00:b8:bb:23:65:15:32:8c:5a:f4:c1:02:32:40:f0:
                    d7:1d:49:07:21:58:8d:7b:5b:8f:35:55:85:d6:db:
                    8a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:46:B3:88:5D:2C:41:F1:57:C6:8F:3D:BD:7D:0C:1F:80:F4:46:4D
            X509v3 Authority Key Identifier:
                keyid:37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e6:52:5a:31:3d:23:d0:43:5c:f8:6c:1d:f1:b6:d5:51:b8:
         a6:40:0d:d9:18:b6:75:e1:35:35:9a:ca:ce:c5:d7:11:1d:8e:
         19:82:70:21:2a:73:df:eb:39:4f:52:50:08:97:23:29:a6:1a:
         80:09:f9:13:35:2d:6d:bb:4a:da:58:62:d8:5f:10:db:c5:2a:
         04:15:29:da:bc:80:21:3b:a5:2b:fd:18:2d:f8:ae:79:84:1b:
         66:36:03:67:a3:e7:85:1d:0d:5e:63:fd:47:41:a2:31:fa:bd:
         26:d9:62:a7:57:b8:ac:25:54:4a:b6:b0:a9:65:4d:7b:48:75:
         72:70:67:e3:c6:b7:c6:d3:1c:aa:7e:13:3d:42:4c:61:7c:a7:
         ce:d6:6f:7c:6d:aa:0b:76:b1:b4:89:b1:59:61:ce:3e:2c:6d:
         87:29:c1:d6:f8:bb:3e:98:30:0b:95:7f:30:ac:48:f3:5c:94:
         d5:4e:f7:3d:09:0e:f2:6a:ed:0c:9f:e6:c7:60:ba:7b:0e:8a:
         32:0c:88:35:64:e6:cb:9e:cd:79:9b:61:60:47:e0:93:4b:13:
         44:fe:70:36:ec:91:c3:09:43:8b:88:b9:78:b2:15:31:72:92:
         1c:6d:af:09:a9:51:94:87:c9:dd:89:f6:43:d9:81:b0:96:8e:
         93:9d:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:48 2025 by rpki-client