This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
File:                     N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json)
Hash identifier:          L/sixJQ3xXDZwWZir7L3s2Rcd8WtiZ5ZaLpmMQWzeCM=
Subject key identifier:   82:69:3D:E6:F9:C1:9F:33:CA:83:77:0D:02:B1:78:30:69:4C:92:17
Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
Certificate issuer:       /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Certificate serial:       03F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
Manifest number:          03F5
Signing time:             Mon 22 Dec 2025 23:33:49 +0000
Manifest this update:     Mon 22 Dec 2025 23:33:48 +0000
Manifest next update:     Mon 29 Dec 2025 23:33:48 +0000
Files and hashes:         1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: NvSLepiRM0Gr12VoyRDPiCoMQYrYDQJTY4XmzCOvuqY=)
                          2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl
                          rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
        Validity
            Not Before: Dec 22 23:33:48 2025 GMT
            Not After : Dec 29 23:33:48 2025 GMT
        Subject: CN=6949d55c-639f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:10:4a:af:25:85:68:53:f6:c0:9e:97:f4:
                    a2:6d:bc:02:81:70:c0:cf:b9:78:6b:41:14:a4:54:
                    6c:3b:7f:82:cb:fd:f7:f4:ae:c9:52:e8:e5:25:65:
                    96:19:6c:59:d3:b8:61:1c:00:67:68:2d:24:9b:92:
                    f6:33:d9:49:5a:5c:58:4e:f1:5e:39:db:d0:e3:7f:
                    77:ad:ca:01:0b:d5:37:87:14:41:50:27:39:fb:ce:
                    5d:71:8b:7e:68:fb:75:6f:c7:ad:f8:e7:7e:a1:f8:
                    80:35:3f:f0:fe:be:97:71:f6:43:7c:90:d1:e7:c3:
                    27:ea:04:e1:e1:dd:80:d3:39:f7:cc:3c:c1:a1:27:
                    b0:9e:96:60:f2:b0:92:5b:75:7c:3f:01:ee:52:32:
                    ea:86:81:45:95:eb:45:66:67:f2:11:25:f1:b2:8f:
                    f1:07:ca:83:6f:2e:34:65:ae:ab:d7:d4:e0:90:90:
                    06:9d:11:f6:bc:d6:d7:7b:11:ef:37:78:d5:44:82:
                    27:ab:fd:bd:88:dd:5e:fb:c8:36:3b:61:72:48:9e:
                    ab:02:1e:cb:5c:91:da:34:41:5c:41:6d:c5:5f:d1:
                    b7:76:d1:1e:6a:1c:1e:7b:f0:79:13:59:8d:20:b6:
                    a2:c8:83:51:87:2a:65:b5:ec:d5:cb:52:02:a5:15:
                    2c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:69:3D:E6:F9:C1:9F:33:CA:83:77:0D:02:B1:78:30:69:4C:92:17
            X509v3 Authority Key Identifier:
                keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:1c:05:67:28:8a:7c:96:25:18:f4:b6:dd:32:49:62:91:
         af:3d:69:9e:be:96:c1:fe:cb:a8:66:1d:0a:41:1c:4d:33:1e:
         06:ee:a1:62:24:e8:50:2f:71:25:a4:7b:c0:e0:65:37:08:c7:
         b6:99:af:62:d3:48:6a:60:40:b8:f8:a8:59:3d:79:b1:78:c2:
         da:2f:9c:c2:a4:e3:d6:2e:7c:11:d5:cd:33:93:b7:b0:38:63:
         75:e1:1b:fc:1d:39:44:f2:76:ba:33:96:2a:9f:7a:8d:b8:c7:
         f4:bd:80:b2:66:a6:09:6f:43:f0:e7:d1:cb:0f:e5:96:9a:d2:
         5f:59:94:1b:8f:07:4b:a2:bf:42:04:8c:55:7b:01:b1:12:9d:
         62:2e:6c:ba:3b:23:49:c1:de:47:f2:82:6a:62:76:5f:6e:c5:
         8a:57:b9:b0:84:6d:4d:8d:34:ee:0d:36:5d:15:68:3a:b3:8f:
         cc:de:f0:8e:8a:4e:09:f8:b8:cb:cc:83:f6:64:84:a8:70:15:
         78:06:19:d0:55:3d:be:4f:17:95:05:83:e5:de:fa:a1:62:53:
         3e:ad:79:0c:d9:bd:b9:8c:cd:ee:0e:41:ec:31:3c:e0:2e:b2:
         37:2d:d2:18:be:ca:ad:ea:a9:e5:29:f3:d6:3a:ec:1f:61:5e:
         a0:06:fb:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw
QjRBMDIzM0EwHhcNMjUxMjIyMjMzMzQ4WhcNMjUxMjI5MjMzMzQ4WjAYMRYwFAYD
VQQDDA02OTQ5ZDU1Yy02MzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApVgQSq8lhWhT9sCel/SibbwCgXDAz7l4a0EUpFRsO3+Cy/339K7JUujlJWWW
GWxZ07hhHABnaC0km5L2M9lJWlxYTvFeOdvQ4393rcoBC9U3hxRBUCc5+85dcYt+
aPt1b8et+Od+ofiANT/w/r6XcfZDfJDR58Mn6gTh4d2A0zn3zDzBoSewnpZg8rCS
W3V8PwHuUjLqhoFFletFZmfyESXxso/xB8qDby40Za6r19TgkJAGnRH2vNbXexHv
N3jVRIInq/29iN1e+8g2O2FySJ6rAh7LXJHaNEFcQW3FX9G3dtEeahwee/B5E1mN
ILaiyINRhypltezVy1ICpRUsYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJpPeb5
wZ8zyoN3DQKxeDBpTJIXMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw
ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm
ZnY1OUt3UklQdGdMU2dJem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCd/BwFZyiKfJYlGPS23TJJYpGvPWmevpbB/suoZh0KQRxNMx4G7qFi
JOhQL3ElpHvA4GU3CMe2ma9i00hqYEC4+KhZPXmxeMLaL5zCpOPWLnwR1c0zk7ew
OGN14Rv8HTlE8na6M5Yqn3qNuMf0vYCyZqYJb0Pw59HLD+WWmtJfWZQbjwdLor9C
BIxVewGxEp1iLmy6OyNJwd5H8oJqYnZfbsWKV7mwhG1NjTTuDTZdFWg6s4/M3vCO
ik4J+LjLzIP2ZISocBV4BhnQVT2+TxeVBYPl3vqhYlM+rXkM2b25jM3uDkHsMTzg
LrI3LdIYvsqt6qnlKfPWOuwfYV6gBvvh
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:50 2025 by rpki-client