This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
File:                     n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json)
Hash identifier:          KIr3Ihfhep2JR3FqiS9pFEedtRZ9oGcdI3nM9r0Uv/A=
Subject key identifier:   74:17:60:01:30:19:A1:06:70:57:F7:C6:22:0C:CD:74:0C:20:87:B2
Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
Certificate issuer:       /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
Manifest number:          97
Signing time:             Tue 23 Dec 2025 05:23:57 +0000
Manifest this update:     Tue 23 Dec 2025 05:23:56 +0000
Manifest next update:     Tue 30 Dec 2025 05:23:56 +0000
Files and hashes:         1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: 9Q7JzRga6xPw7nnaA/2IXQ3jZA8A3MHa/qL5GOxr7ck=)
                          2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: VbFrpRfV71p262oGg48B23Is9OV+1OR5UpiiECaYQ/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
        Validity
            Not Before: Dec 23 05:23:56 2025 GMT
            Not After : Dec 30 05:23:56 2025 GMT
        Subject: CN=694a276d-4f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:e5:52:cb:2f:2e:a7:05:1a:1c:b8:06:e6:
                    82:07:c6:c3:d5:a5:91:9c:11:a6:1d:e3:6f:f6:72:
                    06:04:68:63:80:d3:3d:a8:f0:21:20:85:0e:57:72:
                    63:28:f9:2d:dc:55:79:1c:27:1b:7d:53:33:d0:29:
                    9f:4a:a0:d0:18:a0:6a:3b:52:ac:59:70:b5:3d:84:
                    10:71:c6:e3:c0:40:03:4b:3a:3a:01:61:85:77:eb:
                    12:90:0f:27:74:4a:e2:90:4a:1d:6a:52:c2:e2:7f:
                    20:fd:4c:e1:0c:a8:28:f3:40:72:8b:9b:08:ad:60:
                    0e:d3:2c:83:32:d9:c9:35:e0:f9:a9:58:86:8b:8f:
                    f4:28:25:82:f1:2f:f3:94:ca:fc:d2:57:1e:ad:a3:
                    d6:29:c2:95:02:13:f2:9e:b0:ff:08:87:9a:84:03:
                    33:51:10:06:e3:b3:dd:06:a2:24:5d:04:e3:7f:e6:
                    40:9d:61:4f:9f:dc:8c:97:24:02:73:6f:4c:99:2e:
                    74:8f:18:dc:69:db:c1:3d:ac:81:62:e1:40:51:98:
                    79:2e:9d:63:dc:47:53:bd:ab:65:f8:9a:be:70:3e:
                    a8:aa:61:98:ae:32:3e:00:e0:3e:4a:4b:3c:f8:9e:
                    d8:45:66:91:5f:19:93:d5:e7:e5:44:94:2f:e2:63:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:17:60:01:30:19:A1:06:70:57:F7:C6:22:0C:CD:74:0C:20:87:B2
            X509v3 Authority Key Identifier:
                keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:97:2a:fb:b5:00:a5:32:37:95:c4:fd:e8:75:01:bc:00:a0:
         6b:88:45:e4:21:24:c8:2b:78:10:46:09:41:ea:fb:54:dc:1d:
         45:a4:c2:80:75:b9:01:c2:b5:58:98:03:c2:2e:f3:09:51:78:
         da:ab:ce:bc:f5:4e:91:ed:c7:70:99:20:c9:5d:71:97:7e:bc:
         85:1c:13:d5:01:14:cf:eb:76:58:62:57:b2:cc:a7:62:1d:67:
         59:65:bf:f0:7f:ed:21:ac:4d:f8:d6:c6:de:41:6e:fe:33:b6:
         76:cb:4d:3f:f6:49:81:b9:29:52:fc:d8:c6:e3:d7:41:51:a4:
         ec:a7:7e:6e:50:6d:3e:69:ad:3f:83:c6:ce:7f:dc:b6:32:aa:
         61:c3:81:23:62:fa:e1:38:af:4a:d6:f0:4d:ec:16:08:4a:40:
         0b:58:b6:ba:48:91:aa:01:f9:5a:ae:2f:5c:0f:91:9a:0b:ff:
         eb:03:e4:4e:e1:16:1b:c7:65:b5:eb:30:5f:58:cc:2d:c1:84:
         25:a1:fe:11:1b:52:2f:80:d5:a3:fb:a3:86:4a:98:18:46:4a:
         a4:4c:41:58:7c:37:17:ff:2c:95:ac:71:70:b7:5f:6b:54:c3:
         ce:29:92:51:4e:c2:12:bf:80:48:c9:1a:ed:b4:ee:c4:87:d2:
         df:68:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 21:53:01 2025 by rpki-client