This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft
File:                     NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json)
Hash identifier:          jB3nbb7yLg2xNamHNRQFBebqnJ/dRDQwHLFlujNUSMs=
Subject key identifier:   51:DB:E2:C4:8E:23:CB:68:FF:D2:41:8C:82:D1:BF:A4:48:D5:F3:E1
Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78
Certificate issuer:       /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978
Certificate serial:       26C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft
Manifest number:          26B3
Signing time:             Thu 18 Dec 2025 15:37:01 +0000
Manifest this update:     Thu 18 Dec 2025 15:37:00 +0000
Manifest next update:     Thu 25 Dec 2025 15:37:00 +0000
Files and hashes:         1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: 1MDuLZ9ru/FRaaxj3wK0f16a3GIh/Y/40J/U6s3JK+M=)
                          2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 7A1IMu+LIGDsrLSPFNBgTLonAK/3FwEXR3H+PIKYqo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl
                          rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9926 (0x26c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978
        Validity
            Not Before: Dec 18 15:37:00 2025 GMT
            Not After : Dec 25 15:37:00 2025 GMT
        Subject: CN=69441f9c-2e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:ff:b5:24:4a:22:06:71:09:13:5b:43:f6:
                    d6:1d:b1:fa:8d:87:70:50:0b:b1:ff:2f:7d:32:75:
                    aa:9d:b5:d4:5d:36:bf:d0:dc:ab:d6:86:38:4e:f4:
                    4d:e9:91:3a:4a:95:08:80:a8:d3:2b:5f:51:07:d9:
                    7b:44:e6:6c:09:21:46:27:a8:77:33:cd:bf:e7:16:
                    e3:9c:e7:d1:f9:b5:06:d0:d6:e4:9f:ac:8e:50:89:
                    11:4e:cc:ee:93:62:18:5a:ee:3e:a7:8e:b1:c0:e9:
                    c4:9f:09:75:e7:75:d8:10:52:ba:75:95:89:e8:c6:
                    57:df:56:1e:b8:1f:e2:c9:41:46:c9:a6:8e:c2:53:
                    5d:8b:01:f0:6a:74:79:76:e5:2d:aa:ac:4f:a7:9b:
                    9e:d1:1a:80:ff:38:2e:ba:b6:66:5b:b2:20:4b:0e:
                    f9:0d:57:94:50:d2:b9:35:9f:21:ad:f5:e3:0c:ee:
                    33:44:fb:0d:eb:55:44:b6:da:7e:4a:f1:40:4a:48:
                    3d:ba:c5:fd:ff:cf:71:be:d7:4c:83:70:c9:0e:77:
                    15:43:06:c1:9c:30:2b:bd:33:aa:ea:e8:ba:28:ac:
                    e2:cc:e4:34:e8:2a:b6:50:e6:ca:0c:ae:a9:c3:2c:
                    e7:8c:d1:7c:59:45:eb:a2:a5:54:27:93:4a:d2:3b:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DB:E2:C4:8E:23:CB:68:FF:D2:41:8C:82:D1:BF:A4:48:D5:F3:E1
            X509v3 Authority Key Identifier:
                keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:33:ed:2c:63:59:a7:05:95:00:3c:0d:68:d7:86:e6:9b:
         c5:ef:13:6e:82:4f:c5:12:aa:85:c4:82:51:cc:82:80:d8:d3:
         6c:08:78:88:d5:aa:10:5c:11:06:67:8d:7e:e3:a0:b6:3a:79:
         28:80:fa:71:59:cc:b0:e6:e4:42:19:3b:2c:83:b0:92:b8:ec:
         2b:12:40:ec:e2:14:92:54:a8:91:80:b0:c8:cd:34:74:90:12:
         71:36:b0:8a:f0:2d:31:bd:4e:1a:40:25:24:55:dc:de:62:eb:
         ab:6c:00:2e:29:4d:ec:38:70:5c:6e:fc:ba:39:ea:cc:e7:52:
         f0:a7:0e:64:02:38:02:51:ca:4f:c8:f3:9a:f4:7b:03:7c:be:
         98:a2:bb:1a:48:96:eb:a4:6b:8e:8c:0a:67:c2:4b:07:69:c0:
         e0:d2:0a:be:a9:c1:3a:6b:43:04:8d:eb:7e:21:21:86:59:fe:
         0a:f3:8f:e4:82:00:3a:ae:d8:48:a3:e9:51:00:2d:7d:78:aa:
         80:35:7a:57:2d:33:b5:aa:fd:b8:73:62:d1:b7:62:89:92:59:
         1a:f4:25:bf:f9:b8:34:63:ae:9e:b6:ea:d9:d6:83:eb:eb:8d:
         84:51:c9:29:cf:c9:5a:26:6a:35:71:34:3c:f9:bf:1f:65:d5:
         84:b9:e6:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF
MEFBQjc5NzgwHhcNMjUxMjE4MTUzNzAwWhcNMjUxMjI1MTUzNzAwWjAYMRYwFAYD
VQQDDA02OTQ0MWY5Yy0yZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv///tSRKIgZxCRNbQ/bWHbH6jYdwUAux/y99MnWqnbXUXTa/0Nyr1oY4TvRN
6ZE6SpUIgKjTK19RB9l7ROZsCSFGJ6h3M82/5xbjnOfR+bUG0Nbkn6yOUIkRTszu
k2IYWu4+p46xwOnEnwl153XYEFK6dZWJ6MZX31YeuB/iyUFGyaaOwlNdiwHwanR5
duUtqqxPp5ue0RqA/zguurZmW7IgSw75DVeUUNK5NZ8hrfXjDO4zRPsN61VEttp+
SvFASkg9usX9/89xvtdMg3DJDncVQwbBnDArvTOq6ui6KKzizOQ06Cq2UObKDK6p
wyznjNF8WUXroqVUJ5NK0jultQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHb4sSO
I8to/9JBjILRv6RI1fPhMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD
NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND
emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBz8zPtLGNZpwWVADwNaNeG5pvF7xNugk/FEqqFxIJRzIKA2NNsCHiI
1aoQXBEGZ41+46C2OnkogPpxWcyw5uRCGTssg7CSuOwrEkDs4hSSVKiRgLDIzTR0
kBJxNrCK8C0xvU4aQCUkVdzeYuurbAAuKU3sOHBcbvy6OerM51Lwpw5kAjgCUcpP
yPOa9HsDfL6YorsaSJbrpGuOjApnwksHacDg0gq+qcE6a0MEjet+ISGGWf4K84/k
ggA6rthIo+lRAC19eKqANXpXLTO1qv24c2LRt2KJklka9CW/+bg0Y66eturZ1oPr
642EUckpz8laJmo1cTQ8+b8fZdWEueZs
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:47:57 2025 by rpki-client