This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
File:                     NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json)
Hash identifier:          OEhHPR+YumVztJ58LY58qORCl/VV68y42uY+H5xJrjc=
Subject key identifier:   07:06:EC:A6:A8:A5:B9:93:BF:CA:38:FE:B7:D3:9E:AA:D0:E5:19:91
Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
Certificate issuer:       /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Certificate serial:       108A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
Manifest number:          107B
Signing time:             Thu 18 Dec 2025 17:12:50 +0000
Manifest this update:     Thu 18 Dec 2025 17:12:49 +0000
Manifest next update:     Thu 25 Dec 2025 17:12:49 +0000
Files and hashes:         1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: vgLJ9RyLyfSHPben+7lvwLQxQKijOEli2JATNhWFdc0=)
                          2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: vKUrCad/wDAN8DcFXzUyprhlGMmsi4Oqt3ZrPDf4rA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
                          rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4234 (0x108a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
        Validity
            Not Before: Dec 18 17:12:49 2025 GMT
            Not After : Dec 25 17:12:49 2025 GMT
        Subject: CN=69443612-27e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7c:9d:7d:1e:85:a3:c6:05:5b:04:85:af:49:
                    ec:e8:a7:00:a7:09:ea:a2:05:90:07:20:27:e1:83:
                    54:1e:c2:79:7f:93:92:e7:7b:bd:1d:9f:1f:38:75:
                    b6:4d:0d:5c:ee:7e:af:4c:a8:02:e5:c5:0e:a7:d7:
                    fd:5a:2d:2e:13:bc:0f:09:14:25:1a:7f:cd:91:2c:
                    37:68:aa:5a:2d:0e:72:ae:14:42:9b:0e:1c:f0:b4:
                    ba:a9:9d:23:28:df:23:7e:f7:f6:99:04:c3:79:51:
                    c2:fa:70:41:4f:94:ac:0d:f6:4a:89:05:e3:d0:0e:
                    5f:35:58:8e:c9:7d:00:58:4b:5f:19:08:36:d4:9e:
                    ab:dd:fb:3f:5a:3b:b0:72:4c:fc:aa:de:a0:43:34:
                    8b:bf:24:d6:93:45:93:86:76:70:2a:26:e1:ec:48:
                    17:31:ba:67:08:77:aa:ed:57:d9:09:49:0d:b2:8f:
                    99:26:18:15:85:62:a6:6f:4d:7c:ab:43:5a:36:71:
                    29:66:49:fd:a0:9b:93:be:b9:0a:9d:d1:00:96:88:
                    eb:09:c3:9d:56:bf:54:78:12:93:06:4a:55:51:1a:
                    81:f9:71:64:8a:3d:53:ef:79:e8:b0:02:b7:e2:b0:
                    f3:be:b1:7f:e5:4b:32:eb:93:91:dc:fd:d5:8a:1d:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:06:EC:A6:A8:A5:B9:93:BF:CA:38:FE:B7:D3:9E:AA:D0:E5:19:91
            X509v3 Authority Key Identifier:
                keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ed:16:a4:b1:b5:67:cb:ff:f1:84:bb:fc:be:b8:08:9c:ee:
         6d:f4:b5:2f:8c:58:a9:c2:2c:10:d7:e3:87:c8:04:f7:83:f2:
         f8:80:d0:17:44:0c:89:52:d9:3a:a8:58:e4:7a:17:58:eb:19:
         de:d3:a7:0a:37:bf:b7:fd:fc:17:bd:2d:4d:a0:da:0e:b1:5f:
         0e:2d:59:59:22:f4:a5:f4:4a:9b:0f:68:86:de:a4:6c:99:4b:
         5c:2b:9c:b6:03:95:03:d0:64:91:d6:11:87:e7:9c:5a:82:a7:
         17:a8:fb:6b:be:a6:26:3f:1d:85:28:34:0a:7c:a1:3c:05:38:
         76:a2:12:4e:6d:59:5e:02:7a:93:84:b6:8b:08:d5:f3:8c:36:
         2c:1b:4c:8a:92:4e:01:53:02:04:7d:3d:fa:d1:93:5b:29:d2:
         e3:46:00:f1:41:08:ad:16:79:7a:1d:27:e5:10:99:92:c3:9f:
         ba:5e:35:41:5d:98:68:f4:97:f8:56:fb:d1:3e:63:93:24:22:
         a7:72:66:2b:da:a1:96:d3:45:0a:45:e5:97:69:a0:fa:83:a5:
         53:99:77:bb:0f:e8:47:9c:91:07:23:19:db:08:e1:c3:b6:d8:
         fa:cc:34:bc:cb:6e:1b:17:6a:71:9f:0d:0e:97:08:b9:87:18:
         21:1b:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:19 2025 by rpki-client