This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
File:                     NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json)
Hash identifier:          Ptn+/O4EWIUL+8CXfxlNqsYxuFyEzOFKCOCDip+QwFg=
Subject key identifier:   76:82:80:80:E2:3C:66:EF:C5:EE:0E:27:99:2A:BD:03:94:FF:23:E7
Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
Certificate issuer:       /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Certificate serial:       1E40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
Manifest number:          1E32
Signing time:             Sun 28 Dec 2025 15:54:10 +0000
Manifest this update:     Sun 28 Dec 2025 15:54:10 +0000
Manifest next update:     Sun 04 Jan 2026 15:54:10 +0000
Files and hashes:         1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: ahbxNQR6dOOhy/5ug8XDcbUIsNk99ZTRnOCsX9ynLYg=)
                          2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
                          rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 15:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7744 (0x1e40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
        Validity
            Not Before: Dec 28 15:54:10 2025 GMT
            Not After : Jan  4 15:54:10 2026 GMT
        Subject: CN=695152a2-d470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:8f:44:4a:38:68:24:b0:90:80:11:12:bb:
                    5c:c8:70:c1:b7:e3:1c:8b:f4:fe:9d:b7:bb:d7:78:
                    88:62:0b:71:d2:39:b7:6e:d2:95:3b:6a:0f:c9:36:
                    a7:db:91:48:a4:ba:bc:9a:09:9c:de:5b:bb:72:d4:
                    98:48:84:d2:e6:f9:66:47:61:6f:5c:5c:76:29:16:
                    e3:a0:5d:bb:ee:10:f7:25:9f:04:71:44:ce:f3:49:
                    de:d7:0b:ba:51:9f:27:0f:b6:c6:25:91:1f:e5:69:
                    79:83:f6:13:1b:f6:9c:8d:ea:9a:0e:20:7a:63:31:
                    a2:62:e6:67:e1:bf:fb:3c:12:e1:67:99:8f:3a:8f:
                    14:7f:f1:10:3c:fd:d5:a7:f2:a1:11:52:97:c0:3d:
                    a1:18:c4:63:1c:ca:68:45:0a:0b:f6:43:9b:82:97:
                    11:9f:12:7d:e6:9f:18:57:47:d1:52:5e:cd:19:04:
                    4e:0f:2d:2f:07:4f:82:b6:c9:cf:18:15:0d:53:74:
                    23:ea:59:94:73:e6:00:0b:41:69:ac:86:0b:14:68:
                    b4:cf:65:98:3c:e3:44:3c:97:19:b2:5c:4e:c2:a7:
                    11:33:ff:0c:67:f1:87:c3:7a:31:0c:07:e5:1e:05:
                    c9:34:ab:b1:eb:8e:81:3f:d5:dd:54:65:76:2a:d5:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:82:80:80:E2:3C:66:EF:C5:EE:0E:27:99:2A:BD:03:94:FF:23:E7
            X509v3 Authority Key Identifier:
                keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c8:26:3d:3c:3e:d3:61:93:46:7c:da:2e:5f:af:62:ff:be:
         18:a2:68:1b:89:8b:98:2d:e3:75:5d:c0:10:de:51:e4:d3:06:
         eb:5b:51:8d:fa:29:ae:f3:31:2e:63:17:88:0d:02:9c:b0:33:
         5b:08:25:c1:6d:38:45:5c:41:2a:e6:f4:b0:f4:75:79:ee:c9:
         e2:64:80:5d:35:ad:c6:3c:54:d0:a6:91:fe:fb:64:29:6e:fb:
         cc:a7:02:72:f6:1a:24:49:eb:d9:8e:94:f7:0f:1b:cd:27:e0:
         e2:ad:71:e9:38:d8:ba:4e:45:d8:38:5e:7e:de:ff:dc:c4:b8:
         d0:4b:5a:2a:0b:b0:00:05:08:bf:88:c8:10:1a:e5:7f:73:dc:
         ef:f1:9b:a6:82:ba:e9:33:60:d2:59:f8:06:93:44:11:ed:4a:
         bd:4e:d2:31:1f:ef:01:b9:34:f9:17:ef:7b:d1:0d:a2:99:01:
         f1:b7:04:16:02:12:b8:03:dc:9d:53:cb:71:ea:f1:11:2c:47:
         26:07:bc:8b:13:57:80:f8:57:a9:ec:62:35:64:22:1d:96:23:
         2e:f5:0b:82:82:ed:ce:08:bd:d8:1b:af:bb:3d:3d:b8:43:c7:
         75:34:89:46:db:5a:60:73:52:07:fd:36:80:53:ec:1c:e8:ba:
         25:77:4f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 15:00:03 2025 by rpki-client