This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File:                     Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier:          sY0ATxZ1H3CHnHfLTfXAa+U6f7q1le9CaL63Us1YgUY=
Subject key identifier:   67:74:BF:D2:6E:B5:31:A3:E5:E6:83:E8:7C:72:C2:3A:3F:7F:CB:7E
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer:       /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number:          E3
Signing time:             Tue 23 Dec 2025 04:27:45 +0000
Manifest this update:     Tue 23 Dec 2025 04:27:44 +0000
Manifest next update:     Tue 30 Dec 2025 04:27:44 +0000
Files and hashes:         1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: ZVicYTohLVpzGmRTLcLIR7MhhgRZqEQ4ODiYK0pESmM=)
                          2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: 6re4BPBhdZPlBhJ6P0bUdH0mQEDnXmK+Ed0vP4MQWeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
                          rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
        Validity
            Not Before: Dec 23 04:27:44 2025 GMT
            Not After : Dec 30 04:27:44 2025 GMT
        Subject: CN=694a1a41-0449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:9f:be:4d:20:9b:51:c0:01:b9:ad:eb:7f:
                    8e:11:bc:e9:94:7b:ca:38:d6:7b:76:73:dd:fb:3e:
                    33:8c:21:39:a8:aa:a4:6c:6f:8c:e9:f2:5f:cf:91:
                    b4:f8:9a:ca:92:d9:48:f1:23:0d:1a:0a:67:06:56:
                    c2:fb:b5:ce:81:03:9b:f3:88:6d:d0:ea:d7:e8:a1:
                    d5:3c:5f:b9:08:e7:12:ae:92:1b:64:3c:a3:46:0f:
                    9b:0f:21:1a:b3:77:c5:69:35:22:c6:7d:d1:e2:49:
                    2c:16:b1:2c:19:e6:17:a8:1d:c3:23:3f:ac:2e:af:
                    ab:e6:0f:d9:68:4c:94:0d:d2:53:c3:15:b2:cb:c7:
                    67:d5:c2:29:8f:c3:60:64:75:1b:03:ad:67:d5:6a:
                    d7:c1:03:89:f6:d5:62:13:d1:18:8b:9b:10:89:62:
                    4e:ab:dc:2c:9c:de:a2:b3:4d:45:e4:ca:16:6d:99:
                    93:47:a1:b6:68:41:08:5c:98:ed:4b:d6:56:9f:8b:
                    ed:0a:ad:16:b2:c9:61:52:e7:12:a8:f3:7a:c5:68:
                    da:0d:9b:c9:78:2c:07:c7:ba:7e:33:0e:45:cc:7a:
                    4a:57:37:74:8a:76:b1:ae:d9:79:19:ba:70:e7:81:
                    59:bd:9c:ef:ac:51:4c:e9:e0:3b:c5:a2:2a:62:98:
                    24:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:74:BF:D2:6E:B5:31:A3:E5:E6:83:E8:7C:72:C2:3A:3F:7F:CB:7E
            X509v3 Authority Key Identifier:
                keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:15:fc:cb:3d:2b:cd:3a:90:f8:1a:ea:81:a0:1f:67:ce:29:
         d6:11:ca:f4:8e:5f:14:59:a1:bc:04:5a:b8:86:43:d3:2a:94:
         44:21:ee:02:90:44:da:e7:12:a8:e3:66:a5:92:6e:0f:72:ed:
         47:87:3c:76:45:e9:c3:20:76:81:6f:5f:35:38:86:a4:3a:43:
         7d:b5:33:c3:05:68:49:11:cb:1b:a4:87:c2:7c:41:b4:ce:ea:
         57:f5:37:d6:2c:b9:b7:c6:bf:67:1b:5d:31:17:42:9f:9b:c7:
         7c:d5:b1:af:6c:3f:8d:bc:03:ba:70:81:89:68:24:81:f6:99:
         97:56:8d:09:40:09:e1:96:43:f9:a6:66:ac:a4:f9:87:a2:fa:
         19:51:c6:7e:e8:3a:bf:38:f6:1f:a3:cd:cd:be:21:39:28:a7:
         b5:42:bb:11:5f:0d:ac:9a:3c:64:49:b5:15:88:99:86:a7:6e:
         0c:87:51:34:43:fe:fb:b4:27:d4:29:1e:e3:71:58:df:55:55:
         18:75:9e:73:b8:fa:79:b3:27:0f:03:97:ee:91:87:b6:11:bb:
         73:19:43:40:63:07:00:e0:43:df:10:62:04:42:a2:4e:ad:39:
         96:98:d9:e3:fe:6f:8f:03:05:6a:28:14:09:66:71:f2:09:76:
         da:b9:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:31:57 2025 by rpki-client