This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File:                     NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier:          L8obQMlad1RHRly2DB2fJR0hhBEYQAG3h99lT+ILqFA=
Subject key identifier:   DA:F6:D4:A0:43:73:33:F5:A0:BA:88:19:34:4D:DB:49:10:A6:11:3D
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer:       /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial:       0B2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number:          0B26
Signing time:             Wed 31 Dec 2025 18:59:12 +0000
Manifest this update:     Wed 31 Dec 2025 18:59:12 +0000
Manifest next update:     Wed 07 Jan 2026 18:59:12 +0000
Files and hashes:         1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: RpRMLEBxIOEy8MNYrV0BnDe9bbU9m4oRXaOhTLftnlw=)
                          2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: PexI7Ux7URSg3e/gBgi7b1d+EMkFgIyBhb6944l9JRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
                          rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 18:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2861 (0xb2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
        Validity
            Not Before: Dec 31 18:59:12 2025 GMT
            Not After : Jan  7 18:59:12 2026 GMT
        Subject: CN=69557280-d838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:3c:d7:57:b4:3a:eb:05:98:da:01:d9:de:
                    26:d4:4d:dd:41:9e:f3:98:8e:f2:e3:14:f4:9c:09:
                    e5:96:1d:6b:18:f0:c9:75:df:e6:2e:ac:06:55:f3:
                    76:a9:5e:91:1a:25:28:a0:6d:5a:bb:71:15:99:fd:
                    b2:3b:08:29:70:e8:a7:81:48:2a:a8:c9:13:8e:f3:
                    2d:72:85:53:b2:05:39:39:c6:ec:5e:cb:e4:da:63:
                    22:d5:9d:a6:ac:51:91:1a:3c:0b:2a:c9:78:05:f8:
                    a3:cd:1c:7e:1e:d8:29:e7:5d:78:2c:06:28:25:92:
                    2a:a4:aa:d7:24:f6:70:67:01:c1:67:18:e3:d0:9e:
                    22:8c:2b:38:fb:83:d3:81:47:1f:7a:c0:4d:b5:73:
                    6e:a1:14:e8:26:f4:2e:2d:85:fa:cf:60:d6:fc:55:
                    f3:80:bf:ac:2a:2d:c0:75:cb:46:92:d3:f9:e4:05:
                    8e:61:c7:47:79:a1:a2:6b:39:2e:68:da:8d:ba:40:
                    9f:68:cb:e2:69:ae:48:b1:b8:70:0a:91:d7:ca:7e:
                    c1:82:b3:12:60:32:11:c0:e9:37:67:1f:bf:40:00:
                    b1:23:5e:91:7d:e1:15:d6:d8:12:ed:6c:38:0a:04:
                    c4:15:c1:e9:7e:18:b8:0f:75:ec:7d:a6:23:3b:ff:
                    4e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F6:D4:A0:43:73:33:F5:A0:BA:88:19:34:4D:DB:49:10:A6:11:3D
            X509v3 Authority Key Identifier:
                keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:25:f0:54:38:55:e6:9b:d8:59:7c:b9:c0:91:f9:71:aa:05:
         9f:57:64:fa:0c:7b:e6:94:21:41:07:6b:a2:87:0d:71:c0:1c:
         8a:a6:9e:2d:a9:b4:ec:c8:e0:22:3b:af:9f:d2:81:a5:62:6f:
         ad:f5:df:9c:88:ea:94:fc:2f:90:27:80:84:02:f9:ed:fd:b2:
         3e:a9:4e:27:2b:09:aa:10:e9:1a:3e:d7:3e:b6:e2:e8:de:9f:
         c3:d2:b4:41:22:a5:1b:02:4d:41:76:4f:ec:fe:1b:b0:34:aa:
         3d:70:74:f8:d5:ac:5d:86:6c:b9:93:c2:0d:a2:c0:6f:f0:64:
         13:d6:25:18:af:76:b9:9e:6c:76:49:14:ab:17:5d:1d:67:6b:
         45:39:a2:e8:3f:1c:ef:3d:a5:e7:d9:a7:08:9a:11:14:47:f1:
         18:d0:f5:39:da:ad:7b:a1:df:30:d5:d9:4e:25:51:5b:e9:c0:
         1b:63:22:9b:dd:df:27:c7:c2:2d:0b:3d:3c:5b:e6:26:21:c9:
         67:56:53:fd:42:3e:c5:93:f9:b7:cd:e9:3b:5c:40:c3:51:bf:
         25:4b:6c:75:49:9a:d7:fd:28:4a:61:11:d8:57:a4:27:4d:f9:
         a4:9d:63:71:55:d4:24:07:db:f0:5d:ba:5d:4c:be:91:40:c2:
         b9:49:9b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 09:06:47 2026 by rpki-client