This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
File:                     Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json)
Hash identifier:          nDYyqI51wtqIE0Kl0JEEo/RmaqgAYnBrGZAMCGR+dbM=
Subject key identifier:   DF:4D:93:57:E2:EB:EF:E2:D0:E2:A5:15:E7:46:06:FC:E3:56:A7:D8
Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
Certificate issuer:       /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Certificate serial:       0968
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
Manifest number:          0979
Signing time:             Sun 28 Dec 2025 19:33:08 +0000
Manifest this update:     Sun 28 Dec 2025 19:33:07 +0000
Manifest next update:     Sun 04 Jan 2026 19:33:07 +0000
Files and hashes:         1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: Ds7zCFHHUWo9/ZSb9fKC6TWEPMRxozlTs2cxMLqH+FY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 19:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2408 (0x968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7
        Validity
            Not Before: Dec 28 19:33:07 2025 GMT
            Not After : Jan  4 19:33:07 2026 GMT
        Subject: CN=695185f4-b487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:c3:f0:20:f1:b1:67:ce:5e:40:b7:39:d7:
                    7a:c5:d8:2b:73:fc:97:fe:f4:c9:98:8c:2f:a7:0e:
                    02:9c:15:c5:0c:8f:8b:d5:e2:8a:83:44:39:04:e2:
                    cf:62:8a:18:32:73:8b:0f:97:e3:0b:07:6a:f2:69:
                    3d:42:5f:2d:d9:28:7f:b0:cc:ec:dc:b1:3e:e6:d8:
                    35:4d:ab:1c:de:f7:00:d8:72:60:3f:25:ad:81:24:
                    e2:d9:e1:ce:d5:d2:3b:fa:93:a2:ce:10:aa:65:31:
                    da:d8:c8:f0:f7:8b:42:4c:46:e1:05:6b:07:0d:7a:
                    73:e4:af:10:22:e5:0f:89:2c:60:61:65:b2:81:0d:
                    4d:c1:14:a4:3f:e5:17:96:cd:2b:ab:80:1d:e5:9f:
                    02:7e:de:95:8b:16:16:a0:5d:0c:d8:4f:18:dd:ce:
                    bd:73:4e:e1:fc:d9:a6:a8:ea:6f:f7:49:54:ff:7e:
                    a9:e0:62:6a:7d:d5:77:b1:13:4d:41:a9:0a:c7:c8:
                    89:72:cd:1f:a5:29:94:3b:60:86:88:23:80:2e:07:
                    94:91:77:75:a4:52:40:5e:ae:56:79:09:f0:00:e5:
                    38:a7:31:93:c3:86:d4:bc:89:15:5e:3b:cd:17:70:
                    51:d1:ae:7b:e9:00:00:53:b3:17:9b:81:90:65:60:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4D:93:57:E2:EB:EF:E2:D0:E2:A5:15:E7:46:06:FC:E3:56:A7:D8
            X509v3 Authority Key Identifier:
                keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:38:79:4d:8f:9d:d9:c4:57:d0:7c:89:4d:37:8f:90:cb:fd:
         46:c1:c2:38:3c:b7:ff:16:cc:2a:8c:d4:4f:88:90:7c:dc:3d:
         10:b1:f1:15:ff:2a:cb:a0:8f:b7:d1:28:ad:a0:88:55:03:00:
         5f:32:06:49:45:c8:df:0b:99:11:57:1c:c2:ff:4d:3b:6c:1c:
         c2:49:90:72:87:ab:e2:43:cd:05:59:a6:52:ad:3b:0e:38:c4:
         b2:07:76:fa:54:ac:01:23:78:5f:8d:c0:d7:e2:16:71:fa:4c:
         54:53:14:7a:dc:ad:35:da:0f:5f:21:93:81:6e:e3:d9:75:73:
         be:60:ba:22:9b:ea:77:ab:96:c0:fa:49:87:4f:e2:43:16:08:
         59:af:de:aa:c9:ee:87:cf:08:12:f8:3e:98:53:2d:36:e4:86:
         a2:9d:28:0d:19:71:c9:69:7e:19:20:d3:96:8e:18:24:cc:9d:
         71:1b:96:33:34:5a:b9:ca:00:f9:72:b4:39:8a:53:88:90:12:
         21:bc:49:b6:57:1c:2c:a9:13:78:88:df:e9:70:aa:65:d1:d6:
         16:b4:08:4a:f3:e0:ff:f5:84:7e:24:37:bd:ae:66:cf:64:ed:
         97:e3:69:54:e3:dc:62:df:71:9a:04:66:4a:45:5a:88:4d:7d:
         16:6f:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 01:49:52 2025 by rpki-client