This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
File:                     Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json)
Hash identifier:          iy5/c4pdmWj9pQ/av0zDe+x+oBsNQc44mRGw8EADdXA=
Subject key identifier:   BE:3D:4C:54:61:17:A5:41:5F:BF:5B:68:64:BE:35:D1:C9:C7:21:C1
Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
Certificate issuer:       /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Certificate serial:       0963
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
Manifest number:          096F
Signing time:             Thu 18 Dec 2025 19:41:56 +0000
Manifest this update:     Thu 18 Dec 2025 19:41:55 +0000
Manifest next update:     Thu 25 Dec 2025 19:41:55 +0000
Files and hashes:         1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: KzrrCkcUdr9mV1tzLB2J1u93I9s9wOEH8Wy9ZL7rejU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2403 (0x963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7
        Validity
            Not Before: Dec 18 19:41:55 2025 GMT
            Not After : Dec 25 19:41:55 2025 GMT
        Subject: CN=69445904-a423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:86:09:be:e6:2c:42:1d:ec:21:60:b2:a2:
                    c5:7d:2a:01:74:db:0a:cc:87:6d:e1:1c:8a:9d:a4:
                    e7:8e:05:4f:cf:7c:be:70:ba:9b:c2:df:cd:53:05:
                    0f:87:14:b5:ea:b5:15:82:00:25:31:e7:2f:6c:d4:
                    c2:39:72:42:dd:0c:e2:f1:96:51:d2:0b:f7:f5:af:
                    06:da:06:29:f0:b1:a0:be:53:59:39:b6:af:07:76:
                    09:aa:ef:07:cd:c0:04:d0:d6:63:34:8c:6c:a0:04:
                    bd:de:3f:36:fb:cd:a6:49:bb:dc:80:ab:a3:0c:10:
                    15:d6:9e:8e:9f:10:fd:9c:88:c8:ba:e4:45:9c:9c:
                    c7:44:c7:e0:97:5d:37:a2:24:1f:66:9e:21:27:21:
                    ad:7e:99:20:41:62:b5:6e:6d:b2:2a:3f:d9:04:01:
                    93:9b:00:1b:69:bc:be:37:3e:dc:7c:0c:bd:1c:14:
                    10:e1:a4:d4:ba:ef:2e:33:d5:0d:38:56:77:ae:c1:
                    24:cc:a4:ac:75:41:48:2c:5d:75:97:8e:5f:52:ae:
                    0e:8a:c3:13:4c:f8:b3:5e:e3:e8:a0:60:ad:7a:7b:
                    2b:4d:9d:21:5b:89:bd:ba:56:96:43:48:76:7a:d5:
                    04:cd:9a:84:1d:71:a3:a3:db:02:a9:9d:a9:37:3a:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3D:4C:54:61:17:A5:41:5F:BF:5B:68:64:BE:35:D1:C9:C7:21:C1
            X509v3 Authority Key Identifier:
                keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:76:3a:e4:7a:f0:52:43:1b:ce:34:ae:6c:f4:e1:42:86:a1:
         d2:02:2b:00:8e:dc:67:f5:85:d1:2a:40:bf:ea:32:26:a9:5f:
         b3:86:40:9c:03:ee:75:34:14:b5:c3:b7:db:fe:c8:36:46:1a:
         4b:14:e9:6b:66:de:f9:be:28:25:d4:70:eb:1c:28:99:73:f8:
         eb:b8:05:a1:b3:77:fc:8c:ec:e6:1d:ff:ee:05:36:8d:a4:22:
         0a:b0:11:a3:77:aa:ea:e4:c9:1b:96:d5:73:68:c4:1b:31:81:
         13:a7:83:96:90:0e:ef:72:47:b3:a9:43:ee:af:5a:a8:93:3d:
         4b:bb:ad:64:9f:75:7b:d9:59:74:19:97:5a:5f:7d:fe:65:e3:
         96:ef:1f:30:cc:71:33:20:1a:2e:ca:c7:c3:b7:96:a5:b5:35:
         3b:b1:c5:ff:de:25:68:99:26:fb:65:0c:0c:53:2c:2e:11:7c:
         4b:9c:25:85:d4:a2:06:4d:aa:a9:ca:cd:2e:f7:7f:0c:8c:5d:
         1b:b7:be:a0:df:79:a2:9e:b2:d5:c2:9b:b7:20:47:35:00:fa:
         92:e2:43:ba:d5:3f:ad:db:24:6e:98:02:63:23:e4:70:dd:bb:
         a4:bf:c9:b1:b3:66:c6:59:0b:0f:47:18:2b:e2:2b:fd:f4:e3:
         46:c1:61:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBBOUMxMTAvBgNVBAUTKDM2N0UxRkFGNzUyQzYzMUZDNDNEODcyMDk4MjQwRTgw
MzIxNTc1QzcwHhcNMjUxMjE4MTk0MTU1WhcNMjUxMjI1MTk0MTU1WjAYMRYwFAYD
VQQDDA02OTQ0NTkwNC1hNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0veGCb7mLEId7CFgsqLFfSoBdNsKzIdt4RyKnaTnjgVPz3y+cLqbwt/NUwUP
hxS16rUVggAlMecvbNTCOXJC3Qzi8ZZR0gv39a8G2gYp8LGgvlNZObavB3YJqu8H
zcAE0NZjNIxsoAS93j82+82mSbvcgKujDBAV1p6OnxD9nIjIuuRFnJzHRMfgl103
oiQfZp4hJyGtfpkgQWK1bm2yKj/ZBAGTmwAbaby+Nz7cfAy9HBQQ4aTUuu8uM9UN
OFZ3rsEkzKSsdUFILF11l45fUq4OisMTTPizXuPooGCtensrTZ0hW4m9ulaWQ0h2
etUEzZqEHXGjo9sCqZ2pNzqGJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL49TFRh
F6VBX79baGS+NdHJxyHBMB8GA1UdIwQYMBaAFDZ+H691LGMfxD2HIJgkDoAyFXXH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE5Qy8yQTI5NDg0Q0FC
QTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4X0VQWWNnbUNRT2dESVZk
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05uNGZyM1VzWXhfRVBZY2dtQ1FPZ0RJVmRjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEE5Qy8yQTI5NDg0Q0FCQTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4
X0VQWWNnbUNRT2dESVZkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOdjrkevBSQxvONK5s9OFChqHSAisAjtxn9YXRKkC/6jImqV+zhkCc
A+51NBS1w7fb/sg2RhpLFOlrZt75vigl1HDrHCiZc/jruAWhs3f8jOzmHf/uBTaN
pCIKsBGjd6rq5MkbltVzaMQbMYETp4OWkA7vckezqUPur1qokz1Lu61kn3V72Vl0
GZdaX33+ZeOW7x8wzHEzIBouysfDt5altTU7scX/3iVomSb7ZQwMUywuEXxLnCWF
1KIGTaqpys0u938MjF0bt76g33minrLVwpu3IEc1APqS4kO61T+t2yRumAJjI+Rw
3bukv8mxs2bGWQsPRxgr4iv99ONGwWGc
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:24 2025 by rpki-client