This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
File:                     n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json)
Hash identifier:          7FKxAkAgEA0yjbm3xswVBnYX2lTH3/NEsQ8NJdMJ8eQ=
Subject key identifier:   EE:1E:FC:84:02:DB:6C:4D:BC:14:3A:F3:A1:1D:BD:AE:97:47:A6:99
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3633
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
Manifest number:          3535
Signing time:             Thu 18 Dec 2025 14:21:54 +0000
Manifest this update:     Thu 18 Dec 2025 14:21:54 +0000
Manifest next update:     Thu 25 Dec 2025 14:21:54 +0000
Files and hashes:         1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: 7OS4j37+lkkKh3qt9BTkYld8Aq9m9l2mSsy5mTNtYeE=)
                          2: CEC68F44973211E9954F0565C4F9AE02.roa (hash: UYL3PlfPOBzM+4YTE4YVT/B9+S0RmwIC0/LTv+8zEeU=)
                          3: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: 2vo94c8bhE/vlqMz+w1F2CTUOl+XnRdJZlNw0Ckqzz8=)
                          4: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: Vvt8gIzT7X3zFgaHKZZTu/elNVhHdcP8J7ECpTHkuWo=)
                          5: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: 0+kajyIDxu72hFKkbKyeIRpJ6iZ+zJJsd5Bir90Bjbs=)
                          6: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: yxUvZSwNOnvgFyxK+xyWLF/IFfuAV6JnnBBih/qkFIk=)
                          7: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: JfCzlyEj5RyOEksRQ5dZM0w5+meyD4/0WxMSGEXGqU0=)
                          8: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: Jl/N0P/2cG5vuafM7WPanArTIdcgOJaMycU46eiVqR8=)
                          9: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: 0A0Nhnr13g/AyJ6eZl3uyvpwaA6ghz922H++qApXnN8=)
                          10: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: ZQ/r1ORMQDfDWVK/TZq7hs+eIvBXZKfdyf99uBq0RP8=)
                          11: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: 1cfJQS5ACrYfLQAyh5Ja07hoswmqC8p/ibeUwb6rjOE=)
                          12: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: vcrOZBXHjq3K5b9IM2tb0fFhXmrTMImV0akcYw7Q7n0=)
                          13: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: Hnemh9EwwTeduD1Zc7gVprQ1BQwQSdNFXtPrRgQGYJ0=)
                          14: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: sX+id3lu89Hjy6wyXn7YJf1vycTYavS1aKnHsZ9N81M=)
                          15: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: jWBtMJRBrQmahUt0pi2YibmAZBgFlEfn4PBIYmSkROs=)
                          16: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: EcBR1Y+LSwE3SFyQmCPHJrgPGrIw6HZerXAZglO7fSw=)
                          17: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: xHKRgZRt4qbSzDPZH6wkR/9CWnhDd6W1bLMRhJgSvfc=)
                          18: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: Td1yZRJHEJdrXdDkVXf585lTVDZ/gAEOrflJZU/zpIE=)
                          19: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: Ou9GXrK/fzDAww5dRpeY0Rn8NUNZjPo4uNl9tQUkuio=)
                          20: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: t33tjefPncP8dR8GX15pU981pTfbTiVj5ryxyONgq7A=)
                          21: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: 8/pIg0nOoslqGVpUnPoQipLD1CjxnbDa2dRCnlmkpWQ=)
                          22: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: 1bdsgMBWNk0J8N0RhS3NVIo135QEMXhjy/l9087BnFU=)
                          23: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: x5gAALbDWXYABqxH0UVKGWQASAjVkWdpYaVlhYcPqAc=)
                          24: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: +zMT8yB+e8TH1LiL/hekG194ZDTDk4B7qTjHy7txnvM=)
                          25: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: RlLRteQSfjgNjoDFYZ12j4xm4gJcxx7/ouGdnACi8jE=)
                          26: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: 9Ico4h3XlCaLtqQIGUKMAvjEzVqPREECMseESR6/+Rs=)
                          27: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: 5+MRoBA+rOp6HemFzB+KMhs/OCqWXA66uUpcbDP4GD0=)
                          28: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: 07u1m9+WpmKzkUImJC5UFriIMTCX8GggMGZm/tBb4Wg=)
                          29: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: am25QW4MJ5THnozpBZGdhNNGRi5OPU/F57+oBhLG+ss=)
                          30: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: CEN7jfWU1vPpLzR5uzYZhWk4C138cZA3lkf/fBKS00g=)
                          31: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: P0DmiEGqN7lW5E2uoWn71/z/nYWW3JpwNu+rpvGmCIs=)
                          32: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: zLL9jkNh6O2K6tYXIsyvEGSPolQEwe8/GLuSvRNkabw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13875 (0x3633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Dec 18 14:21:54 2025 GMT
            Not After : Dec 25 14:21:54 2025 GMT
        Subject: CN=69440e02-607d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:48:4b:f4:3e:99:19:8b:46:75:6e:53:aa:b6:
                    43:d9:e6:0f:71:bd:b7:56:17:60:55:c8:f0:74:65:
                    9d:6a:4d:b5:e8:c3:ee:34:4d:46:6d:b1:32:97:6e:
                    d3:85:ce:dc:11:71:2c:0c:d2:c3:48:ea:cb:d7:87:
                    4b:7e:15:ec:df:8c:60:6a:4a:15:00:f9:ef:a9:ae:
                    26:72:45:16:62:b8:ca:c4:bc:a9:17:64:c0:a3:92:
                    13:48:45:eb:f9:49:2b:46:d7:bd:85:71:ef:1a:5b:
                    f7:f2:5d:60:64:36:ce:72:e2:d5:99:19:c8:c9:70:
                    49:eb:6f:de:1f:44:ff:c9:e0:22:d4:b5:df:f6:0e:
                    5e:ca:c1:e6:43:a9:20:a0:37:86:18:54:cb:ef:60:
                    b4:53:75:b1:69:8b:62:b1:37:f2:68:64:e4:8e:e2:
                    39:ae:d1:85:e3:d6:81:ee:a4:ae:8b:0e:ea:8c:72:
                    68:9b:6a:c9:ed:49:92:1a:5a:91:43:6d:2c:b7:bf:
                    5e:7b:54:6a:83:45:0c:58:6a:f3:5b:f5:a2:23:9a:
                    67:20:f5:eb:75:ec:59:a9:36:42:e7:f5:11:90:bb:
                    2c:a9:1f:48:30:15:77:77:bf:c0:e4:98:b4:2b:46:
                    6d:16:e5:01:bf:83:b1:92:91:e6:a8:5d:82:a2:46:
                    85:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1E:FC:84:02:DB:6C:4D:BC:14:3A:F3:A1:1D:BD:AE:97:47:A6:99
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8c:a9:db:29:07:3c:f4:4d:b0:6a:77:b0:84:57:e1:42:d9:
         a0:17:17:f3:41:84:c4:94:2e:63:2e:f9:0f:7f:18:0f:b2:76:
         a9:a6:81:6f:16:5c:5c:bb:28:7c:5d:16:fc:64:0d:cb:3b:db:
         78:55:d2:1c:b3:69:19:df:86:8a:c1:0b:3e:d9:26:f4:c4:ea:
         17:73:3f:34:66:b0:b8:54:f3:ee:1a:2b:2d:fb:41:1a:d5:2b:
         99:a6:e0:5c:cb:9a:cf:78:e5:9e:cf:04:d7:de:3f:de:dc:1f:
         0a:8f:6b:a7:a1:98:ae:31:d9:d4:c6:98:a9:70:17:be:3e:9a:
         7f:72:12:8b:1b:ec:87:ff:18:07:44:95:1d:68:49:ce:62:e8:
         7a:35:46:a2:cf:af:03:fc:e8:9c:99:9a:a6:a0:40:8d:5b:91:
         14:08:37:b7:ad:27:2c:e2:53:1a:6f:9c:73:7d:d8:40:8d:b7:
         53:36:ab:38:db:10:42:ff:17:d1:84:ac:99:d7:c1:eb:18:23:
         c1:d1:ee:41:1f:45:24:86:af:24:a7:17:6f:c5:6c:81:5d:5c:
         6a:3c:8d:1d:8e:b3:2e:05:a5:c8:49:c7:b7:12:50:46:8b:a0:
         e7:fe:d8:06:51:1e:71:db:0c:f7:1c:c0:07:2f:40:05:0a:88:
         4b:bc:0e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:17:53 2025 by rpki-client