This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
File:                     Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json)
Hash identifier:          cJMOS1hSCfvJbTjURris7eyhIiqfwNl2jms5vYWrI9I=
Subject key identifier:   68:CE:07:9E:4C:9D:C2:92:2F:4C:25:02:3C:63:08:58:6B:04:5F:59
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Certificate issuer:       /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial:       1171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
Manifest number:          1105
Signing time:             Sat 20 Dec 2025 17:00:40 +0000
Manifest this update:     Sat 20 Dec 2025 17:00:39 +0000
Manifest next update:     Sat 27 Dec 2025 17:00:39 +0000
Files and hashes:         1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: t+gqZhzpYxXN/982UM5a/D72Dxv30xPeDH00grMseeI=)
                          2: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: /vrezSo6RJ5dq1cFDK2anelkL8dBqwcaNrTPSxP8eN8=)
                          3: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: 6mj2ePigEKlPzc3f7+eTQsUuSCZHP+3UsHzZtRH/e3g=)
                          4: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: R1CUbIu0V+HE4f06nI4AoF8weg5+WJaRb7OLoB74u3o=)
                          5: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: JSG6xv2uqNAgwOpDXcHQxv8WbhIpG22unWVbGkO466o=)
                          6: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: AQJjv8c1H+P8QI0s3FB/4mPX+TV6GerHGXja71yYLBo=)
                          7: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: fajAFqylWikP3Jikl5nRrG0DTxFJf4fODLkvijKh8uw=)
                          8: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: S5sgxNBi0p+O5VGwcCA6mYFpVmBWw6J0mLdcaJC7l/k=)
                          9: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: MmpvHOBJX6/TYN9r3lrc9Z7dr+vQVfQyHD+RNXiHs1I=)
                          10: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: aDxTmBiu7r/Tn9jcjNLK8UcWaXq5NN3ow+MDjn+I+ck=)
                          11: 52685F222E9111E999636910C4F9AE02.roa (hash: tnJuonmKS/V0uoywfbn8ky35GlWjycjl3empqFomJY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
                          rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4465 (0x1171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
        Validity
            Not Before: Dec 20 17:00:39 2025 GMT
            Not After : Dec 27 17:00:39 2025 GMT
        Subject: CN=6946d638-de7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:0d:97:66:8f:53:87:39:ce:d8:b7:75:d3:
                    15:a2:2d:47:66:41:2d:21:8f:f2:98:3d:e2:82:09:
                    e5:93:25:94:cd:e4:0a:cf:33:00:40:59:a5:c6:03:
                    66:45:27:7d:04:d4:c9:42:6c:50:03:49:2e:12:54:
                    c9:c2:ab:5c:6a:e0:dc:03:87:d9:db:ad:c4:e3:c5:
                    a6:6f:c0:5e:bf:dc:14:0f:eb:ec:b0:d9:18:3a:57:
                    9d:7b:43:25:2e:68:b6:a7:dd:04:f8:7b:b3:8e:8d:
                    52:cf:3b:17:05:1b:7f:1e:b2:ca:48:50:cd:82:c8:
                    8f:6c:01:c2:dc:08:2b:74:1b:8f:13:b8:e7:4f:b4:
                    e5:65:13:a5:fd:3c:20:89:31:ef:1d:b3:dd:3c:99:
                    d4:12:f3:fc:2c:91:2e:0f:cd:04:c9:09:1b:db:12:
                    fd:23:2b:20:da:d9:a5:d3:83:5e:8c:8f:a9:d7:e6:
                    31:8d:9d:01:ca:c1:1a:2a:6b:c6:e6:0b:3d:db:16:
                    44:7a:cc:3b:65:13:ac:66:3a:20:d4:ef:16:40:ed:
                    fe:a6:bb:73:c0:3c:9e:21:e6:12:dd:2b:c7:b1:39:
                    db:f3:8e:57:d6:40:3f:f8:ff:06:dc:d4:8f:6f:e8:
                    da:92:3b:4d:74:32:73:03:15:29:04:3e:02:80:ee:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CE:07:9E:4C:9D:C2:92:2F:4C:25:02:3C:63:08:58:6B:04:5F:59
            X509v3 Authority Key Identifier:
                keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:44:a1:ce:a1:0d:bc:a9:89:1a:92:e2:f7:8a:ba:88:21:
         df:06:08:29:3b:64:41:8e:29:62:21:72:11:40:79:54:20:b4:
         40:30:77:d3:3d:0d:9e:46:64:8a:42:a4:ee:e2:94:06:52:6c:
         f2:a4:ad:21:6c:af:49:af:03:9d:aa:63:ad:1c:0a:fc:5b:eb:
         b6:c0:30:6e:4d:bb:b7:90:b0:65:4c:b6:6b:e5:a3:d7:a6:1d:
         9f:ac:f4:e1:4c:cb:34:c0:f3:e3:83:a8:04:02:b8:7b:65:c2:
         50:56:20:e4:d8:a8:2a:dc:bb:0a:f4:82:26:0e:cd:6d:84:4d:
         a0:cc:85:0c:54:e1:6d:f3:08:a1:58:90:e8:53:b6:91:16:f2:
         68:f1:9c:39:b4:2f:21:2b:94:96:7e:bb:e4:85:e0:7b:3f:34:
         52:ff:9b:da:56:fa:a4:08:d5:39:b1:35:10:46:5e:b6:b6:f0:
         75:cb:cc:1d:6c:87:6a:7e:a8:14:ed:1a:42:5c:ca:e2:5b:0e:
         15:63:ed:ed:14:61:3c:b0:c2:67:c1:8d:16:9b:46:57:2d:58:
         0f:a1:76:48:f3:23:3d:89:99:c4:5c:46:8a:ad:a4:8e:5f:99:
         78:c9:94:55:b7:6d:b6:e8:77:96:c6:1f:76:2c:1d:7c:c8:4f:
         52:8d:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:07:45 2025 by rpki-client