This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
File:                     nhuiMnN6PQDX-qC03Dg02arwbfg.mft (raw, json)
Hash identifier:          /n1VhJce2JM946zUPo2PjO3ukdGAEeweT3U83feX+ak=
Subject key identifier:   B2:A1:7F:46:CA:F2:E7:03:2C:DA:00:0A:34:E8:89:79:35:3D:01:1F
Authority key identifier: 9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8
Certificate issuer:       /CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
Certificate serial:       06D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
Manifest number:          06C5
Signing time:             Thu 18 Dec 2025 21:37:38 +0000
Manifest this update:     Thu 18 Dec 2025 21:37:38 +0000
Manifest next update:     Thu 25 Dec 2025 21:37:38 +0000
Files and hashes:         1: nhuiMnN6PQDX-qC03Dg02arwbfg.crl (hash: od2nP285AyWD++8Rba6J43Whkz583J/iQky4+171KnA=)
                          2: 3B3D9AA4162211F0AE684383C4F9AE02.roa (hash: XamxWQNFXzVAky34dKuvGM9L/Xfu1Wl8RSwCxVZ6CUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl
                          rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1750 (0x6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178297, serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
        Validity
            Not Before: Dec 18 21:37:38 2025 GMT
            Not After : Dec 25 21:37:38 2025 GMT
        Subject: CN=69447422-db75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:29:02:f2:e1:48:68:e6:66:d1:34:f6:4a:
                    35:1f:35:4a:6d:54:2c:2c:47:65:a2:9a:1f:bf:5f:
                    d9:2a:81:75:52:31:32:09:08:4b:92:77:a8:4a:ae:
                    21:9c:ae:b2:c3:f8:62:73:96:e7:82:c2:9d:9f:f7:
                    7a:2a:e0:cf:e6:80:9e:56:0e:ff:5f:f8:35:a1:bc:
                    9a:10:4d:df:cc:3d:69:3f:f1:85:e9:6c:a5:19:8f:
                    c4:7d:4d:14:b8:5c:5c:10:a4:b4:21:46:4a:1c:41:
                    a3:07:c8:04:91:39:fc:7e:20:e2:f8:5d:3e:17:e1:
                    d2:5f:c0:30:0e:d9:7d:fc:12:9c:61:03:3b:c6:0e:
                    0e:ad:7c:1d:cf:f7:11:bd:7e:b1:22:e7:e0:f9:b8:
                    50:49:4b:d8:5b:e9:a3:8d:03:cd:ef:0f:94:44:e7:
                    db:40:9a:ec:fb:34:69:ea:51:c3:3d:7d:8c:be:32:
                    ec:b4:01:5d:9f:b2:cb:ab:1d:d1:6b:3b:0a:43:70:
                    ed:10:df:e1:ad:d9:1a:36:5a:a7:b8:b3:55:cb:62:
                    13:3b:02:5f:43:81:28:cd:39:57:a2:0a:ed:d2:61:
                    92:6c:e6:be:c1:c0:69:6c:8e:50:72:b2:0e:c4:a0:
                    8a:c7:01:f4:45:ba:92:b8:b7:24:f5:48:6c:86:7a:
                    a7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A1:7F:46:CA:F2:E7:03:2C:DA:00:0A:34:E8:89:79:35:3D:01:1F
            X509v3 Authority Key Identifier:
                keyid:9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:92:67:f4:18:de:74:cd:d5:1c:08:4a:56:e7:b2:76:a4:71:
         3a:5d:35:af:59:06:83:e4:99:d5:16:f6:cc:f3:9c:ab:c2:30:
         b4:3d:2e:68:2d:c1:cc:50:53:38:2b:67:44:e6:3c:92:2a:e7:
         40:e4:78:92:ef:99:31:e7:9a:67:58:7b:ae:85:9c:05:03:66:
         c9:67:1f:b3:97:7a:c8:cd:97:b9:40:ff:95:65:ad:6f:65:75:
         e6:77:90:31:18:fb:2f:96:6a:57:6f:4b:a4:42:9f:ef:25:58:
         34:eb:97:4e:ae:06:7b:96:3c:49:6e:eb:be:b3:29:27:bc:18:
         79:30:fb:42:bb:ef:9a:95:d5:83:de:74:7b:fa:ea:cc:93:78:
         cb:a0:ec:d3:61:3f:08:43:f2:34:49:35:e2:66:ff:51:a5:f9:
         d6:32:bb:6c:c1:bc:74:3d:48:a1:24:49:21:fd:0d:d1:d7:f1:
         18:5f:39:da:bd:98:a2:44:91:1d:86:38:45:2e:1d:e8:64:61:
         64:58:79:4a:19:fc:e0:cf:83:ef:00:e8:14:1d:5b:2e:f0:b2:
         5f:b7:7e:99:6d:31:e0:47:09:de:1e:5a:59:ab:26:39:59:a6:
         56:36:91:c3:9b:b4:dd:ca:3b:84:9b:db:f8:2a:12:7d:c9:56:
         3b:2e:50:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzgyOTcxMTAvBgNVBAUTKDlFMUJBMjMyNzM3QTNEMDBEN0ZBQTBCNERDMzgzNEQ5
QUFGMDZERjgwHhcNMjUxMjE4MjEzNzM4WhcNMjUxMjI1MjEzNzM4WjAYMRYwFAYD
VQQDDA02OTQ0NzQyMi1kYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ZspAvLhSGjmZtE09ko1HzVKbVQsLEdlopofv1/ZKoF1UjEyCQhLkneoSq4h
nK6yw/hic5bngsKdn/d6KuDP5oCeVg7/X/g1obyaEE3fzD1pP/GF6WylGY/EfU0U
uFxcEKS0IUZKHEGjB8gEkTn8fiDi+F0+F+HSX8AwDtl9/BKcYQM7xg4OrXwdz/cR
vX6xIufg+bhQSUvYW+mjjQPN7w+UROfbQJrs+zRp6lHDPX2MvjLstAFdn7LLqx3R
azsKQ3DtEN/hrdkaNlqnuLNVy2ITOwJfQ4EozTlXogrt0mGSbOa+wcBpbI5QcrIO
xKCKxwH0RbqSuLck9UhshnqnkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKhf0bK
8ucDLNoACjToiXk1PQEfMB8GA1UdIwQYMBaAFJ4bojJzej0A1/qgtNw4NNmq8G34
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODI5Ny80QjFGNzQ4NDg3
QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBRRFgtcUMwM0RnMDJhcndi
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25odWlNbk42UFFEWC1xQzAzRGcwMmFyd2JmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
ODI5Ny80QjFGNzQ4NDg3QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBR
RFgtcUMwM0RnMDJhcndiZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8kmf0GN50zdUcCEpW57J2pHE6XTWvWQaD5JnVFvbM85yrwjC0PS5o
LcHMUFM4K2dE5jySKudA5HiS75kx55pnWHuuhZwFA2bJZx+zl3rIzZe5QP+VZa1v
ZXXmd5AxGPsvlmpXb0ukQp/vJVg065dOrgZ7ljxJbuu+syknvBh5MPtCu++aldWD
3nR7+urMk3jLoOzTYT8IQ/I0STXiZv9RpfnWMrtswbx0PUihJEkh/Q3R1/EYXzna
vZiiRJEdhjhFLh3oZGFkWHlKGfzgz4PvAOgUHVsu8LJft36ZbTHgRwneHlpZqyY5
WaZWNpHDm7TdyjuEm9v4KhJ9yVY7LlDy
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:39 2025 by rpki-client