This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
File:                     nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json)
Hash identifier:          cLWwNswO4Xnq3v8Nx0FSNfUjGYxAHfvz7Mc42piLWIQ=
Subject key identifier:   9F:33:81:42:60:77:78:16:B0:75:4D:50:6B:93:E5:50:C3:DC:8C:D8
Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
Certificate issuer:       /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Certificate serial:       1E8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
Manifest number:          1E73
Signing time:             Sun 14 Dec 2025 15:57:00 +0000
Manifest this update:     Sun 14 Dec 2025 15:57:00 +0000
Manifest next update:     Sun 21 Dec 2025 15:57:00 +0000
Files and hashes:         1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: dD0ymCpFGVpr/5t+fCNDPwbPg8nkdpO/LEdmpmcEno8=)
                          2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: UxhWyZVVGOaHnTJ2ecJ+4EhY7aL+ZMo65cqrYb+GALY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl
                          rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 15:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7820 (0x1e8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180562, serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
        Validity
            Not Before: Dec 14 15:57:00 2025 GMT
            Not After : Dec 21 15:57:00 2025 GMT
        Subject: CN=693ede4c-7ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:10:fd:b4:83:8d:e2:80:19:37:a5:a6:a6:
                    97:93:3e:05:28:f1:d3:f4:50:cd:44:b9:a1:6b:a7:
                    19:f2:09:d9:60:c7:ed:8a:5c:5e:78:41:c3:6c:6a:
                    90:5b:60:11:86:a7:77:c3:6a:dc:46:e7:fd:cf:ab:
                    87:0d:96:d8:77:30:97:95:38:9f:46:7d:d0:79:bf:
                    4d:21:0c:af:e1:3d:62:46:33:8d:b7:cd:bf:dd:b2:
                    6b:74:8f:63:6a:3f:58:2c:f0:1e:9c:9e:c9:13:40:
                    e2:1c:cb:c8:37:49:91:0e:9f:28:52:a8:a8:7c:0a:
                    8e:ce:d6:06:7e:85:b5:03:53:37:62:d4:6a:e2:42:
                    b1:6d:dd:ba:10:6e:62:45:97:6e:10:a1:b3:b6:c7:
                    13:8b:70:a2:e3:60:db:a4:82:47:d5:6e:1e:fa:38:
                    0a:1c:c8:8b:c1:6d:00:33:f9:59:7b:27:b3:4b:91:
                    5d:62:be:e4:26:45:07:14:85:02:59:66:71:a4:d7:
                    f4:cc:41:5a:41:51:49:db:53:3d:4e:92:aa:69:dc:
                    23:27:35:2b:18:24:b0:a6:ce:8c:fa:16:50:02:2e:
                    ec:79:3a:e3:cc:d7:ed:6d:5e:e9:01:ce:cd:d0:32:
                    4b:a4:14:1a:bb:57:c2:78:4c:ba:06:f3:f4:ab:c7:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:33:81:42:60:77:78:16:B0:75:4D:50:6B:93:E5:50:C3:DC:8C:D8
            X509v3 Authority Key Identifier:
                keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:71:c5:01:bc:14:aa:1a:9f:de:0d:78:4d:e2:8b:6e:4e:2b:
         4c:91:78:cc:7f:2e:d7:32:a0:0c:f4:f6:c5:fd:e3:35:a8:49:
         fa:54:ab:0f:06:e3:85:01:f2:88:09:cc:f3:a8:f3:66:17:b6:
         ac:62:fb:10:91:b9:83:92:f4:26:c9:8c:76:08:3e:3e:da:2e:
         8a:07:ac:f5:9d:94:a1:67:34:73:7b:a3:ee:98:1c:b7:b7:6f:
         23:b6:d8:23:e3:96:9f:80:dd:42:e8:1d:1f:21:e6:8e:4a:02:
         c5:ed:fb:07:dc:cf:fa:1e:79:26:a9:e0:4b:d6:28:09:23:b6:
         0d:45:6a:7b:8b:68:95:3c:d9:67:3d:97:d0:1a:88:bb:1d:13:
         78:44:e4:63:4d:81:49:77:01:90:97:3d:e8:30:ab:38:48:8b:
         48:77:8c:5c:7f:17:2d:e7:6a:f8:3d:be:24:f1:02:48:2e:7d:
         7b:a2:37:9b:79:1c:83:ff:f6:42:4b:93:f0:f6:d2:b8:ac:ba:
         1f:5b:4e:e4:53:be:b1:64:5f:8c:3f:33:b9:ff:5d:3f:18:d9:
         8a:b6:3f:81:34:5a:73:17:7f:41:2a:3d:f9:7f:92:ee:8b:2d:
         a2:46:ed:81:0c:0a:7f:ba:9b:47:78:27:9a:40:5f:44:85:8c:
         ca:3e:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:34:17 2025 by rpki-client