This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
File:                     n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json)
Hash identifier:          W3KKxCUR8fr+1FEPGDysbJkkCE2+926w8q20NW3lnqE=
Subject key identifier:   37:39:03:8B:C1:F0:CE:80:41:3E:96:C6:1D:96:91:88:91:C4:85:F3
Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
Certificate issuer:       /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
Manifest number:          0280
Signing time:             Fri 19 Dec 2025 00:46:52 +0000
Manifest this update:     Fri 19 Dec 2025 00:46:52 +0000
Manifest next update:     Fri 26 Dec 2025 00:46:52 +0000
Files and hashes:         1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: c2SE3ZFBDRCjA3qGZTqFXoS4Qng30o3kZoThUMjILV8=)
                          2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: FZIeDc9fr9Vk3VF/3NkVllxgVFZLM9kYFOVZSgfzDWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
                          rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B393, serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
        Validity
            Not Before: Dec 19 00:46:52 2025 GMT
            Not After : Dec 26 00:46:52 2025 GMT
        Subject: CN=6944a07c-efb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:a8:cc:41:03:dd:f6:3b:a9:96:7a:4a:28:
                    dd:87:34:c3:2d:8a:4b:00:75:ac:8e:ec:bd:1d:b9:
                    bb:b6:04:7b:1f:67:61:7c:d0:af:75:1f:8c:65:f4:
                    8b:a2:06:2e:8b:18:4c:a8:b8:fe:48:be:fe:60:0a:
                    5c:09:2e:bc:33:38:a3:39:aa:14:05:f8:d1:da:59:
                    d1:78:5d:9a:70:83:56:52:df:43:3b:ed:33:91:ac:
                    0e:9d:a0:a4:83:07:9a:fa:d2:e8:cd:b6:8a:5a:63:
                    5d:d8:71:fa:95:24:04:a3:3a:06:c8:a5:d9:1d:12:
                    fd:fb:c1:d0:50:04:13:c1:f2:ee:57:56:09:65:12:
                    31:5a:f3:1a:9b:77:2f:54:ef:11:d6:b5:a9:02:ae:
                    37:33:8a:33:18:e9:91:98:77:cd:55:f9:fe:33:38:
                    65:14:5e:09:57:f7:f7:e8:7d:b4:ad:4e:f0:3a:b6:
                    b8:8c:cf:d8:89:b6:76:22:dc:5a:c0:90:4a:c8:4b:
                    07:48:fd:bb:68:28:e5:53:fa:6f:50:22:09:2c:fd:
                    01:c9:d3:59:09:e7:4c:05:d0:01:90:a0:c1:2c:ba:
                    df:e8:91:4a:f2:ce:c0:f1:01:b6:ba:34:47:1d:90:
                    47:22:1b:2f:e2:81:d8:3b:2c:ad:c8:af:c0:3f:6d:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:39:03:8B:C1:F0:CE:80:41:3E:96:C6:1D:96:91:88:91:C4:85:F3
            X509v3 Authority Key Identifier:
                keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:55:8a:b8:2a:7f:4d:d4:cc:0f:2e:0b:b2:2e:ad:9a:32:c6:
         c5:ab:2c:d5:94:ff:8a:c3:db:99:64:81:a5:8b:e9:70:1f:9e:
         06:79:1d:cd:c4:f5:85:3f:f6:29:bb:a4:8d:a1:67:14:01:b1:
         9b:8d:cc:a9:74:3d:dd:73:34:00:68:be:53:70:89:92:79:aa:
         0d:e7:76:ee:c0:22:86:44:66:36:29:5c:cc:4a:5b:09:d8:41:
         29:88:21:31:ed:f8:66:3f:85:43:d2:eb:cb:94:75:79:89:bd:
         bd:e3:8e:a1:f0:7c:29:84:80:b7:e5:e4:22:4f:4f:25:52:95:
         00:ee:18:f3:e0:af:41:f0:69:1a:14:81:85:e6:8f:47:17:ea:
         e0:74:3f:f9:fb:a9:d2:c2:d9:dd:d7:10:6f:fe:5a:e1:72:f6:
         09:3f:18:31:ef:3b:48:98:b2:fe:5c:47:6a:c0:8b:52:53:8c:
         c8:f4:0e:17:0c:f6:12:80:29:98:f3:92:26:7f:57:e2:fe:b0:
         a5:4b:eb:c9:a9:1a:df:00:ad:52:14:70:a1:b6:f5:ac:8f:b7:
         30:bb:cb:c1:f4:61:b7:a2:dd:d6:f2:6e:86:9e:09:e2:8b:07:
         2e:9e:05:39:51:96:da:02:56:3f:f4:e7:ee:3a:1c:48:9f:f7:
         f5:66:36:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:59:22 2025 by rpki-client