This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
File:                     Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json)
Hash identifier:          QoERF8HnupR9nR1VwRewtMKJEV/7p1ixVczu+GmKAQY=
Subject key identifier:   D2:BE:EB:8D:D4:53:4D:7E:D8:37:F9:8C:0D:FB:92:CA:5B:19:38:55
Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
Certificate issuer:       /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
Manifest number:          0244
Signing time:             Thu 25 Dec 2025 00:57:16 +0000
Manifest this update:     Thu 25 Dec 2025 00:57:15 +0000
Manifest next update:     Thu 01 Jan 2026 00:57:15 +0000
Files and hashes:         1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: 2wC9Ui4+AzXqK810Hs54gpc2wMNHvRXaoe73r7DEzok=)
                          2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: 2OrdAZFq65lpVDk9H7JG++6UbmMYDfaSdAPzOkImZqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
                          rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 00:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
        Validity
            Not Before: Dec 25 00:57:15 2025 GMT
            Not After : Jan  1 00:57:15 2026 GMT
        Subject: CN=694c8beb-81f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:cc:96:90:d7:26:3a:21:80:9c:a4:12:0d:
                    f4:07:fc:12:64:cf:04:29:5d:75:3c:15:e3:a4:45:
                    55:06:b0:62:73:cc:38:3d:c3:9b:24:5a:37:d2:4f:
                    76:ad:4a:31:4a:bd:46:cc:e3:50:76:f2:b7:10:18:
                    bf:36:da:6c:f1:0d:ed:6f:f6:af:7b:07:6a:65:ac:
                    b0:93:df:d5:53:5d:8c:e4:75:63:d3:d6:ad:e3:91:
                    67:36:17:06:1e:f9:f4:44:4b:54:4a:3a:37:c5:63:
                    6a:6f:ca:63:82:25:45:99:9d:5f:0f:d1:2b:33:d2:
                    1a:19:ec:cb:b4:e1:4c:cb:a6:60:a9:c8:16:07:6e:
                    7f:21:34:c5:43:f2:05:cb:1d:e4:0a:c6:ae:0f:e5:
                    f9:e1:e7:cf:12:85:71:53:db:23:cd:3d:00:c7:71:
                    07:27:ec:f2:4d:e9:9f:67:40:fd:d1:83:67:20:9c:
                    0f:47:9e:42:e8:b4:5b:2c:70:41:7a:8f:47:6c:15:
                    f3:f0:34:3e:96:2f:5f:fd:7d:b6:4f:3b:00:52:13:
                    92:05:fb:fb:8c:00:46:fa:4e:c3:da:d5:4c:8d:16:
                    64:1b:d3:ef:d6:b4:5f:5f:25:b2:2d:9b:3a:9c:df:
                    91:b2:dd:9d:09:05:42:f9:17:17:82:b9:62:59:4e:
                    7d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BE:EB:8D:D4:53:4D:7E:D8:37:F9:8C:0D:FB:92:CA:5B:19:38:55
            X509v3 Authority Key Identifier:
                keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:49:e3:25:43:d4:80:09:d5:61:e2:3a:e9:55:24:37:98:69:
         46:dd:c5:62:5e:8c:39:b5:87:20:de:72:18:00:a8:7b:a5:af:
         ab:cc:49:e9:fe:ed:cd:e1:6d:a5:63:8c:57:19:07:ab:a4:d1:
         31:b8:0a:19:84:e0:a8:63:a8:86:11:97:45:95:09:0a:c2:23:
         3c:2e:15:7c:80:27:e2:39:70:a2:6f:24:0d:78:b2:57:b2:c0:
         57:9c:18:dd:1b:f0:5b:d1:a1:6a:46:8c:76:da:5c:b9:23:ee:
         1e:3d:0a:8e:8e:7c:a1:2e:aa:fe:83:9b:aa:fb:33:03:e1:1e:
         61:4f:d4:3a:97:47:33:b5:62:ee:63:2f:07:65:2d:d3:d4:78:
         29:ea:0a:31:5a:28:b6:d1:b0:70:59:21:80:ec:47:47:9a:01:
         b4:9d:c0:18:10:f6:22:6e:04:fc:a2:f5:37:c8:75:ff:67:a9:
         d3:4e:ab:5e:e1:2d:e1:01:9d:39:2c:b6:2d:aa:bb:30:a7:c9:
         8d:75:82:f6:78:8f:53:68:94:33:5a:a7:68:ad:24:4f:c8:55:
         82:c8:1e:fe:f3:1d:4b:ff:69:a9:24:f4:1e:d6:65:3a:b1:63:
         c3:2e:9f:5f:56:68:f6:93:11:e1:de:3f:70:70:40:f6:37:d3:
         2e:6b:db:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:57:36 2025 by rpki-client