This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
File:                     NpBAbdMULvZPdhZKfyJsCMwwG1M.mft (raw, json)
Hash identifier:          j5wrz6ke+0u9Bsyv5MZiTjRDr8H7bq9VXezS1MdyTpo=
Subject key identifier:   98:2F:8E:E3:30:3B:D7:02:24:29:A7:FA:81:ED:89:27:EC:93:B1:8A
Authority key identifier: 36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53
Certificate issuer:       /CN=A91A0807/serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
Manifest number:          0C
Signing time:             Fri 19 Dec 2025 06:56:43 +0000
Manifest this update:     Fri 19 Dec 2025 06:56:42 +0000
Manifest next update:     Fri 26 Dec 2025 06:56:42 +0000
Files and hashes:         1: NpBAbdMULvZPdhZKfyJsCMwwG1M.crl (hash: cFa2FiuL+8dOnyHtr9MbcCu7Yeg2eppj12Okc/nHBa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl
                          rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0807, serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53
        Validity
            Not Before: Dec 19 06:56:42 2025 GMT
            Not After : Dec 26 06:56:42 2025 GMT
        Subject: CN=6944f72b-b181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:d3:a7:04:f2:fa:29:3a:da:0d:0e:4e:2e:
                    28:7d:7b:0b:5f:52:cd:a3:60:56:fe:07:f4:3d:32:
                    19:d3:01:cd:36:57:86:03:54:f9:8b:59:78:e5:67:
                    b3:bf:68:82:1b:5c:8f:dc:c3:4c:07:67:2c:5c:49:
                    96:3d:cf:c5:e0:65:b7:91:7a:1e:dc:80:bb:1e:f7:
                    c8:bb:f6:c3:41:ae:ca:a3:15:a7:c2:fb:66:05:74:
                    8c:12:24:3b:78:e4:58:db:41:01:2e:99:c0:4e:4a:
                    ed:65:1c:6f:c4:d7:83:8f:ed:d1:f3:5c:d7:6a:0d:
                    a6:4b:d0:2f:f4:24:5b:f8:2f:a2:7f:e2:86:0e:be:
                    f2:b3:de:ec:7a:c5:a8:8b:9c:68:4b:d1:46:f2:7f:
                    74:50:af:cc:69:26:0e:fc:0c:33:6b:cc:c0:1c:38:
                    89:f4:7e:12:58:1c:b7:7b:3d:ac:2a:41:a3:92:de:
                    26:1c:6b:80:b8:b2:8c:12:05:c3:cd:ba:2c:34:35:
                    3e:49:b4:31:13:bb:de:ea:fd:f7:f4:15:7e:a5:e0:
                    9f:9f:7c:fe:9e:5d:2e:d1:34:56:b1:13:f2:c3:fc:
                    c2:01:9a:b4:e1:2c:fd:80:1c:e6:79:23:2f:4f:a7:
                    cf:99:42:62:50:7b:61:75:5b:cf:30:2e:5e:87:56:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2F:8E:E3:30:3B:D7:02:24:29:A7:FA:81:ED:89:27:EC:93:B1:8A
            X509v3 Authority Key Identifier:
                keyid:36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:30:b0:54:5d:4f:3c:8d:2b:3d:ea:b1:4f:90:03:c2:92:2f:
         26:36:b3:88:b2:76:ba:ed:5f:c6:e5:a8:05:3b:7c:36:69:ca:
         84:37:0f:80:7a:d0:fc:aa:a2:df:50:8b:4e:9d:95:1c:c9:9c:
         45:6b:3e:a6:9a:10:3f:f3:3b:ae:38:18:bf:b6:b7:29:53:69:
         9a:96:28:33:91:12:37:bc:f5:87:29:05:f4:93:ad:bd:8c:dc:
         f7:1a:c1:7f:8f:85:09:41:7a:9f:fc:f0:7c:18:3e:9e:a8:e0:
         bd:89:cf:4a:f9:b6:7e:99:a9:46:e5:c3:7d:5c:b1:95:2f:f7:
         a0:82:1a:dc:5e:b0:d4:0e:7e:8d:64:27:be:30:47:75:23:b1:
         e2:86:40:1f:ee:9b:63:82:de:e1:15:6c:a1:e9:79:a3:4f:3e:
         c1:76:eb:56:91:19:d4:e3:2a:4b:7c:61:12:83:22:3f:42:78:
         e9:72:f9:80:39:a9:48:f3:3d:20:e5:f7:e0:18:5f:bb:41:89:
         13:ad:b5:92:93:b5:d0:09:64:a8:f9:32:52:06:a5:04:ee:7f:
         19:58:58:bc:5a:53:c4:49:3f:71:f4:de:c4:1d:48:c7:c0:3d:
         50:02:38:1d:6b:6c:29:d7:f9:f4:5d:ca:e6:95:63:34:49:07:
         37:81:f6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:59:11 2025 by rpki-client