This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
File:                     Ny468IjbN1qP-RmFiy3MXH_Epeg.mft (raw, json)
Hash identifier:          JzLjPs7Cce1/K+LpxJUAAaKynr4a8SgFGpjCEBKnYK0=
Subject key identifier:   D4:0E:8B:84:A1:7E:C2:39:ED:C3:3E:A9:08:A8:43:6E:6D:17:B9:68
Authority key identifier: 37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
Certificate issuer:       /CN=A91A679F/serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Certificate serial:       07BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
Manifest number:          07A8
Signing time:             Sun 28 Dec 2025 20:47:11 +0000
Manifest this update:     Sun 28 Dec 2025 20:47:10 +0000
Manifest next update:     Sun 04 Jan 2026 20:47:10 +0000
Files and hashes:         1: Ny468IjbN1qP-RmFiy3MXH_Epeg.crl (hash: S/4BTRtb3R1JrSvY5CZwXPk7xAuB2dOdo+sxxNn82c4=)
                          2: B033793C686D11EE8607594CC4F9AE02.roa (hash: JOi7OHLhFtdHcYqhgYyNkkEIbuwvBfapNIuWdidQbmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl
                          rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979 (0x7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A679F, serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
        Validity
            Not Before: Dec 28 20:47:10 2025 GMT
            Not After : Jan  4 20:47:10 2026 GMT
        Subject: CN=6951974f-3e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:95:ed:cf:eb:aa:bb:ea:72:9c:ad:09:26:
                    bb:c9:65:a5:bf:f5:fc:3f:e6:8c:51:fa:49:c5:39:
                    94:98:fc:99:27:4c:9e:e4:f8:74:a3:a9:55:e0:aa:
                    6f:97:e7:a3:c6:70:5b:c4:99:1b:74:f2:34:c9:4e:
                    1d:54:05:06:6a:1c:cd:b5:a4:45:38:3c:44:39:14:
                    bd:04:30:1d:5f:72:a8:aa:86:2d:cf:52:ea:d1:ed:
                    65:04:5d:a4:bb:24:1b:91:58:40:2a:6f:81:9f:c6:
                    75:da:44:6d:1c:7d:8d:6e:93:38:e9:d5:bf:3d:3a:
                    a7:77:c4:77:80:d2:da:66:c2:9a:55:ed:e9:19:92:
                    f9:25:db:06:4c:dc:ce:0b:77:2b:e8:ac:fc:e1:5d:
                    49:a4:bb:b8:89:cf:74:04:f0:8f:c0:09:9e:bb:25:
                    b9:4f:bf:13:57:b9:5e:19:35:4a:e1:97:13:7a:9b:
                    a3:b5:61:86:e6:fa:2f:2e:0c:c1:10:ac:b7:0c:9b:
                    69:ee:c0:58:15:73:cb:c3:6c:96:cc:4e:58:cc:29:
                    3c:95:f4:c1:a1:55:57:c6:c4:14:0e:05:3e:28:26:
                    f3:08:e7:c6:d8:3d:4a:43:14:0d:33:16:6d:4e:e8:
                    13:41:7a:ed:1f:ae:82:6e:1b:00:c2:a6:dd:77:3f:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0E:8B:84:A1:7E:C2:39:ED:C3:3E:A9:08:A8:43:6E:6D:17:B9:68
            X509v3 Authority Key Identifier:
                keyid:37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:39:16:8a:7a:42:4f:f6:dc:25:4a:8a:52:a5:75:96:50:
         8b:a5:4b:2d:51:5d:75:27:0d:1e:b2:ea:2e:f9:98:cc:df:5f:
         69:81:19:f2:77:5a:c8:1d:53:7d:9c:11:d6:2c:15:38:30:3c:
         3b:64:3a:34:dd:f1:03:49:ca:1a:0a:69:5f:61:d9:61:11:dd:
         3c:9c:4e:6a:93:54:3a:da:58:b8:4a:f9:91:39:eb:44:9c:80:
         3b:d3:93:3c:be:90:96:82:7d:b2:9e:28:a7:a6:73:bb:67:bb:
         e1:70:2e:f2:5e:d9:db:dc:f0:3b:07:9c:18:dd:86:43:dd:2d:
         96:df:b9:71:43:4d:78:44:0b:c4:8b:6d:dc:a8:a1:4f:93:bf:
         8f:c6:c5:ff:39:0a:9b:d3:4c:26:b5:06:93:98:2c:29:94:59:
         48:4b:22:cc:53:81:31:73:16:9b:07:2d:b1:2e:e9:a3:dd:43:
         b7:4e:6f:ca:14:52:d3:9e:8c:66:97:6f:d1:8d:49:48:39:f9:
         d4:d2:14:a7:a2:a6:b4:1a:12:0d:a8:ad:ba:eb:59:57:38:b5:
         72:4e:96:5c:f4:87:e1:11:cb:cc:bb:f4:06:cf:e2:a8:dc:4b:
         fc:2d:ba:71:af:05:19:a4:66:58:9c:25:1c:e6:5d:96:2b:ea:
         0d:cd:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 04:32:14 2025 by rpki-client