This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          SQITpXbGPB35u4Brn1pMFqdsGP5WE8iLiMBljHfpRLg=
Subject key identifier:   02:7F:13:0E:69:ED:EC:79:F1:3D:28:74:8A:DF:6A:64:CC:6E:41:45
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       0616
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          05F6
Signing time:             Thu 18 Dec 2025 22:20:54 +0000
Manifest this update:     Thu 18 Dec 2025 22:20:53 +0000
Manifest next update:     Thu 25 Dec 2025 22:20:53 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: u36nzk2K7lv1e/2SBq8amHjRr2gGOL4b+TErYv3s3Tg=)
                          2: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: /i4Id8Q+jnrw5e+R6tIy1tKz8MPyg9GBRlUx3W4xwjI=)
                          3: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: 1ILmh7AVLQm5eSNZItp8QnZ0ivg8piYKVtyisI3TQ00=)
                          4: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 414/5RyiyMUZFN0SEFameoFpU4rRSpvpvgBCGAe+h0s=)
                          5: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Dec 18 22:20:53 2025 GMT
            Not After : Dec 25 22:20:53 2025 GMT
        Subject: CN=69447e46-cffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:72:54:ac:10:d6:fc:9d:97:4a:d3:02:c4:
                    07:73:e1:b1:9c:ed:b3:77:d6:fd:8d:6c:53:6d:c9:
                    97:9f:49:f5:01:25:5b:4f:10:0d:fe:1e:08:cb:07:
                    4e:35:b6:4e:b0:bb:25:35:8f:12:b6:7a:c7:23:4b:
                    c8:d5:e5:de:ff:65:0f:67:aa:a0:c7:4b:b3:2b:49:
                    56:9f:60:03:d2:5b:8a:be:c6:6a:48:76:ab:de:dd:
                    cf:ca:28:58:b9:9d:1b:82:c9:77:1a:1c:e9:0c:6b:
                    51:04:9c:04:6b:02:83:96:98:cf:b1:c2:72:4e:a3:
                    bf:3c:5a:b2:15:01:37:1d:89:6a:e8:fa:04:5a:9d:
                    63:e2:ae:54:2c:1a:fc:03:c9:4e:50:46:76:16:e1:
                    80:11:42:d8:98:f7:11:86:d5:a5:2d:a4:e5:44:cb:
                    bb:6d:e3:1d:fa:4b:e0:b9:77:c6:86:73:ab:f2:cc:
                    88:a5:b4:30:9a:c4:6a:78:cb:38:52:e3:45:bb:08:
                    c7:e3:fa:f0:de:b6:e2:44:05:6d:41:25:a8:c3:1e:
                    45:41:5e:12:fe:14:db:ef:a0:3a:78:7b:0c:c2:e1:
                    e7:03:fa:e9:39:7b:b9:65:44:84:71:80:e9:5f:7f:
                    2e:d6:19:dc:de:99:2c:ae:fc:10:b1:2f:60:af:47:
                    21:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7F:13:0E:69:ED:EC:79:F1:3D:28:74:8A:DF:6A:64:CC:6E:41:45
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3f:93:09:06:e0:f9:18:a5:3b:8f:35:0a:78:cd:da:c2:af:
         ce:b4:41:f2:bc:f6:2b:e2:8d:a9:12:af:1c:ca:ce:8e:df:61:
         65:44:19:f2:ec:50:f0:55:d2:a6:11:ae:ab:f1:9e:c0:17:e3:
         f4:20:d8:71:4d:8b:20:72:fd:bd:7c:a4:fe:74:7a:1a:d2:3d:
         27:f5:06:c4:83:20:43:df:5e:40:10:9c:d1:86:64:d7:5c:8b:
         df:56:eb:f2:63:78:3e:dc:a4:b7:c0:74:db:76:5b:b4:c9:8b:
         ec:81:aa:9e:64:bb:50:bd:b3:7a:4e:f0:9c:df:01:fb:d8:8b:
         b2:21:64:16:d3:65:ff:b7:04:d2:2a:eb:55:eb:8a:fe:77:b2:
         64:e5:79:e8:bc:7e:9c:d3:54:e4:5c:60:86:31:2a:b1:35:23:
         36:11:7f:96:9c:12:21:40:11:52:c9:f3:33:49:81:29:f9:2a:
         e7:68:10:d4:e7:9f:32:ec:0e:ab:ea:fc:6a:72:b6:70:33:7e:
         a5:e7:bd:47:20:8e:d0:1e:a5:35:72:e2:41:cc:8c:80:69:8d:
         0f:b2:9e:a4:5a:e4:49:4b:90:04:4d:27:d4:89:c8:1e:7b:21:
         8e:4d:44:b4:48:2e:94:99:10:94:94:be:a2:e0:c2:7d:b1:19:
         cb:5f:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:46:56 2025 by rpki-client