This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft
File:                     nlE6zE17kAFKhn-1KviSKeALpKw.mft (raw, json)
Hash identifier:          Nyj+S2oh2HskFg7jPPpU6LRZTucagE2tDKyOn08fvR0=
Subject key identifier:   24:79:34:41:AA:80:19:C1:78:45:58:8D:4B:BE:C1:5A:B6:C1:9C:B1
Authority key identifier: 9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC
Certificate issuer:       /CN=A91B2472/serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft
Manifest number:          010E
Signing time:             Sat 27 Dec 2025 03:55:53 +0000
Manifest this update:     Sat 27 Dec 2025 03:55:53 +0000
Manifest next update:     Sat 03 Jan 2026 03:55:53 +0000
Files and hashes:         1: nlE6zE17kAFKhn-1KviSKeALpKw.crl (hash: Jyca2pEdgONu1TbPKeDHaeJDkGnyGhiPof1UZAP22/A=)
                          2: 1B4BDA5C48B011EF9D34415EC4F9AE02.roa (hash: gcIhWP5NO91lJBfeWuctKx1kLPZssG1GkCQYCQaZs38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl
                          rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 03:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2472, serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC
        Validity
            Not Before: Dec 27 03:55:53 2025 GMT
            Not After : Jan  3 03:55:53 2026 GMT
        Subject: CN=694f58c9-9ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b3:73:69:a3:68:8b:f0:07:b0:3a:fd:c5:01:
                    5e:22:db:9f:ea:24:fd:b6:09:b6:71:b3:18:ad:a9:
                    49:49:3c:95:de:2d:7d:98:96:45:f6:91:71:42:c6:
                    ff:96:a0:bd:27:18:c8:85:29:08:c7:48:a5:41:b3:
                    c0:21:f6:8a:50:64:f9:96:41:ec:28:e8:e4:d6:4c:
                    2c:d0:20:a8:92:6a:94:a6:f2:eb:59:48:f7:16:a0:
                    df:4f:59:e7:bd:4f:3e:68:3e:4b:88:df:00:cf:ff:
                    01:34:29:a8:e3:3e:ab:a6:fe:0b:27:95:63:05:32:
                    01:9e:92:5f:c9:a5:8f:18:3b:33:ef:a7:3c:ed:bf:
                    bb:e4:bb:7f:6e:4a:06:33:68:30:e7:36:e3:de:c9:
                    ba:91:93:f9:a0:33:21:fb:e7:b8:51:06:b8:b4:ae:
                    ce:b4:d9:8e:fb:4d:1b:d1:2a:55:ed:22:16:15:36:
                    a6:5b:ac:21:7b:ae:fa:d3:c1:39:d9:08:29:1b:9a:
                    eb:6d:e0:4d:a6:13:28:f8:14:56:b9:b8:08:9b:f9:
                    65:b0:33:f7:8a:e7:e6:67:20:4a:ca:01:3d:14:45:
                    00:00:df:34:6e:96:ae:56:3b:9f:7c:c9:87:44:62:
                    28:0c:d6:e2:96:67:e0:ba:ef:2d:b5:de:85:0f:e4:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:79:34:41:AA:80:19:C1:78:45:58:8D:4B:BE:C1:5A:B6:C1:9C:B1
            X509v3 Authority Key Identifier:
                keyid:9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:a4:21:ee:ae:6d:aa:c6:46:90:32:10:00:07:95:4e:93:
         96:ac:bd:2e:2d:8c:be:b3:88:f0:cb:b1:52:94:c5:f4:3b:5b:
         d0:2b:2d:5d:01:99:a8:84:7e:5b:0c:d6:99:93:8b:58:51:a6:
         a1:29:80:29:8c:55:04:e6:b3:ff:16:aa:b7:ab:9b:d7:ce:19:
         e1:51:58:e9:8b:5e:3f:f6:47:fc:4d:f7:65:ba:b4:6c:50:10:
         33:4f:b2:8b:0b:9f:ba:de:8a:2b:ab:18:cd:4b:b7:01:0a:02:
         fe:62:e7:7e:c1:89:fc:fe:9e:f8:2d:12:18:c4:0e:82:3c:28:
         22:49:2a:8a:bf:fd:5c:c5:6e:1c:bc:f0:6b:91:a4:df:c5:21:
         94:4d:ac:3f:2e:01:5a:c2:87:6b:87:0f:29:a9:5a:17:eb:ab:
         4a:ad:a1:76:a8:d3:2a:5b:7c:ec:56:37:44:a0:4c:a5:1e:61:
         09:d7:09:54:a7:46:a2:0e:13:c2:ca:3f:02:64:18:28:fb:b5:
         19:b1:f4:d7:ba:85:48:b4:46:5e:f3:85:5f:8c:57:5b:41:a4:
         57:72:71:1a:c2:9c:d6:40:3d:bc:79:72:d5:7b:af:0e:d8:d5:
         c9:7d:58:d9:0b:6c:c5:84:ea:86:fe:83:39:17:ac:0e:b3:36:
         db:14:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 10:05:04 2025 by rpki-client