This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
File:                     neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json)
Hash identifier:          9QoBzxum+F4eMfvC0mAF5zILcDk0aOmDXWTi6cZL/mk=
Subject key identifier:   99:6E:F3:36:E1:7A:23:82:78:72:03:3E:0D:C9:81:CD:0A:09:15:3A
Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
Certificate issuer:       /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Certificate serial:       0CB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
Manifest number:          0CA2
Signing time:             Tue 30 Dec 2025 18:06:29 +0000
Manifest this update:     Tue 30 Dec 2025 18:06:29 +0000
Manifest next update:     Tue 06 Jan 2026 18:06:29 +0000
Files and hashes:         1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: arqjjxL2AJvPXSjny6/Qe35YkfW4yP3Uq+bVHfU4Yx8=)
                          2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: BkjDTlDXiLb184XcwheLXYHUcW7lSFDCL708YWhcDi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl
                          rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 18:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3251 (0xcb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
        Validity
            Not Before: Dec 30 18:06:29 2025 GMT
            Not After : Jan  6 18:06:29 2026 GMT
        Subject: CN=695414a5-d8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:f4:8c:40:8b:a6:24:39:00:d1:5c:75:2a:
                    2b:f9:02:b2:ed:52:a4:18:97:8f:a0:6a:b1:e4:26:
                    a4:96:d0:3f:bc:1b:c7:8b:a2:a6:6e:00:75:f9:d9:
                    c3:52:64:8f:44:d2:3e:89:2c:4d:92:7d:6b:8d:03:
                    32:cb:8a:ce:ed:52:70:5b:d5:4d:f2:dc:b1:ea:c0:
                    d1:83:cd:54:99:6d:c1:24:96:e5:e6:77:f8:42:df:
                    8f:87:94:c2:e2:59:ff:a9:eb:29:f9:87:e1:4c:c8:
                    79:9e:58:e2:41:43:1a:e4:91:3e:dd:1c:0a:4e:15:
                    89:10:54:a0:09:bd:eb:62:6a:86:b9:fc:c9:b7:2a:
                    64:1b:dd:24:62:e5:b8:89:9b:8b:0a:d6:52:cf:fa:
                    ff:c3:5a:af:4c:4c:f5:ee:cd:b9:49:ce:b8:c5:4d:
                    ca:3c:be:49:0f:96:bf:9f:50:e0:d2:f6:3e:84:c3:
                    4f:fe:6c:6e:64:fa:1d:78:cf:44:c3:96:b4:f2:08:
                    85:88:04:29:e6:a8:f0:24:c3:d0:2a:01:8e:f2:78:
                    3a:1e:01:e2:c9:93:4d:97:65:43:20:a3:46:67:46:
                    83:a9:a2:d0:a7:78:73:cf:2e:be:a8:52:54:62:3b:
                    79:5f:f0:71:7d:07:90:19:07:40:a4:e1:da:3e:18:
                    eb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6E:F3:36:E1:7A:23:82:78:72:03:3E:0D:C9:81:CD:0A:09:15:3A
            X509v3 Authority Key Identifier:
                keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:84:f4:2d:f7:a9:f2:a5:0c:9e:54:c0:18:3c:40:b0:f6:c4:
         db:fd:d8:1b:b1:d5:6e:91:9d:40:0b:73:a1:ec:b4:af:ff:0d:
         2b:35:82:c6:03:c8:b8:4f:ad:5e:8c:d5:a3:a6:40:27:29:a4:
         3d:44:14:c0:90:da:f0:6b:5b:b9:df:23:04:23:01:af:24:6a:
         54:35:11:2e:7a:b9:3c:08:b5:b8:25:cf:ce:33:40:b9:09:c4:
         74:eb:d6:56:3c:f0:4e:cd:0a:31:0c:99:19:e5:08:f8:ad:17:
         bf:5f:7c:fd:88:6b:1e:93:5e:93:5a:f5:34:a0:4c:c6:b4:6d:
         6d:c1:7a:f7:19:59:5d:9f:27:71:21:30:c6:04:b4:c5:21:99:
         fd:f8:6f:dd:54:ed:5f:85:33:73:92:f7:46:3a:bf:91:a1:1c:
         10:c0:8b:a1:1d:fc:ff:c3:32:86:a2:ba:26:0d:b9:ac:3e:c4:
         0c:80:2d:42:04:26:99:6c:c7:54:b0:c2:98:84:de:79:97:d6:
         07:87:96:b2:ac:e6:d0:0e:33:88:aa:2f:f4:b8:90:59:ee:1b:
         b1:48:c8:f9:78:18:34:0c:3a:b7:5b:e7:5f:17:a9:c7:71:9a:
         e8:c8:a2:82:c8:10:dd:ba:24:5c:90:c4:bd:b4:f2:b1:e0:af:
         03:e1:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 08:04:45 2025 by rpki-client