This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
File:                     Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft (raw, json)
Hash identifier:          /Jx8dhWg5JauUZBhdHOVJXM0GWL0qB4nrO/r3Yxhy8U=
Subject key identifier:   85:CD:7D:2A:92:BA:A9:C8:82:FC:1E:63:1E:28:F2:25:DB:D7:9E:EB
Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26
Certificate issuer:       /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
Certificate serial:       05DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
Manifest number:          05D1
Signing time:             Thu 18 Dec 2025 22:23:13 +0000
Manifest this update:     Thu 18 Dec 2025 22:23:12 +0000
Manifest next update:     Thu 25 Dec 2025 22:23:12 +0000
Files and hashes:         1: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl (hash: R8cRm/kLHQPyMSp6IVucb2qq3558qpI8fzC47wwPqII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl
                          rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498 (0x5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B67B0, serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
        Validity
            Not Before: Dec 18 22:23:12 2025 GMT
            Not After : Dec 25 22:23:12 2025 GMT
        Subject: CN=69447ed1-feb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:4b:52:0b:58:8b:e5:04:bd:c9:c7:37:28:
                    88:d6:47:78:10:0c:ea:c5:bb:95:c7:ac:31:92:af:
                    1d:c3:4d:b7:1e:88:20:2e:32:4b:39:c3:38:3d:93:
                    f8:fc:2a:7b:c1:b0:8e:72:f6:e2:ae:66:ec:f4:84:
                    b1:af:cc:78:2f:9e:9a:0b:a7:2f:21:12:e4:7a:e3:
                    30:bc:f9:f2:59:6f:52:42:3a:e0:4f:92:ae:44:cd:
                    93:70:45:3f:90:3e:08:7f:db:28:8d:88:a6:99:d7:
                    3f:b9:5d:05:04:69:3a:76:7f:4b:2f:79:c7:7c:6d:
                    61:38:b9:28:67:dd:55:5b:14:69:0d:64:69:f6:3b:
                    8a:69:fc:67:b5:98:9b:a5:bb:f0:28:19:89:c4:d4:
                    2a:0b:00:6b:f8:ba:ad:91:7c:28:9c:c1:94:17:d5:
                    97:53:01:36:d0:70:73:0c:b8:08:72:a6:8e:86:8b:
                    ba:72:63:4b:54:e5:89:cb:d6:c7:2d:e7:b3:eb:8c:
                    db:b8:c7:13:20:ce:92:0a:c3:e8:94:c3:41:3d:4a:
                    14:17:d3:a1:ef:b2:4b:63:fc:de:9e:65:10:ce:1c:
                    c8:f0:0e:94:30:ed:4d:f3:10:63:c6:fb:79:a8:9a:
                    8a:82:7d:a6:29:1c:de:9a:3e:67:e1:8a:1e:02:ed:
                    13:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CD:7D:2A:92:BA:A9:C8:82:FC:1E:63:1E:28:F2:25:DB:D7:9E:EB
            X509v3 Authority Key Identifier:
                keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:79:46:a9:a8:5f:7a:2e:a5:29:2e:6b:26:cb:70:71:b8:ab:
         28:4c:78:1b:1a:38:d2:1a:37:80:6e:9d:28:db:6f:88:34:80:
         79:70:f5:c4:ea:59:30:b3:d2:0a:be:e8:e7:8f:6c:3d:31:3f:
         e1:35:7e:d9:93:0c:5c:43:3a:17:c2:eb:88:2b:78:87:e8:1d:
         6f:77:ea:b6:00:a1:fb:a7:50:b1:77:ed:0e:8d:09:fb:39:a3:
         3a:c1:7c:ce:a6:83:0c:d1:74:a0:35:d8:7f:f8:d1:52:c7:d3:
         d2:2c:4d:f9:4c:85:e8:1a:26:87:96:dd:2c:e5:61:06:74:2e:
         8e:e7:e1:5f:f4:84:32:d4:3d:46:f9:c6:2e:32:04:98:c7:ca:
         ef:ea:41:36:c5:f0:c8:d4:1e:b4:6a:52:ed:d2:cb:58:0d:fb:
         4d:db:b3:77:45:67:83:74:c1:86:79:31:5d:db:61:8a:66:33:
         0c:5f:b3:34:50:a5:75:05:24:96:b7:b8:f6:32:ad:84:8f:42:
         76:26:87:36:61:da:e6:80:09:3c:24:ed:16:9e:25:3b:6e:da:
         c3:a5:33:34:8e:7a:d8:74:92:d3:fe:46:18:70:f1:c5:69:46:
         ea:4a:9e:4f:42:c4:42:fe:98:ce:24:00:74:53:15:33:6a:f5:
         2a:25:15:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:08 2025 by rpki-client