This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File:                     NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier:          vUGdt0z8VOqRKOpdoYr4aIG44HMPKLk1495F2elvXmQ=
Subject key identifier:   59:3A:EA:EE:47:FF:2A:BD:6B:84:49:15:BA:B4:DE:80:EF:E1:B1:78
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer:       /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial:       13E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number:          13E0
Signing time:             Wed 31 Dec 2025 16:43:00 +0000
Manifest this update:     Wed 31 Dec 2025 16:43:00 +0000
Manifest next update:     Wed 07 Jan 2026 16:43:00 +0000
Files and hashes:         1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: ioYo81Zn8jhCIbYjqY8wz6uucunO8/P2HvPtySzW700=)
                          2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: WNdbUIrq72HztcMiWEgIIxA2+CqivH5XP6V6egY23qM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
                          rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 16:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5096 (0x13e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
        Validity
            Not Before: Dec 31 16:43:00 2025 GMT
            Not After : Jan  7 16:43:00 2026 GMT
        Subject: CN=69555294-df09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:4e:cd:b9:02:2a:12:57:6c:99:42:54:7f:
                    ae:3d:c4:bc:3f:9f:6b:d7:5a:09:ba:43:f0:76:04:
                    a1:28:67:76:0b:e2:1d:b5:fc:15:89:43:8e:46:9c:
                    ec:ff:93:a2:07:b4:ec:81:00:6f:6c:55:f7:dd:d6:
                    11:1c:15:27:13:ca:6a:90:d2:87:92:48:70:9f:88:
                    4e:b3:e8:57:e2:3d:05:11:e9:a8:2f:90:03:f8:a4:
                    a3:03:1e:26:22:11:ef:a0:82:80:21:fa:af:10:10:
                    b1:de:45:06:17:c2:3d:5b:8c:66:8f:c1:b6:d6:9b:
                    14:65:1a:25:81:6b:bb:5d:c9:94:ef:b9:09:58:e2:
                    67:8d:cf:80:1f:84:9f:08:64:95:ba:21:89:d6:6f:
                    08:10:6e:30:74:47:9f:90:48:2d:26:af:eb:86:0e:
                    db:aa:6a:ed:5e:42:5d:0c:8a:28:d4:b8:db:46:42:
                    48:aa:ce:bf:21:5e:b0:b2:de:a5:f6:88:64:d1:23:
                    d8:4e:bd:6d:e6:27:e5:b6:bb:e2:24:e8:c4:51:c2:
                    ef:32:43:b4:f7:dc:5a:56:77:8f:f1:87:98:da:c0:
                    1b:56:0a:4e:3f:d0:ab:d9:d5:fb:e3:85:8b:d4:19:
                    50:28:8d:14:64:b9:0b:a5:b7:2e:38:cf:40:f5:24:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3A:EA:EE:47:FF:2A:BD:6B:84:49:15:BA:B4:DE:80:EF:E1:B1:78
            X509v3 Authority Key Identifier:
                keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:24:1e:61:ba:a4:1e:e6:fb:28:9d:a9:a6:2f:7e:7c:84:
         32:13:de:3c:85:57:c5:4f:ce:7b:a2:37:2b:af:64:ff:9d:84:
         a8:b9:69:76:57:2f:76:b7:92:2d:9b:25:11:12:54:a7:07:38:
         61:69:54:73:12:b6:2d:02:73:8c:90:4f:b9:f0:ce:05:a0:7f:
         0f:25:18:27:c8:8f:07:aa:ee:bb:53:d9:b4:08:eb:fe:33:90:
         b5:a8:04:79:6a:79:96:ec:e7:86:6e:84:a1:65:ab:42:06:98:
         50:2c:b5:d1:0f:5c:1c:31:cb:60:93:e5:68:3c:b8:ee:f0:bb:
         ad:24:9d:f2:55:f2:c9:8b:c2:b7:eb:5d:16:55:91:66:45:7d:
         5e:34:bc:00:c8:78:f8:eb:de:1f:6f:3e:d1:cc:eb:c2:ee:db:
         18:7a:2f:31:1d:ed:ef:9a:f9:e4:eb:02:13:1d:e9:25:28:7e:
         dc:86:01:77:39:3b:98:91:c6:fc:eb:29:a9:e5:f3:2d:af:9a:
         06:44:89:f9:ee:5f:2f:07:60:1f:4c:6c:ad:16:3b:2b:ad:99:
         55:b4:d3:59:b0:96:47:39:2d:ab:dc:65:31:d5:b6:9b:b2:18:
         6b:81:59:fe:97:95:cc:c9:00:b7:a6:f6:d3:7a:be:0d:f7:a6:
         fd:1e:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 01:01:57 2026 by rpki-client