This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
File:                     nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json)
Hash identifier:          Al28L1Z0E/vYYz2RPmjogbmDt4bG+I3vDR0bc/wqMxM=
Subject key identifier:   CB:09:86:62:75:50:CE:63:6C:A9:EC:91:58:D2:7D:55:37:2D:CD:BB
Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
Certificate issuer:       /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Certificate serial:       3525
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
Manifest number:          3510
Signing time:             Sat 20 Dec 2025 14:40:11 +0000
Manifest this update:     Sat 20 Dec 2025 14:40:10 +0000
Manifest next update:     Sat 27 Dec 2025 14:40:10 +0000
Files and hashes:         1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: wiJ6Dohsv5Vx6rSgcous+ui+InvpwQTgFnQwDEiGvEo=)
                          2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: mBi2xBGJz7ABmwG7Kd/FaX5nMMQUKh+oy7XK2XR044o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
                          rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13605 (0x3525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
        Validity
            Not Before: Dec 20 14:40:10 2025 GMT
            Not After : Dec 27 14:40:10 2025 GMT
        Subject: CN=6946b54a-3799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:c6:f3:5f:ae:c0:65:2c:c9:39:b5:08:ba:
                    cd:1c:c6:5f:c3:83:12:36:fb:01:b2:d7:c5:50:c9:
                    c7:27:06:0c:84:2c:24:0b:24:32:5e:79:c5:df:6d:
                    1e:cf:89:b4:0d:3d:70:f2:d1:11:ab:85:71:37:fe:
                    ee:8c:0a:40:61:b3:dd:0f:02:0e:8b:d8:68:76:30:
                    fd:04:57:23:76:d2:1c:17:4f:16:02:b4:32:a2:a8:
                    00:41:9a:de:f3:1a:46:d8:35:b1:42:8a:18:22:7e:
                    94:41:e3:5b:7f:af:0d:c9:ff:b7:fe:9a:1b:70:ba:
                    4c:76:48:b2:4c:09:d6:62:ec:17:95:97:8a:cf:be:
                    3b:19:c9:5c:8b:1c:c2:68:cb:84:af:28:76:4c:a6:
                    64:b0:17:85:25:ec:3a:7a:90:36:cc:6c:f7:bb:5a:
                    86:ce:b6:10:c4:7d:5a:b2:e6:3d:0a:85:05:53:4b:
                    6c:57:60:e7:13:b1:81:39:27:ef:91:ac:a3:19:78:
                    74:a5:7d:97:c8:17:82:65:39:bc:3c:7b:05:86:9b:
                    86:43:89:02:89:84:9d:48:01:e0:62:2f:66:c2:bb:
                    0d:bf:8c:b9:ec:da:1c:8a:96:99:7a:5a:89:c2:04:
                    af:6d:e4:6e:66:d5:14:0a:8f:55:96:f1:a3:35:cc:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:09:86:62:75:50:CE:63:6C:A9:EC:91:58:D2:7D:55:37:2D:CD:BB
            X509v3 Authority Key Identifier:
                keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a0:50:46:6b:d6:37:a9:40:d9:36:27:e1:7e:a3:ae:d1:8d:
         6e:d9:a1:e8:4c:d5:3b:14:c1:3b:fb:3b:ac:b8:a3:d2:1b:32:
         35:d9:00:da:e1:a9:a5:ea:76:57:96:16:72:63:68:98:02:d4:
         cd:c4:1f:cd:dc:77:8e:77:0d:10:8c:92:f0:87:0f:6e:16:14:
         68:8d:73:2b:3e:5a:2d:3e:3d:55:67:5a:cd:96:e6:a6:75:ae:
         6d:82:5d:7e:01:dd:72:5d:06:d6:1c:83:f3:05:c1:1c:73:e3:
         49:53:30:95:dc:04:0c:04:9a:66:7a:10:33:46:d3:1d:73:10:
         2e:08:eb:22:fd:55:c1:2c:fe:1d:42:d8:4c:10:9e:90:58:67:
         1c:87:96:ed:90:6e:e2:5a:af:77:36:a2:9f:39:e0:b7:4e:12:
         80:75:4a:d2:3a:1f:91:0d:34:c1:ca:75:65:05:15:5b:6e:b4:
         e6:26:1c:c6:d8:13:53:ba:e8:51:d4:0b:d7:1b:56:c6:96:c2:
         1d:2b:af:2b:0d:4b:35:86:77:50:0c:2e:65:2a:c4:25:4d:e2:
         48:d8:f7:8a:11:96:34:93:78:a4:c1:7e:fa:25:07:4f:09:b7:
         5e:20:ac:7b:fa:c0:64:da:1a:42:d5:52:8d:d5:92:bf:eb:ff:
         35:75:04:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:14:33 2025 by rpki-client