This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File:                     NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier:          mcW0+65olxx7JkOkpi+awDT3avvGq7olnHR8u5OBYDQ=
Subject key identifier:   C3:2B:D2:86:F4:08:47:46:59:45:D7:42:B3:5A:93:EC:33:E5:18:96
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number:          51
Signing time:             Fri 19 Dec 2025 06:13:15 +0000
Manifest this update:     Fri 19 Dec 2025 06:13:15 +0000
Manifest next update:     Fri 26 Dec 2025 06:13:15 +0000
Files and hashes:         1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: 3OfcP6JISeXgUS9w023uRVcynC+9mSVXNtoLNBRyWZA=)
                          2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: dgVomHsPjy8dnzAeq1krltAgv8t1jsAsT7S8XSGxsvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Dec 19 06:13:15 2025 GMT
            Not After : Dec 26 06:13:15 2025 GMT
        Subject: CN=6944ecfb-cbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:ef:96:2f:c8:02:47:ba:2f:ba:f3:c5:2b:
                    c3:82:c5:f1:67:7b:8f:e9:c4:b4:92:40:6d:44:7a:
                    5b:d0:7b:ba:e8:51:64:5a:e4:0b:e6:59:6d:76:c7:
                    e6:94:6b:1c:50:44:70:14:64:a9:d4:09:9d:12:ca:
                    5e:1e:a5:95:42:b9:e3:ce:de:b5:19:46:f3:9c:be:
                    88:01:bc:4e:ec:c9:c4:50:eb:2d:df:36:e1:b4:42:
                    2b:39:a1:2c:a5:b6:44:f3:06:81:fd:22:23:5c:3c:
                    e5:8e:76:d9:75:dd:63:64:7f:77:5d:ab:4e:21:21:
                    e7:e4:d3:4d:48:e6:e4:0a:20:01:1d:b6:95:2f:d9:
                    9f:77:69:ea:11:2c:5b:f9:ea:7d:cf:8f:52:53:1d:
                    82:ef:82:c9:29:37:01:c9:84:09:c9:cc:08:ff:a3:
                    28:7b:5d:cf:1a:3a:8f:27:bb:13:47:3d:53:88:5c:
                    83:d0:8d:3f:a9:4d:17:78:30:98:a0:ce:d4:76:1e:
                    3d:bc:27:26:38:16:7a:75:95:cd:73:37:1f:cb:18:
                    f7:8e:34:80:29:cc:e6:8b:db:29:0d:a4:85:98:bf:
                    8c:69:d9:4a:06:1d:63:eb:1c:64:5e:f9:6b:bf:ac:
                    2d:87:a6:95:9e:74:33:3c:dc:5e:20:58:dc:32:e9:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2B:D2:86:F4:08:47:46:59:45:D7:42:B3:5A:93:EC:33:E5:18:96
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9d:5a:3c:bc:4f:f5:b4:ae:60:0f:a6:4e:cb:13:ec:d1:55:
         7a:09:68:fd:83:fb:39:96:0c:ba:c6:5b:6a:39:3d:4e:73:47:
         25:01:88:56:e6:ea:8f:52:7e:65:ea:5b:36:0b:36:e2:f3:6e:
         1c:f7:13:14:1f:14:a4:f4:20:07:66:c2:95:9d:95:20:5b:40:
         f8:ce:b7:e1:bc:68:f8:c3:89:15:63:7e:57:28:c0:f7:50:68:
         76:6e:70:1a:b5:e1:7e:23:10:f5:ef:b2:14:a5:7e:06:32:4a:
         ef:ad:fe:a7:f5:74:19:b3:0a:b6:f8:e6:8e:92:97:ff:7f:05:
         d7:c7:6f:7c:35:a0:22:1f:3b:16:e4:18:a6:31:af:03:95:bb:
         93:f0:04:ce:d1:7c:60:02:97:db:4b:1e:24:93:e5:04:89:0a:
         1c:fc:f7:3f:0c:a8:3e:a7:d1:f9:87:66:90:9e:ff:8a:65:ac:
         0b:84:50:c1:c4:fc:b5:58:a1:66:cb:37:4e:5a:11:64:c9:af:
         65:e9:45:a9:23:85:8f:74:32:6f:f6:92:d3:c4:40:52:dd:ef:
         7a:e0:11:43:7a:9c:40:b8:72:a3:35:5a:78:90:5d:cc:3a:49:
         25:3c:0b:ca:45:07:86:f0:f4:4e:f2:f4:64:91:13:56:55:6a:
         fb:3c:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:12 2025 by rpki-client