This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
File:                     NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json)
Hash identifier:          w9ro9o9doPNTITQO6CM5cu8lgFjnRga6C84DR/CaHHA=
Subject key identifier:   B6:F2:11:A6:14:99:50:B5:A0:CB:3A:C7:BE:98:BC:EE:E5:9B:DD:5A
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Certificate issuer:       /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
Manifest number:          014B
Signing time:             Sat 27 Dec 2025 03:13:58 +0000
Manifest this update:     Sat 27 Dec 2025 03:13:58 +0000
Manifest next update:     Sat 03 Jan 2026 03:13:58 +0000
Files and hashes:         1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: UBCeRElijs28unuMsibhtmrmfD3lMSUkinD1YVsnpZ4=)
                          2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: dwiUCjJJt0eG2N+1FVdoqJWTzPaXWWEUJdKiT+scZJI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
                          rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 03:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
        Validity
            Not Before: Dec 27 03:13:58 2025 GMT
            Not After : Jan  3 03:13:58 2026 GMT
        Subject: CN=694f4ef6-5464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:62:f4:d0:c8:9c:95:96:77:fe:7f:d0:97:
                    2a:1c:7c:82:f1:50:96:b3:44:67:29:50:d0:bb:a6:
                    ca:0c:98:84:f7:d6:4e:7c:c8:66:0e:99:84:12:28:
                    77:e4:a5:8a:47:5f:7f:8e:98:82:83:3a:7b:ea:ea:
                    41:99:99:7d:33:b0:4b:08:f7:50:8f:6a:b1:c4:9f:
                    a2:cf:33:a6:6b:d4:41:69:18:53:db:fe:f2:e4:dc:
                    6b:a1:95:a3:8f:c6:e2:d3:26:ac:23:4c:97:b0:75:
                    b7:7f:41:5c:5f:a9:44:57:d4:b7:7d:66:8a:65:83:
                    d9:84:e9:19:d5:a1:a5:14:60:7b:2f:12:1d:65:8f:
                    33:18:de:86:cb:d1:7f:f0:b6:82:a4:fa:bf:24:60:
                    9a:8c:b2:8d:6f:c7:14:02:e3:44:97:32:45:da:f2:
                    42:9e:5d:a4:e9:42:9f:aa:eb:25:8b:dd:37:72:0b:
                    4a:29:a9:3b:27:db:6b:c0:89:26:a3:e0:30:ee:bf:
                    90:ab:9f:12:8f:72:c4:8a:79:a1:02:56:63:04:8b:
                    30:9f:97:61:42:c0:d2:66:b2:a6:59:8e:33:d4:3d:
                    16:df:8b:76:b9:62:9f:16:29:b9:8e:7d:e3:e0:41:
                    36:4a:9e:ca:30:50:21:4f:b4:0d:1d:13:8c:d2:e3:
                    fa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F2:11:A6:14:99:50:B5:A0:CB:3A:C7:BE:98:BC:EE:E5:9B:DD:5A
            X509v3 Authority Key Identifier:
                keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:64:f3:77:30:ce:3f:52:5c:70:65:ff:33:16:63:78:55:b5:
         8b:fb:31:0b:ca:c5:e0:9d:74:b6:c9:d3:65:34:54:e7:e2:15:
         23:d3:f0:99:e3:41:9b:6e:e3:33:45:da:67:6d:9b:6d:f9:e2:
         78:c9:7d:79:54:c7:ed:e5:89:5c:82:12:9d:5e:f1:d9:fb:b8:
         60:94:f7:87:29:e7:73:87:f7:ad:25:5d:c8:d0:48:ee:12:d3:
         a5:31:15:3b:70:4e:62:c3:7c:db:9f:f4:f7:03:69:90:37:13:
         75:65:0d:c2:6c:f7:eb:c7:85:e4:95:3b:99:ff:27:2d:fa:7e:
         ce:1a:79:9a:25:d2:8a:aa:b4:9f:b1:1f:7b:a1:2f:32:9e:f2:
         b5:e1:46:58:60:95:89:01:be:0e:3e:54:ff:81:ed:9a:f2:55:
         e7:11:05:2d:cb:d5:17:6c:9c:4a:0c:41:8e:91:45:06:13:2a:
         e5:1a:ce:17:b2:8c:56:94:40:38:77:93:17:b8:32:1b:74:d8:
         ea:a7:0e:75:c6:29:f1:b6:7e:73:82:cc:0e:00:28:73:a7:f1:
         5a:7d:86:72:5c:85:a5:dc:89:30:c6:f2:03:a7:6a:53:10:1d:
         f8:88:72:13:63:98:9c:3b:58:83:5a:12:5c:a8:b8:83:44:61:
         f4:14:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 20:28:31 2025 by rpki-client