This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
File:                     n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json)
Hash identifier:          d51h7XzI8HNvSQCVvsu6qqBxudroZCL3RaT8eLRn2CM=
Subject key identifier:   5A:79:2E:AC:8E:94:9C:77:31:21:3A:7F:52:E7:F9:0C:46:FD:50:1F
Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
Certificate issuer:       /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
Manifest number:          98
Signing time:             Thu 25 Dec 2025 05:26:15 +0000
Manifest this update:     Thu 25 Dec 2025 05:26:15 +0000
Manifest next update:     Thu 01 Jan 2026 05:26:15 +0000
Files and hashes:         1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: EsZYBpIVfQXjHu13sBq36Jev5dXWmCFs9Px5EFW+rAE=)
                          2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: VbFrpRfV71p262oGg48B23Is9OV+1OR5UpiiECaYQ/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 05:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
        Validity
            Not Before: Dec 25 05:26:15 2025 GMT
            Not After : Jan  1 05:26:15 2026 GMT
        Subject: CN=694ccaf7-689f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:d1:f0:7d:e2:61:e4:bc:63:28:d3:7c:35:
                    ea:8a:ad:15:66:22:e0:cd:9d:79:0f:6b:e3:6a:f8:
                    76:9a:06:58:e0:25:50:d2:fe:26:7a:87:a3:e9:fb:
                    24:1d:ef:ce:39:15:f2:a6:84:a7:e5:86:29:0b:e4:
                    e1:b9:34:6e:5e:06:48:d7:9f:78:ac:59:8f:a4:74:
                    19:ff:95:98:e1:2c:37:07:0f:0f:69:55:81:a6:38:
                    aa:9d:a9:fa:a4:9b:d6:5a:68:74:9d:07:0d:27:c2:
                    ba:47:c5:25:4a:e6:24:73:3b:fd:b0:a5:c0:b7:19:
                    f8:fb:4c:a6:51:2e:73:56:94:95:05:15:e1:11:28:
                    6e:7b:af:be:57:43:dd:ff:19:24:d5:3d:51:1a:e5:
                    83:83:76:ef:1d:30:87:6c:57:55:d9:9a:d0:71:7f:
                    60:f4:3a:eb:f9:03:e8:aa:0f:e4:b0:e3:9d:44:5c:
                    14:24:21:c9:21:22:d7:c4:35:ec:87:4e:6b:08:31:
                    c6:8f:89:0c:4a:49:92:cb:6c:d6:9d:c3:76:90:c1:
                    d3:b5:68:dd:ed:cb:37:d3:bf:ac:3d:44:90:08:81:
                    8f:cd:0b:d8:eb:eb:67:62:55:66:d7:3e:75:77:46:
                    6d:1d:ad:39:08:8f:25:c7:f6:f5:35:4d:67:a1:f5:
                    09:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:79:2E:AC:8E:94:9C:77:31:21:3A:7F:52:E7:F9:0C:46:FD:50:1F
            X509v3 Authority Key Identifier:
                keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ab:eb:68:34:cc:26:f0:65:f5:c5:2e:bc:a9:30:20:44:1d:
         70:fb:99:b2:fa:f6:01:66:e0:42:c2:8b:ca:46:4f:b7:46:d3:
         68:77:e7:41:39:a5:8a:ac:85:3f:7b:ca:74:96:5e:71:16:84:
         04:da:c4:7c:0a:30:c8:10:f6:5d:c1:4e:a6:12:90:a7:c7:2d:
         11:53:62:4c:55:36:72:a3:fc:12:ac:01:ba:c1:32:92:db:f2:
         37:37:ee:bf:44:8b:03:49:14:2b:b2:47:2e:70:91:5d:c7:95:
         8f:05:e2:3a:d9:09:31:10:99:c5:09:17:07:15:56:f6:59:e7:
         a7:91:99:7a:4b:48:69:0b:a8:8d:74:9d:cc:01:52:86:b5:61:
         95:81:3a:cb:b8:0d:96:53:6d:c4:43:80:14:0a:33:82:09:a2:
         37:33:53:5a:11:18:65:d3:a0:02:7f:52:6e:67:76:7b:0d:e2:
         17:d8:ba:d0:1b:37:56:4e:bd:21:3b:7b:42:39:12:17:f8:89:
         82:be:8b:5d:01:cc:d3:13:4d:67:4e:a5:79:2f:33:03:62:53:
         d4:3d:a1:99:9c:2d:34:ed:2e:50:ef:3d:7e:4a:f3:01:56:bf:
         91:0b:6d:34:f4:be:f0:f1:74:02:08:82:20:2d:17:4b:49:05:
         41:c5:7a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 05:41:54 2025 by rpki-client