This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
File:                     n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json)
Hash identifier:          MvhMBzRwesDnd6T3nsnTdc5BZ1Kl+zoVUkp1sTqCSIk=
Subject key identifier:   0B:23:4C:69:9A:1A:0F:6D:EC:2A:E1:E6:CC:E1:D1:0F:E8:76:96:8B
Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
Certificate issuer:       /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
Manifest number:          95
Signing time:             Fri 19 Dec 2025 05:32:48 +0000
Manifest this update:     Fri 19 Dec 2025 05:32:47 +0000
Manifest next update:     Fri 26 Dec 2025 05:32:47 +0000
Files and hashes:         1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: b5Fh6MNbAlEAHqHY90cUEhs+dINn18dvMYd9b6Dm/1c=)
                          2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: VbFrpRfV71p262oGg48B23Is9OV+1OR5UpiiECaYQ/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
        Validity
            Not Before: Dec 19 05:32:47 2025 GMT
            Not After : Dec 26 05:32:47 2025 GMT
        Subject: CN=6944e380-160a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:60:22:1b:27:6c:f9:01:7d:31:49:39:ca:
                    08:8c:ac:6c:54:1d:b3:00:45:21:88:8f:00:59:a5:
                    3e:00:37:f3:47:6a:23:3d:53:e4:94:66:ce:b2:34:
                    4e:70:97:e4:08:a0:bb:e3:1a:7c:f6:d8:ae:63:a9:
                    e8:b4:cd:47:e8:c8:06:94:d1:f3:9b:2c:11:2c:8c:
                    37:bc:91:26:3c:fb:51:c1:9a:91:f8:4a:34:70:73:
                    ca:3a:57:d0:dc:7b:d5:21:93:a6:98:25:51:eb:3f:
                    19:85:81:e7:61:56:92:b8:0c:03:bc:29:fe:87:86:
                    a5:d2:cd:09:27:c5:77:90:49:c5:ec:d7:5b:98:e2:
                    c4:0e:70:d6:f3:3d:46:13:fa:70:39:77:26:ea:e6:
                    20:25:17:67:b8:98:2b:ba:34:69:1a:de:b8:4c:89:
                    65:0e:93:72:f8:f0:7b:f0:d7:21:a7:d8:83:09:f1:
                    95:6a:d1:ae:26:44:72:19:35:18:e0:1a:32:d3:70:
                    71:36:d4:b0:66:72:97:00:29:80:50:df:ce:c0:6e:
                    9a:62:c5:40:52:0d:d0:d3:ff:61:fa:c2:69:6a:5a:
                    55:fc:53:9e:59:e1:40:c2:49:e2:5a:e8:7e:35:bd:
                    b6:34:d2:e5:4b:ac:67:1d:20:bd:20:cc:2b:05:56:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:23:4C:69:9A:1A:0F:6D:EC:2A:E1:E6:CC:E1:D1:0F:E8:76:96:8B
            X509v3 Authority Key Identifier:
                keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f0:92:68:73:2b:f3:6c:5a:5b:c2:59:1f:7d:f6:f7:84:42:
         57:9e:1f:5f:08:93:f9:d3:97:77:0e:33:d0:ef:75:44:b4:26:
         67:95:cc:7f:0f:69:a9:18:b7:f4:b3:05:9c:7f:7d:e1:b3:7f:
         93:1c:6f:62:fc:d5:5f:e7:d8:d6:07:54:5a:5c:77:22:6d:2c:
         fc:13:92:f0:b7:76:a3:a0:30:e2:5b:9a:b4:84:2f:44:00:82:
         9c:90:a0:31:3a:77:41:fb:62:4d:16:95:8c:d5:de:ce:c8:03:
         f1:49:f4:27:a6:a4:df:08:68:16:a0:7e:50:6e:68:1e:c9:1b:
         26:84:0e:ee:a9:f1:15:7e:cd:f8:26:b6:f2:5a:67:27:de:4f:
         b7:15:57:39:43:94:3b:de:8a:c2:d7:b2:95:1d:99:bc:6e:76:
         0c:7d:89:78:35:73:bd:ef:7d:19:08:19:96:37:58:62:41:8c:
         e9:14:fb:49:95:fd:02:b5:ce:dd:a5:87:6a:dd:01:ad:2a:f9:
         1d:20:fe:d4:de:ae:61:03:f7:7e:b5:43:fc:90:fd:c7:b2:1d:
         f6:37:ea:9b:77:c3:54:70:08:a5:17:bb:bd:69:4c:16:e3:a8:
         e4:03:a4:e9:c9:1c:66:cc:cd:8d:d9:31:65:d4:01:f2:d0:54:
         80:ec:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:59:53 2025 by rpki-client