This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File:                     n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier:          gUCIgUkxzBL1CG2bf0cc5c2MW97d52aUfvOICy07wDw=
Subject key identifier:   87:33:8A:62:A9:25:5C:00:8F:F7:39:30:84:AE:9F:9D:EC:4A:D6:60
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer:       /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number:          9C
Signing time:             Sat 27 Dec 2025 05:16:27 +0000
Manifest this update:     Sat 27 Dec 2025 05:16:26 +0000
Manifest next update:     Sat 03 Jan 2026 05:16:26 +0000
Files and hashes:         1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: tYWVP3eitP3EgeVS9StzbLm/HGI7+7XlyFkUCA4fHLI=)
                          2: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: mh+UCJNFemXmx1rXPNcCjaRpL6VWoi5lGRmYTA/fEi0=)
                          3: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: Q7i85RevnZqkOBdKbp0/e+tjgTQzpkBCM+sWN4N+OW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
                          rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 03:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
        Validity
            Not Before: Dec 27 05:16:26 2025 GMT
            Not After : Jan  3 05:16:26 2026 GMT
        Subject: CN=694f6bab-adf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:40:7c:05:8d:dd:17:e2:67:67:fe:66:cb:
                    35:92:34:db:9e:d7:b0:b0:79:be:36:13:61:a2:c6:
                    cf:35:14:5e:6b:39:af:b4:46:78:7c:e1:4b:7c:df:
                    2f:10:69:c6:b6:6c:ba:39:f8:34:9b:1f:85:38:44:
                    a8:58:9c:e8:4d:e1:44:3a:2f:e3:2d:ff:69:c1:ca:
                    71:0c:6d:30:17:fb:41:55:28:57:39:1d:ad:7b:41:
                    fd:18:fe:ff:98:2c:84:10:3c:76:1b:bf:d0:6e:e0:
                    54:b2:41:fd:aa:44:20:35:fb:b0:a9:c0:e7:95:62:
                    23:1e:d0:da:3c:9c:30:2d:69:5b:86:7d:53:bf:5b:
                    5f:61:6a:37:39:0c:8d:f4:6e:0d:f8:70:3c:92:14:
                    ba:3d:8f:16:bf:cd:80:45:d6:ce:33:ba:b1:41:31:
                    ce:b1:a1:87:dd:51:47:e5:78:9f:d6:01:01:2d:9b:
                    32:a2:45:f6:a9:67:04:57:26:1a:e7:50:00:34:bf:
                    9e:f7:c7:de:09:8f:08:48:94:a6:92:98:cc:b6:39:
                    a5:3b:7d:47:05:d5:68:5e:f0:0e:d9:3a:12:42:06:
                    e7:0c:36:d4:6e:ca:ad:64:78:7c:cb:15:fa:0c:26:
                    6a:5a:2d:2a:c2:9b:2c:4b:ec:88:82:49:6c:a4:e1:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:33:8A:62:A9:25:5C:00:8F:F7:39:30:84:AE:9F:9D:EC:4A:D6:60
            X509v3 Authority Key Identifier:
                keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e6:14:e0:a3:b1:1c:a4:a4:a1:e3:00:e7:26:88:07:c5:64:
         00:01:ab:94:7f:ff:4d:a2:75:47:b7:7d:6c:94:21:78:49:62:
         9e:ce:25:5f:1e:69:4a:1e:ee:2f:4f:af:9f:9d:d8:e4:61:28:
         26:82:9e:9d:85:f6:ca:71:54:32:b7:f5:34:47:8b:e3:bb:14:
         88:7d:a0:e0:b7:02:bd:69:96:dc:de:fa:11:1d:94:08:fe:3a:
         e1:fa:f9:2a:05:bc:15:7c:ed:df:67:88:9b:d8:44:65:78:3b:
         21:9c:1d:5f:07:5b:7c:6a:6a:f7:85:5b:ac:68:72:db:20:9a:
         44:95:ef:b9:8d:c5:26:9b:93:34:15:ae:96:6d:be:13:02:c0:
         3f:a2:a4:6a:6f:27:f4:de:61:e8:4c:fb:85:b5:d8:76:8a:1e:
         de:00:52:e0:2b:8e:2d:13:50:9a:56:c1:e1:41:2e:b4:55:a2:
         a0:ad:12:23:02:fc:7c:33:84:8c:4d:5e:a3:15:a7:72:a0:6e:
         84:4f:55:c3:03:19:b8:94:e5:e9:82:8a:4a:9c:c5:7b:58:e0:
         67:d5:c2:9d:73:4e:9e:0f:74:cc:be:3a:63:00:cc:ab:3b:1e:
         85:52:3a:8e:9e:9b:03:e9:fe:a0:38:c1:66:ef:6c:a0:10:9b:
         f8:b6:fd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:17:02 2025 by rpki-client