This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
File:                     N35PWGHm2AHWhx-GyUH1hwj687U.mft (raw, json)
Hash identifier:          wQfltfGnK3zJ2xz5IIeuyMaL+v2zAM60i+edAOlNuXA=
Subject key identifier:   B1:C5:74:3F:E7:C4:C9:66:11:D8:C2:02:77:18:36:56:80:D8:0C:E5
Authority key identifier: 37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5
Certificate issuer:       /CN=A91FDC84/serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
Manifest number:          10
Signing time:             Fri 19 Dec 2025 06:50:31 +0000
Manifest this update:     Fri 19 Dec 2025 06:50:30 +0000
Manifest next update:     Fri 26 Dec 2025 06:50:30 +0000
Files and hashes:         1: N35PWGHm2AHWhx-GyUH1hwj687U.crl (hash: gHQni2naUix3IuoN/7Ej9D9TZ1De8ryqc/aLBvETSlU=)
                          2: FFD0154CC51111F081EB9984C4F9AE02.roa (hash: wcqJr85KvAG8A6C8af/+L14Ukc8Oi76Cwk57WgeM5e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC84, serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
        Validity
            Not Before: Dec 19 06:50:30 2025 GMT
            Not After : Dec 26 06:50:30 2025 GMT
        Subject: CN=6944f5b7-1160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:00:0e:91:4c:16:b1:15:ba:72:93:19:d9:
                    6d:db:32:80:a3:5a:93:c6:bf:8c:b4:dc:4f:1b:47:
                    79:b3:f8:6a:42:be:2b:5a:ab:5c:49:6f:a1:c6:39:
                    c8:12:e8:e9:b2:27:cb:5d:8e:8b:e7:0c:15:f2:e2:
                    41:e9:11:9d:04:16:86:81:53:b4:02:cc:1b:79:f8:
                    ca:70:e2:57:7e:bd:bd:7c:0b:fd:5d:cb:fd:20:cf:
                    78:96:f8:08:18:d0:4b:0b:aa:e0:85:f1:b1:90:af:
                    69:4e:b5:37:29:c8:49:4d:e9:12:dc:8e:aa:a4:19:
                    da:27:62:2f:16:37:1e:db:02:d3:8c:09:f7:dc:7f:
                    0d:c7:8b:e0:b6:9c:3e:b4:bf:a8:b1:bf:2a:24:3c:
                    7e:ab:43:67:1d:dc:fe:0e:79:83:e1:28:c5:c4:9f:
                    8b:47:83:55:ac:fe:a2:85:05:ee:dd:7c:31:d0:58:
                    b5:3b:72:5c:31:9e:f1:bb:b3:ec:59:18:b2:44:51:
                    67:5c:fc:7a:b3:06:d1:87:04:1e:22:c7:a1:2e:b4:
                    8b:ca:e9:7f:87:cb:02:47:fe:62:e1:d7:14:5e:18:
                    48:7f:26:5a:62:29:62:55:22:5f:d5:47:80:2f:6d:
                    dc:65:96:98:c7:6d:27:31:01:34:a8:81:fa:58:e3:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C5:74:3F:E7:C4:C9:66:11:D8:C2:02:77:18:36:56:80:D8:0C:E5
            X509v3 Authority Key Identifier:
                keyid:37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:80:18:5b:06:85:88:3d:f2:15:ab:08:fb:ba:02:ba:45:87:
         5a:6f:a3:c2:80:2e:6e:a1:a7:3b:4d:6d:c9:fc:01:60:ea:95:
         95:46:49:33:a6:6d:ae:38:fa:1c:01:a7:3c:ef:97:27:54:bd:
         84:bc:cb:9a:c3:92:e3:6a:19:bc:db:a8:52:83:23:6c:76:dd:
         07:46:db:7a:76:a5:ae:6c:ba:64:28:be:80:fc:86:78:8c:63:
         b7:9d:1b:a2:0f:c0:97:f2:aa:4a:7e:16:ec:16:81:a3:f5:b7:
         e0:09:41:01:c2:aa:8c:2c:e3:04:e1:bb:a8:1b:fc:87:ef:29:
         43:6e:5b:c8:47:dd:74:22:61:9c:bf:60:6f:f7:99:72:61:76:
         d6:1f:dc:32:a7:71:83:fe:60:29:bc:12:c3:9b:65:b9:b8:0f:
         a9:47:2d:77:87:e8:82:47:6a:62:20:66:a4:17:07:04:f6:ea:
         c9:b3:b8:93:7c:0b:a4:21:89:63:57:b7:0b:f8:58:2c:00:55:
         5c:70:3b:a7:e7:59:e3:21:98:ee:d2:85:3c:01:39:54:2a:d5:
         84:a6:3b:4c:9a:13:7f:99:dd:3c:8a:53:cc:3a:f1:6e:2c:56:
         a7:bf:ea:3f:ee:8e:1a:59:6e:16:4d:e1:6e:a6:1b:6f:4d:42:
         25:73:c4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:03:08 2025 by rpki-client