This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
File:                     njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json)
Hash identifier:          UhSNAlD5MyQDAM+WYQQA9Vn92HgeleRDpILqnqnMbfs=
Subject key identifier:   E4:E7:38:4F:52:74:E4:BB:28:AD:2F:E5:0F:0D:2C:89:67:95:63:BC
Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
Certificate issuer:       /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Certificate serial:       05AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
Manifest number:          05A7
Signing time:             Thu 04 Dec 2025 21:48:38 +0000
Manifest this update:     Thu 04 Dec 2025 21:48:37 +0000
Manifest next update:     Thu 11 Dec 2025 21:48:37 +0000
Files and hashes:         1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: jwaJQL9VYzmt7ONgfv3xgD2nj4JyJiU+QAMPMEzVML4=)
                          2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: CdrfPMZy52he8bpwd/sQIj17yAvkU7L0EqcCRVjCrHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
                          rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
        Validity
            Not Before: Dec  4 21:48:37 2025 GMT
            Not After : Dec 11 21:48:37 2025 GMT
        Subject: CN=693201b5-853c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3e:86:81:fb:12:f6:62:c4:7a:1c:d3:de:e7:
                    ea:f1:5b:c4:d5:45:49:d8:93:19:01:2d:eb:05:01:
                    c9:5b:b7:29:30:8f:b0:6d:4f:f7:c2:34:1d:fc:bf:
                    97:d1:0c:bc:19:f3:39:e5:5f:4b:e2:05:53:79:88:
                    49:61:2d:ae:5c:7b:4a:28:bf:c9:9d:6c:d6:85:47:
                    7d:4e:f1:5c:68:b9:8e:31:0b:b8:6a:19:ee:fa:8a:
                    df:96:f8:55:f3:d4:b6:f2:af:e2:8d:6a:25:70:32:
                    27:74:e6:af:91:cd:94:d5:c4:03:04:73:f4:9c:ce:
                    65:61:70:99:05:73:2d:cf:a5:11:41:c2:1d:c3:4f:
                    9b:54:b5:5b:99:c3:6a:e5:27:1e:97:dc:b4:69:ae:
                    aa:9b:78:b3:fa:cd:3a:50:d7:39:b6:47:6d:8e:4d:
                    0a:4d:50:23:a8:d3:5c:c2:c8:b2:a8:a2:0f:13:b0:
                    bc:a7:5d:b7:ee:22:ef:94:59:ba:83:46:a3:98:9b:
                    35:79:a8:8d:06:31:af:e8:dd:76:ec:36:06:e5:fa:
                    97:1b:8d:40:ac:08:de:91:b9:22:14:97:b2:9a:cd:
                    63:df:29:24:1f:ad:eb:c7:85:43:8c:22:da:ab:2b:
                    e4:35:63:20:15:a5:b7:19:0c:79:b1:c2:bc:25:93:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E7:38:4F:52:74:E4:BB:28:AD:2F:E5:0F:0D:2C:89:67:95:63:BC
            X509v3 Authority Key Identifier:
                keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9d:f2:97:02:b8:dd:7a:c0:a9:00:a0:60:90:dd:62:4d:ed:
         c7:dd:b2:5a:cc:86:5c:20:93:4a:79:cb:3f:03:a2:30:dc:18:
         6d:a0:92:0c:ad:22:0d:d4:38:3d:46:b5:2a:ed:79:0b:56:5a:
         75:21:d0:95:5d:61:22:c8:55:8b:a0:42:f4:c1:98:3d:b6:88:
         2c:5d:64:cc:23:6a:30:58:17:1c:c6:66:3f:cd:31:db:19:2f:
         18:a7:79:11:27:39:dc:f4:0f:44:69:d3:21:22:65:dd:c0:9e:
         3d:cd:88:e1:8d:d4:03:29:0b:73:4f:97:c0:ab:74:ed:ba:41:
         a6:5f:c2:77:48:07:80:4f:16:b7:56:f9:51:b5:e0:b1:f1:71:
         9e:94:58:cf:7b:a4:e3:ae:fb:8c:e7:9e:fa:2f:19:35:7a:37:
         d2:a2:29:1d:13:32:88:1d:65:5a:fa:97:78:d7:78:96:e2:dd:
         2d:18:aa:8a:16:db:a1:01:0a:c9:f1:62:f3:a1:70:0a:98:3f:
         cb:64:6f:c9:ff:a4:d7:93:b6:db:82:1e:32:50:ee:62:d4:b0:
         67:e4:f6:5c:bc:2c:f4:9e:47:b1:49:e7:00:69:eb:fc:aa:08:
         8e:e4:32:56:2b:0a:5e:6d:34:b1:6b:11:3b:9f:0e:68:f8:64:
         3d:87:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:49:11 2025 by rpki-client