This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
File:                     nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json)
Hash identifier:          /4woU2kK5FigJWpIzAngy8WqZEitqxck3WxLCsdbZq0=
Subject key identifier:   78:C7:C9:1A:4C:30:1A:D0:50:DF:C3:84:7A:B3:68:4A:80:62:98:A9
Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
Certificate issuer:       /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
Manifest number:          0187
Signing time:             Fri 05 Dec 2025 01:51:20 +0000
Manifest this update:     Fri 05 Dec 2025 01:51:19 +0000
Manifest next update:     Fri 12 Dec 2025 01:51:19 +0000
Files and hashes:         1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: /KroSwO3lSKW+b0neO5CW3jrmrujQ6BUTkpac8IgkBg=)
                          2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: xgn6YFodSwG53m6eg/xtI2yxGIZ8r5pFU5yp73kfgi0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
                          rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
        Validity
            Not Before: Dec  5 01:51:19 2025 GMT
            Not After : Dec 12 01:51:19 2025 GMT
        Subject: CN=69323a98-0c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:8d:26:dc:dd:13:5a:26:32:b0:ef:39:4a:
                    02:35:86:6d:ed:60:65:09:07:4d:72:57:a0:08:2c:
                    73:d5:a7:bf:8b:09:0f:19:f2:38:d1:43:03:1e:4d:
                    9a:96:fa:98:f0:f6:4f:9a:50:d1:67:4b:1b:a9:1a:
                    2a:26:98:82:0a:e3:f7:a8:d8:5c:c1:84:e4:7f:62:
                    a5:aa:40:f9:41:e4:b6:a1:95:e4:0e:a8:18:ad:4f:
                    6e:ff:a0:e8:d8:6c:c6:78:21:c9:d3:0b:a7:01:7e:
                    02:74:7d:25:85:69:28:ae:24:c3:cf:d5:56:d6:1c:
                    3a:ac:7e:32:d2:3c:89:28:14:a2:29:3d:71:ba:92:
                    51:5c:86:cd:12:25:a9:65:64:c4:00:30:9a:24:db:
                    ff:68:05:87:3f:86:84:76:68:2e:0e:95:f8:c0:a8:
                    77:4a:6d:3b:c6:f9:8b:be:24:7c:5d:d1:a8:61:bf:
                    52:cd:4b:f8:35:44:f9:44:92:fc:c8:a1:50:67:a6:
                    79:19:05:73:f9:c5:03:11:d4:40:b4:db:af:56:91:
                    7b:bc:d6:ad:f0:dc:8c:7e:0f:78:45:41:1d:81:9f:
                    61:75:ca:51:b3:00:57:36:67:25:bf:de:51:b8:94:
                    3c:3e:1e:27:b0:cc:62:51:31:6d:8c:69:5a:0a:c6:
                    5d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:C9:1A:4C:30:1A:D0:50:DF:C3:84:7A:B3:68:4A:80:62:98:A9
            X509v3 Authority Key Identifier:
                keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:95:a0:d7:78:59:88:1e:5b:93:02:2f:55:1d:8a:39:06:d4:
         a8:49:ee:8c:e3:22:f1:cc:88:2b:fe:33:ab:ed:4c:0a:89:7f:
         d9:39:2f:c2:4a:51:8c:8d:0f:a4:0b:d4:dc:ad:0f:83:3c:5e:
         0e:ba:7d:26:62:8d:52:90:88:0a:24:08:ff:3a:c2:b4:0c:16:
         7c:b2:5a:77:57:d8:99:00:b1:26:73:93:67:57:0b:df:62:51:
         f3:97:8d:c2:c5:62:20:a3:30:76:ec:88:f5:2c:c0:77:cf:e6:
         1b:cf:65:6a:d5:c6:b8:92:4a:75:c3:8d:3e:e4:b7:9a:83:a6:
         3f:3c:aa:1e:38:0b:b2:fb:65:50:09:52:02:3e:d5:a9:ed:97:
         73:bd:c5:0a:32:4b:6c:00:12:ef:4f:5a:e9:a8:0d:54:a8:53:
         f7:b9:e7:0b:92:ca:6a:98:10:ff:78:52:fe:b2:27:8e:9f:80:
         90:9d:0f:bd:ec:a6:d0:81:91:1b:b2:32:2f:c5:2b:45:85:8a:
         c0:b4:21:cb:1c:0b:73:f3:0d:28:11:28:e4:dd:bb:34:77:07:
         0d:80:73:f6:2c:88:48:e5:c9:9d:71:36:35:50:e7:ec:ad:e3:
         84:53:e0:5c:16:3a:6a:5f:c1:a0:56:50:2c:05:1b:5e:38:47:
         62:08:8d:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2
Q0Y4REIyNUEwHhcNMjUxMjA1MDE1MTE5WhcNMjUxMjEyMDE1MTE5WjAYMRYwFAYD
VQQDEw02OTMyM2E5OC0wYzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqDmNJtzdE1omMrDvOUoCNYZt7WBlCQdNclegCCxz1ae/iwkPGfI40UMDHk2a
lvqY8PZPmlDRZ0sbqRoqJpiCCuP3qNhcwYTkf2KlqkD5QeS2oZXkDqgYrU9u/6Do
2GzGeCHJ0wunAX4CdH0lhWkoriTDz9VW1hw6rH4y0jyJKBSiKT1xupJRXIbNEiWp
ZWTEADCaJNv/aAWHP4aEdmguDpX4wKh3Sm07xvmLviR8XdGoYb9SzUv4NUT5RJL8
yKFQZ6Z5GQVz+cUDEdRAtNuvVpF7vNat8NyMfg94RUEdgZ9hdcpRswBXNmclv95R
uJQ8Ph4nsMxiUTFtjGlaCsZd1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjHyRpM
MBrQUN/DhHqzaEqAYpipMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy
RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM
ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOlaDXeFmIHluTAi9VHYo5BtSoSe6M4yLxzIgr/jOr7UwKiX/ZOS/C
SlGMjQ+kC9TcrQ+DPF4Oun0mYo1SkIgKJAj/OsK0DBZ8slp3V9iZALEmc5NnVwvf
YlHzl43CxWIgozB27Ij1LMB3z+Ybz2Vq1ca4kkp1w40+5Leag6Y/PKoeOAuy+2VQ
CVICPtWp7ZdzvcUKMktsABLvT1rpqA1UqFP3uecLkspqmBD/eFL+sieOn4CQnQ+9
7KbQgZEbsjIvxStFhYrAtCHLHAtz8w0oESjk3bs0dwcNgHP2LIhI5cmdcTY1UOfs
reOEU+BcFjpqX8GgVlAsBRteOEdiCI3T
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:24 2025 by rpki-client