This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
File:                     nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json)
Hash identifier:          wIjbCrD7GEsecgrrSrSUjl13QgjXlKDhJNM2nEF4xiI=
Subject key identifier:   79:E0:E4:0D:05:CB:C3:BC:FC:23:58:D9:E1:C5:1E:26:51:D1:E4:3B
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Certificate issuer:       /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial:       0C69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
Manifest number:          0C59
Signing time:             Sat 06 Dec 2025 17:57:48 +0000
Manifest this update:     Sat 06 Dec 2025 17:57:48 +0000
Manifest next update:     Sat 13 Dec 2025 17:57:48 +0000
Files and hashes:         1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: cgtVlcB4FS1iiT1i5JAqDKYGMieRkjlqc+SxORiE8Po=)
                          2: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: EiyCu0vojKly9zo+I5SeQzaBIubHaZ4bVOiCN+YJMlU=)
                          3: 702B683202E911F097290F2EC4F9AE02.roa (hash: sacDAKMV0IlhxL+E1+gGomun+TIZdZwc4g1OZ/geqzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3177 (0xc69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
        Validity
            Not Before: Dec  6 17:57:48 2025 GMT
            Not After : Dec 13 17:57:48 2025 GMT
        Subject: CN=69346e9c-b0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b6:6d:65:39:1d:3b:c4:d2:d6:bb:4a:f5:b8:
                    0a:2e:79:ec:94:1f:d2:6b:3a:ff:49:c7:a3:24:ec:
                    5f:ce:57:37:c2:cb:89:a0:e2:7c:5f:ef:53:ca:11:
                    3e:28:cb:94:47:f0:3e:c1:0d:ed:ba:43:96:15:1d:
                    1a:d3:c0:ec:45:74:fe:c8:9c:4f:57:b8:63:c1:51:
                    97:32:96:03:a4:01:7f:23:24:6c:0b:7c:ba:d3:90:
                    1b:c8:f4:65:10:5f:07:2c:05:05:82:23:fc:bd:95:
                    ad:47:32:d2:3c:39:25:43:d7:ca:47:5a:91:4a:73:
                    c8:6b:be:c8:a6:7f:ba:e6:7e:5b:84:a8:a6:51:fd:
                    6b:95:b6:07:78:77:51:03:9a:73:37:63:05:41:90:
                    2e:e2:93:07:46:dd:02:64:98:9b:02:01:a2:a6:4b:
                    40:3f:50:f7:69:5d:d2:bd:2a:d3:09:3a:13:a3:c9:
                    30:47:19:e4:aa:19:f8:5e:7c:8b:4c:d1:4b:69:4e:
                    c6:d6:48:4c:f6:12:35:b4:11:38:9a:22:fc:bf:a4:
                    5f:be:6b:9f:4b:bd:21:32:55:b5:14:b6:3e:af:f4:
                    e3:7e:3c:da:cd:00:9e:62:a2:89:64:6c:d6:9b:d0:
                    7e:9a:75:c9:2e:77:b4:1d:98:27:30:ea:c4:3a:95:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E0:E4:0D:05:CB:C3:BC:FC:23:58:D9:E1:C5:1E:26:51:D1:E4:3B
            X509v3 Authority Key Identifier:
                keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:86:2e:f7:72:2f:cb:f7:dd:ab:9c:77:dc:7b:e9:ea:df:7e:
         7b:02:d8:e0:78:3b:ed:e4:0a:c0:50:20:7d:0c:75:61:57:7a:
         59:f0:da:fd:71:df:77:52:e5:ff:15:5d:e2:53:66:32:0d:02:
         28:95:78:cb:dc:41:b7:59:77:b9:50:e3:34:4e:9d:2e:5a:79:
         b1:57:97:fd:43:19:53:f5:4e:33:7e:ab:89:af:3a:f2:6f:17:
         17:a1:0a:2d:d2:a8:5f:e9:21:99:3e:56:7d:f3:15:cb:e3:e9:
         1b:38:9b:ec:19:c8:79:41:bb:e2:4b:aa:c2:48:4a:f2:e6:83:
         2e:55:53:0a:40:01:21:86:23:6d:ac:d0:01:4a:66:29:3b:bb:
         88:62:44:c5:52:63:8c:21:c7:d8:04:a4:29:2d:c6:13:78:e3:
         4b:da:b6:45:28:d4:b4:dd:1c:da:83:2a:79:91:54:e9:b2:f9:
         a7:f6:4c:d5:77:7f:37:71:1d:12:d7:b3:90:df:02:01:99:cd:
         1d:ea:c7:3f:31:97:40:1c:dc:b6:df:53:bd:5a:4e:4e:4b:42:
         64:6a:6e:94:f0:ae:48:17:19:c7:91:32:fa:96:c9:ce:68:c1:
         96:fd:d4:00:30:6b:ba:27:b1:9e:91:a0:3b:ab:61:37:46:c4:
         8e:33:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:09:15 2025 by rpki-client