This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
File:                     N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json)
Hash identifier:          m5YwbV/y7BSaEIEys8bJ3h+5mI30d2xUScEJJGv4SgY=
Subject key identifier:   39:CA:8F:1C:5A:23:6A:8F:E8:4E:F9:CF:48:9F:5C:4B:B1:0D:D8:1D
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Certificate issuer:       /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial:       19D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
Manifest number:          19BC
Signing time:             Sat 06 Dec 2025 16:00:49 +0000
Manifest this update:     Sat 06 Dec 2025 16:00:48 +0000
Manifest next update:     Sat 13 Dec 2025 16:00:48 +0000
Files and hashes:         1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: 1nh1EEGKfxP/BVjaWbbAmV0ltj5uzHM6ecRGgLBs+eY=)
                          2: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: T2O0r+wuciWw//d0/KrKWMrTn116KGwZgOoRv2gqL2o=)
                          3: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: 4lXZLQbvCWkzoUTRrsi9YqylEuiqjTlRtIjx8J3fHJA=)
                          4: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: u6zpvxkYkfd9Sgr+7nOb3bbbb/5Wjva0COGy2cz/Rk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
                          rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6617 (0x19d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
        Validity
            Not Before: Dec  6 16:00:48 2025 GMT
            Not After : Dec 13 16:00:48 2025 GMT
        Subject: CN=69345331-065c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:96:8d:85:0e:8d:5e:e7:10:c3:72:be:d2:
                    62:36:b5:8e:75:da:ea:d0:fb:7d:ac:b8:8b:dd:85:
                    b9:0f:e1:d1:72:40:4c:f2:45:33:cf:80:51:5e:45:
                    20:d3:56:da:cd:4e:9d:82:17:4c:f8:1e:e8:fe:b7:
                    7d:a3:a7:7d:37:e4:86:86:dd:fe:f1:bc:17:ac:1d:
                    91:4d:f8:24:6e:73:2a:f2:5d:7b:64:27:ba:db:16:
                    78:f9:0c:c3:92:ef:86:c7:80:a7:40:81:bd:2c:1b:
                    24:12:0e:6b:65:f9:c7:bd:f6:10:d7:ca:3c:dd:ce:
                    96:84:97:70:68:68:61:5f:ef:35:e5:38:e6:b7:57:
                    6e:a1:2d:7c:a2:b5:ad:1b:09:63:83:49:be:1d:e6:
                    b4:49:c8:3a:cf:f1:5c:6e:a7:eb:d2:e5:45:af:13:
                    37:2e:48:30:c0:92:15:b1:7d:64:7b:dc:c6:f4:9a:
                    94:1b:cf:ee:2a:64:06:02:3d:f3:9f:15:1c:57:ba:
                    d3:f3:79:a3:ec:c9:b1:cd:7c:c2:0a:18:2b:b8:49:
                    92:a1:44:f0:30:aa:12:cd:17:04:58:2e:a4:e1:de:
                    7c:16:19:48:fd:e8:76:0c:0a:56:a9:d5:99:19:c1:
                    7e:82:61:f1:89:d6:8f:2a:ed:08:da:83:d3:cd:92:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CA:8F:1C:5A:23:6A:8F:E8:4E:F9:CF:48:9F:5C:4B:B1:0D:D8:1D
            X509v3 Authority Key Identifier:
                keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:8f:7e:6c:fb:85:60:e6:86:7c:12:e0:f8:61:60:0d:86:74:
         a8:d9:c5:91:6d:93:25:74:a7:a3:f2:91:2b:58:06:14:8b:7d:
         b2:d4:18:6d:32:51:9c:97:ea:b5:72:c0:a3:45:2c:0a:04:82:
         25:b5:36:9e:19:69:f7:24:64:77:47:7d:0e:7a:9f:96:85:13:
         3f:eb:86:96:6b:f3:49:8d:b3:4a:09:03:97:2f:4e:c5:f0:f4:
         3f:fe:29:1e:34:cb:7f:2c:67:51:c3:9a:82:e8:d3:2f:29:14:
         22:a2:87:ef:70:9d:53:4d:93:14:24:89:14:c8:4e:38:0f:8d:
         de:20:9c:14:38:c1:fe:84:3a:eb:ec:91:d2:e8:04:4c:d9:2a:
         46:59:29:7e:bd:7d:e3:41:e7:68:e6:42:f6:40:ab:a9:7a:1d:
         c1:de:78:99:2e:d2:b7:a5:99:b9:30:4e:f8:ff:2b:85:b3:8a:
         71:89:b5:d3:c3:66:7d:32:90:bb:86:fc:85:bc:91:27:04:08:
         08:18:3b:c9:a9:da:24:87:3b:fd:8c:0d:ab:00:6e:8e:b2:43:
         21:fa:8f:ed:95:90:f8:a7:e0:2b:dc:1f:f7:2c:fc:66:f3:14:
         c5:d8:1b:b6:09:97:a7:a9:d6:12:8d:07:2a:78:1a:d3:ce:89:
         87:7b:f8:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew
MzVFMjBERUEwHhcNMjUxMjA2MTYwMDQ4WhcNMjUxMjEzMTYwMDQ4WjAYMRYwFAYD
VQQDEw02OTM0NTMzMS0wNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx1aWjYUOjV7nEMNyvtJiNrWOddrq0Pt9rLiL3YW5D+HRckBM8kUzz4BRXkUg
01bazU6dghdM+B7o/rd9o6d9N+SGht3+8bwXrB2RTfgkbnMq8l17ZCe62xZ4+QzD
ku+Gx4CnQIG9LBskEg5rZfnHvfYQ18o83c6WhJdwaGhhX+815Tjmt1duoS18orWt
Gwljg0m+Hea0Scg6z/Fcbqfr0uVFrxM3LkgwwJIVsX1ke9zG9JqUG8/uKmQGAj3z
nxUcV7rT83mj7MmxzXzCChgruEmSoUTwMKoSzRcEWC6k4d58FhlI/eh2DApWqdWZ
GcF+gmHxidaPKu0I2oPTzZIgPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnKjxxa
I2qP6E75z0ifXEuxDdgdMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz
NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTVGQi83RjQ4ODk2ODczNUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVx
Z3RDLUJNYlllam9EWGlEZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAj35s+4Vg5oZ8EuD4YWANhnSo2cWRbZMldKej8pErWAYUi32y1Bht
MlGcl+q1csCjRSwKBIIltTaeGWn3JGR3R30Oep+WhRM/64aWa/NJjbNKCQOXL07F
8PQ//ikeNMt/LGdRw5qC6NMvKRQioofvcJ1TTZMUJIkUyE44D43eIJwUOMH+hDrr
7JHS6ARM2SpGWSl+vX3jQedo5kL2QKupeh3B3niZLtK3pZm5ME74/yuFs4pxibXT
w2Z9MpC7hvyFvJEnBAgIGDvJqdokhzv9jA2rAG6OskMh+o/tlZD4p+Ar3B/3LPxm
8xTF2Bu2CZenqdYSjQcqeBrTzomHe/iR
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:32:51 2025 by rpki-client