This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
File:                     ntVkKdGun2AE-2-2eI6T-vYiV1k.mft (raw, json)
Hash identifier:          RmdA7JVHsDmnVmjDRgjJww36nrrFOPN/MAneIJFvCvA=
Subject key identifier:   0B:15:63:59:6A:E4:7B:76:C6:58:FE:39:2E:F7:95:5E:61:10:62:54
Authority key identifier: 9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
Certificate issuer:       /CN=A9142769/serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
Manifest number:          58
Signing time:             Fri 05 Dec 2025 05:02:31 +0000
Manifest this update:     Fri 05 Dec 2025 05:02:30 +0000
Manifest next update:     Fri 12 Dec 2025 05:02:30 +0000
Files and hashes:         1: ntVkKdGun2AE-2-2eI6T-vYiV1k.crl (hash: hMUQlhpRZ3V3PPu7AsjNy8hnF4XPjIqIhfH5kzXJLvE=)
                          2: C8B7607C4B8D11F0B198C040C4F9AE02.roa (hash: i2BhMqJuRPJPw6EpQmAJmu0/MkHReXEBSLa+rZeCZ6I=)
                          3: C96601404B8D11F0B198C040C4F9AE02.roa (hash: T0dKTs8EMdDl2Inh3fwBdZE3Wa4Vfq9Mg4rvNVagedw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl
                          rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
        Validity
            Not Before: Dec  5 05:02:30 2025 GMT
            Not After : Dec 12 05:02:30 2025 GMT
        Subject: CN=69326766-34cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:cc:30:1d:28:61:72:2d:71:fd:3f:be:da:
                    dc:c9:90:ad:6e:68:f0:2a:13:3d:a4:ac:1a:dc:cf:
                    96:06:96:a0:7f:2e:51:f9:b1:76:7c:c4:7a:36:83:
                    5c:22:19:e2:b8:e8:0e:72:ca:00:75:09:7b:1d:26:
                    50:06:5f:84:29:3b:b9:86:34:51:f8:a6:28:f1:6c:
                    a8:ff:2e:19:8e:60:8c:2c:b3:71:78:74:2e:6a:dd:
                    ca:eb:14:d6:56:08:21:ed:9e:a0:a8:36:bc:af:23:
                    d2:32:65:45:13:f5:af:be:b6:8a:f9:47:09:8e:2a:
                    83:97:5a:b8:68:34:a4:6f:0c:32:3e:f1:5b:1e:36:
                    ce:bf:39:9f:2f:b4:e3:e2:ac:c2:08:d9:4b:c8:02:
                    05:e7:84:d5:be:9a:3a:d9:15:ec:71:f4:39:21:f6:
                    ef:ed:8c:e7:51:7c:3a:60:09:36:a9:84:9e:d8:df:
                    7e:df:70:ea:72:83:76:09:bc:da:c0:f0:a8:9e:bf:
                    9d:ed:1a:f2:32:60:8c:a2:34:7d:8a:ce:0e:68:6f:
                    1d:cd:9e:e7:85:8d:3a:27:e2:ea:d0:bf:45:de:5c:
                    f9:0f:15:0a:db:d4:2e:60:42:97:51:e4:6d:b1:e4:
                    a9:ef:c5:ef:26:e0:3f:d9:6c:bf:9e:5c:f1:09:ee:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:15:63:59:6A:E4:7B:76:C6:58:FE:39:2E:F7:95:5E:61:10:62:54
            X509v3 Authority Key Identifier:
                keyid:9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:83:5f:19:80:48:96:51:03:41:50:19:66:37:d2:fd:25:
         36:89:f8:5a:e8:ce:6b:bf:5e:63:ca:cd:cf:16:31:4d:38:a8:
         62:ad:58:2a:26:55:d5:fc:54:8c:8f:e7:b3:49:87:a8:47:fe:
         0d:de:0d:98:f3:30:ee:49:09:07:07:4a:0d:02:df:9e:f4:f5:
         c9:3b:7a:75:b5:ed:7b:f5:2a:fc:67:75:ea:ad:60:d5:26:37:
         74:2b:17:81:b1:4c:12:e1:e7:95:cb:6a:61:7d:6a:20:47:43:
         fc:4b:21:8f:4f:b4:8d:01:cb:97:6d:39:39:0f:f2:89:24:86:
         c9:08:5b:d8:69:b0:52:75:b5:17:c7:6e:77:a6:18:92:fb:5f:
         22:4b:b1:8b:be:3e:98:84:98:d0:10:1b:10:3c:f6:59:a3:5c:
         49:13:ad:39:aa:ed:41:0e:c3:b5:21:2e:63:45:43:22:c9:ea:
         1e:96:d4:61:38:00:37:27:52:2b:16:65:48:87:16:3a:d0:41:
         7f:92:97:bc:c7:cb:0a:90:91:f1:69:19:d9:ca:e7:95:e2:f7:
         a1:56:77:30:5e:e2:02:80:22:6d:30:92:e8:8e:73:0e:c8:f9:
         e4:c1:6e:2a:4e:0b:10:d2:68:10:15:e6:15:b2:b1:b1:16:da:
         b9:4d:12:44
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Mjc2OTExMC8GA1UEBRMoOUVENTY0MjlEMUFFOUY2MDA0RkI2RkI2Nzg4RTkzRkFG
NjIyNTc1OTAeFw0yNTEyMDUwNTAyMzBaFw0yNTEyMTIwNTAyMzBaMBgxFjAUBgNV
BAMTDTY5MzI2NzY2LTM0Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCpMwwHShhci1x/T++2tzJkK1uaPAqEz2krBrcz5YGlqB/LlH5sXZ8xHo2g1wi
GeK46A5yygB1CXsdJlAGX4QpO7mGNFH4pijxbKj/LhmOYIwss3F4dC5q3crrFNZW
CCHtnqCoNryvI9IyZUUT9a++tor5RwmOKoOXWrhoNKRvDDI+8VseNs6/OZ8vtOPi
rMII2UvIAgXnhNW+mjrZFexx9Dkh9u/tjOdRfDpgCTaphJ7Y337fcOpyg3YJvNrA
8Kiev53tGvIyYIyiNH2Kzg5obx3NnueFjTon4urQv0XeXPkPFQrb1C5gQpdR5G2x
5Knvxe8m4D/ZbL+eXPEJ7vXrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCxVjWWrk
e3bGWP45LveVXmEQYlQwHwYDVR0jBBgwFoAUntVkKdGun2AE+2+2eI6T+vYiV1kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNzY5LzQ2QkQ1NUMyNEI4
RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJBRS0yLTJlSTZULXZZaVYx
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbnRWa0tkR3VuMkFFLTItMmVJNlQtdllpVjFrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy
NzY5LzQ2QkQ1NUMyNEI4RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJB
RS0yLTJlSTZULXZZaVYxay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAASpg18ZgEiWUQNBUBlmN9L9JTaJ+Frozmu/XmPKzc8WMU04qGKtWCom
VdX8VIyP57NJh6hH/g3eDZjzMO5JCQcHSg0C35709ck7enW17Xv1KvxndeqtYNUm
N3QrF4GxTBLh55XLamF9aiBHQ/xLIY9PtI0By5dtOTkP8okkhskIW9hpsFJ1tRfH
bnemGJL7XyJLsYu+PpiEmNAQGxA89lmjXEkTrTmq7UEOw7UhLmNFQyLJ6h6W1GE4
ADcnUisWZUiHFjrQQX+Sl7zHywqQkfFpGdnK55Xi96FWdzBe4gKAIm0wkuiOcw7I
+eTBbipOCxDSaBAV5hWysbEW2rlNEkQ=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:27:30 2025 by rpki-client