This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File:                     nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier:          5bya6qGSu5WslgHpw09Vqn94KcZyxI3UH6iSgww6CBc=
Subject key identifier:   53:E4:18:7F:B1:27:1A:43:F7:E1:70:EF:B4:48:61:0E:56:F7:74:0E
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       25BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number:          2307
Signing time:             Sat 06 Dec 2025 15:39:48 +0000
Manifest this update:     Sat 06 Dec 2025 15:39:47 +0000
Manifest next update:     Sat 13 Dec 2025 15:39:47 +0000
Files and hashes:         1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: VkbRkzLVxAkm3LYgG1HUMaHKLO695ZfqIai/+oeYpDs=)
                          2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: /Q1bh32UWOj4J5FAl9U6ArPlxdi0wsvaB+wwXRJ3Lqs=)
                          3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8OLjwPx61KkIQCmyjk1QuR/uGi52Ry48+A0/nvUFhto=)
                          4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: kMzN7sJi/LRFE283RDzU5y7iSG/i/1PsyZ93O11mO5c=)
                          5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: b9KSK49f3+RJ5Zndahld37Ne8rgyICiG4X/yrNeRCwg=)
                          6: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: Ms7QsXkh2kQNfde4KuGq3vFMf59+eXYHE6ZiNy8XHPg=)
                          7: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 7nW4B9tgYZxJlUM/jyWz4ppQFx5pTU5qJulzmizVwPY=)
                          8: 94C16496222811EF99153155C4F9AE02.roa (hash: njk+98oMXqEhaQH4K0CdtGJQNcY6Zsh8AbaFjT9X3L8=)
                          9: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: pK1U2tlcFI5eVZ+yZ2Uz2T2hO3URX24xuIkzXvQNT6Q=)
                          10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: CcwUXK2Ib0st/gF/B8/lAm6jU9CpXcqxg7fd8dewyTs=)
                          11: BA007060162D11EEB79F703CC4F9AE02.roa (hash: e+8uiRyglTJ61jp+NHN/xhpvUYkVwouUN/cZkA6eEOU=)
                          12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: mTrnMVZI3oc2hbgBbqTPzvSY22GeIaQ6Sv1aw5zibZo=)
                          13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: NK9LWbF8pONuCfm9ynpNYVUJq0bnRlvsHPhOA7O7K+Y=)
                          14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: TAXb6aVncKSk3q+7kBMZVnP/khsko2EZ8HMsWkq82Bs=)
                          15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: vY03ulP+sNEIa8G9vSg/u1gVOLM+s6C9pglT3z4JdiE=)
                          16: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: bEqkiO8ENywDu5LUBsotcsupS4ydOR5MpQpDbxlm4V4=)
                          17: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: QKfklbWPsoXlxByZaPbmc1+075SBHQiALuuEdPCAB50=)
                          18: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: C3qoGzcQZndm1u3tww57NTFE5NsW08UfVUZpiRELltQ=)
                          19: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: D3ZGO/WUxLPwaJZfxjpDYyNLveQ3u6uEceV8mvZASMk=)
                          20: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: tFFS7u2Pbz7scJ4rW1SHoAlT2k6YOdbY+5qrpMKq+14=)
                          21: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 9gHoLg8JZHPr+J2x22rrHeXv+R5JGIJTxxftyvYwHuQ=)
                          22: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: nJOgKpKVASxgnXQj3ba2FE3qRrXdPvsCxLHQPYaRz00=)
                          23: 01941B1C621B11F0BDF9F86DC4F9AE02.roa (hash: mcTzPnnXUEz6wKoSOyNm+YhkPxKiF8hwukeS7+m4HkI=)
                          24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: dWk76zBErGHiI9GT7cS+58hFi3EPMy2HTqsf8PBtUYY=)
                          25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: jIa+/65UAgiJ/NRkd/a4I2EsNsv3JwQP5Q3Ix5cv5qo=)
                          26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: QoW5v9awLkcGnpT1+XKXrYAVeGX7bCmbAXmL1gr+qQ4=)
                          27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: Pn3UiRI/u84/PSVY6hBOi61rOJXfl8nDViwTqHYc55g=)
                          28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: QW+0w7vdm64Mp8G687zcaLqftcXIlQy6snzgmEoSsjY=)
                          29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: PToSeikp/9y9g+Y+7PlL1TL5uKk45sRjErrgPWURTKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9662 (0x25be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Dec  6 15:39:47 2025 GMT
            Not After : Dec 13 15:39:47 2025 GMT
        Subject: CN=69344e44-94a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:10:25:c7:0d:6e:d2:4a:d5:b9:c6:ed:e0:
                    01:fe:c1:b2:f7:bb:73:75:09:32:ee:26:c3:e5:cf:
                    7d:21:c0:10:2e:c4:8a:aa:7f:b7:ed:4f:9b:0e:4b:
                    68:9b:7d:5b:72:1e:3f:67:d8:29:0e:37:84:fc:5f:
                    75:2e:ba:50:e3:f5:46:7b:50:1e:1d:05:40:1d:4a:
                    03:f6:00:64:79:63:ff:5e:f3:a5:54:a6:09:ca:0d:
                    10:a5:1e:5d:d4:1d:f1:6d:69:88:f5:38:2f:c6:ef:
                    ed:1a:46:f7:bc:22:a4:ef:9a:f1:2e:f0:4d:d0:f8:
                    0e:e8:5b:29:78:4d:43:b8:6a:9d:50:99:c1:b0:20:
                    50:40:dc:b3:e6:5c:50:0e:0c:c3:84:ed:89:e0:aa:
                    c3:b4:40:cf:c8:6b:de:28:40:c1:c4:e4:4d:95:8f:
                    8c:fd:a8:a2:9e:95:f9:ee:0d:8f:43:4e:ed:0f:1b:
                    cb:0a:15:a1:53:45:34:36:b0:6a:be:27:8e:3c:d3:
                    16:68:ef:38:a2:7e:bd:11:14:8c:e4:ef:9d:71:38:
                    17:ec:ba:c9:87:9d:8e:7d:69:f8:65:df:18:34:fd:
                    07:54:d3:a2:49:7d:70:42:49:3f:34:de:b8:ca:2a:
                    5e:45:01:00:64:41:f6:4c:72:d8:a3:5d:13:64:dd:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E4:18:7F:B1:27:1A:43:F7:E1:70:EF:B4:48:61:0E:56:F7:74:0E
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:92:39:64:38:51:4a:4f:b8:b0:8c:1e:57:76:08:94:ad:7d:
         e0:76:1b:f1:05:8e:2e:52:cc:ea:83:b8:93:01:3b:6b:c6:38:
         b4:56:6e:56:cd:89:25:1e:af:8c:49:8d:bd:24:b8:ba:00:91:
         60:8e:26:58:32:92:c0:1b:dc:78:d1:3c:58:21:3c:f6:a1:d1:
         7b:37:46:44:93:8c:94:a5:66:c0:49:a3:a6:97:a7:eb:23:40:
         ac:5f:1f:1a:bf:af:99:eb:d4:60:19:6a:c9:73:a6:18:90:31:
         df:1e:91:14:cd:9e:c9:21:95:b2:2e:99:5b:89:7c:c5:34:b2:
         5b:d1:1b:27:a7:48:70:67:a1:9c:26:d3:c0:1d:03:1f:83:dc:
         8f:44:91:cf:5d:e0:6b:3d:df:24:af:6f:7d:19:fb:f3:ec:ef:
         c8:7e:9f:fb:7c:61:0c:26:9f:e6:39:a7:de:09:74:b1:8b:91:
         e1:4c:21:c0:38:a8:da:27:7f:da:5f:c0:f1:ab:a2:99:4b:2f:
         0c:9e:39:e2:0e:ef:7d:97:4b:1e:e2:4f:a4:87:a7:b6:40:ec:
         28:29:99:e2:e8:78:ab:d2:8e:f8:21:82:0e:90:32:7d:fd:72:
         80:f1:4c:ce:cc:46:9f:43:eb:a7:fc:3b:e0:75:0d:ef:02:a8:
         e6:46:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:42:52 2025 by rpki-client