This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File:                     NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier:          4wrYKJMqvap5y98exY1fH2O1SYRTDVxHRIP8a1wD8WA=
Subject key identifier:   5F:1C:DB:1A:27:9A:84:59:20:2B:BF:D6:49:47:FD:F9:F8:89:5E:AD
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer:       /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial:       07DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number:          0D10
Signing time:             Mon 22 Dec 2025 17:47:14 +0000
Manifest this update:     Mon 22 Dec 2025 17:47:14 +0000
Manifest next update:     Mon 29 Dec 2025 17:47:14 +0000
Files and hashes:         1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: w37yenrDQXw91xZQAwUgr8H1JXCr8bgf6Hp4gtWmPQg=)
                          2: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (hash: jBmeI5y0SVJB4aMWbKmtmiFdyrbiBVSMzrKP/rJrmhI=)
                          3: 13D5D992979E11F08E996475C4F9AE02.roa (hash: uqXdul36EDPRkEmn7F3Pi5w/fW3yUykVpbjNAjajNRk=)
                          4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
                          rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
        Validity
            Not Before: Dec 22 17:47:14 2025 GMT
            Not After : Dec 29 17:47:14 2025 GMT
        Subject: CN=69498422-8dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8b:62:3b:83:7d:11:13:98:09:62:ec:9c:4b:
                    33:57:b5:ff:0b:34:fd:51:85:e4:66:ca:34:e7:92:
                    fd:70:76:fd:96:f6:d1:06:c5:22:81:0d:88:1e:7d:
                    ad:ac:06:2d:97:b6:90:5a:14:f0:ac:df:80:2a:2d:
                    0a:57:a9:2b:c7:3a:4f:2d:10:b5:f1:1e:8a:37:a2:
                    26:9a:2e:c3:2e:e1:a3:71:b9:e1:aa:b6:5b:18:43:
                    b5:c8:1f:33:fb:38:0c:9e:3b:c0:79:8c:9f:8c:f3:
                    b4:42:9e:17:cc:9d:3d:88:dd:1d:8b:20:ac:de:f6:
                    1c:86:47:43:7b:a8:a5:99:85:93:39:c7:c4:86:f9:
                    a1:31:38:14:88:e8:9d:9a:fe:f4:8c:1a:ac:94:ca:
                    2b:af:1f:f2:06:5e:61:dc:f9:62:d9:6a:92:02:8a:
                    27:17:17:68:76:29:0b:01:df:5e:8a:fc:68:8a:48:
                    45:11:35:5f:f1:2e:ab:7c:90:c9:ac:db:6d:fc:e0:
                    8b:af:88:d3:ff:ed:69:a3:d4:63:a6:92:8b:ac:fe:
                    92:7c:4e:b4:13:e9:c1:86:30:d8:14:73:86:f7:8d:
                    d8:ca:77:cf:4b:c2:2b:2a:57:d4:29:1a:47:7e:d6:
                    5d:a5:af:f9:9e:47:98:39:7b:cd:bc:43:22:53:13:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1C:DB:1A:27:9A:84:59:20:2B:BF:D6:49:47:FD:F9:F8:89:5E:AD
            X509v3 Authority Key Identifier:
                keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:b9:0e:9c:1a:34:83:fc:59:c5:d7:cf:58:e7:ac:10:80:
         5a:09:1b:0e:fb:9f:a1:6b:f4:dd:9a:4c:2c:16:1e:35:2d:69:
         97:a7:ea:cc:b0:e7:84:3c:16:b6:82:78:0b:db:15:d5:f1:11:
         26:17:09:be:a8:27:62:d2:d2:fd:38:c3:8f:ef:84:d2:aa:21:
         c1:50:93:63:b1:4b:06:27:55:0a:50:d2:2d:b1:ec:93:64:9d:
         60:ec:c5:cd:63:86:3a:6d:47:0a:99:c2:53:a7:14:0b:de:28:
         07:90:3c:5d:d9:0a:05:91:21:8e:f8:2e:a0:1c:36:c1:0e:91:
         33:37:4d:2f:37:7a:75:f1:3a:e9:fd:a6:1f:6c:b9:17:ad:ec:
         65:1c:8a:85:54:66:b5:0b:96:e2:11:b2:85:d8:7c:f7:38:8d:
         78:55:64:32:55:9b:5e:76:68:35:19:4f:5e:43:e3:60:a4:2f:
         c6:cf:2c:e0:2a:f1:69:3a:d5:2c:2a:e0:51:54:a3:e4:59:68:
         89:36:36:62:b9:df:49:45:56:32:90:df:05:07:d9:4b:a6:30:
         ed:9f:78:be:93:a6:87:b1:16:b4:3e:e4:b0:ff:ca:4d:41:ab:
         71:8b:85:4c:6f:6f:86:67:0c:08:06:06:65:3f:3b:c4:4b:39:
         b4:03:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 00:30:54 2025 by rpki-client