This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
File:                     spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json)
Hash identifier:          ITVZrhYNq05m5YenrDoWxw6WoM/0I63XcqI56L9fFOA=
Subject key identifier:   1C:7E:3D:99:36:DB:8B:D1:50:0D:8A:10:54:1C:4F:0C:AA:DE:AF:60
Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
Certificate issuer:       /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
Manifest number:          01D7
Signing time:             Fri 05 Dec 2025 01:03:59 +0000
Manifest this update:     Fri 05 Dec 2025 01:03:59 +0000
Manifest next update:     Fri 12 Dec 2025 01:03:59 +0000
Files and hashes:         1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: BJSz4ZLgdrXs1tkRAIq4uXWnh+3v3+7WBHqgdZ7EDVM=)
                          2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Sh9MMHhw+WZ/mCiixFTMPeTs0/iUB/LaBQpEWqALmcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl
                          rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
        Validity
            Not Before: Dec  5 01:03:59 2025 GMT
            Not After : Dec 12 01:03:59 2025 GMT
        Subject: CN=69322f7f-0c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:10:d4:2e:f5:fe:6b:96:df:d8:eb:35:6c:98:
                    e4:44:43:56:d3:b8:0c:07:fc:2d:76:25:b7:a7:47:
                    1e:11:75:39:4c:2f:ce:b4:6c:5a:b0:a8:eb:39:d6:
                    41:80:76:78:29:bf:e4:5c:4b:44:0c:9b:a1:63:1c:
                    7c:5d:39:58:65:ed:ea:8d:2e:1e:a2:a1:44:45:24:
                    53:0b:3b:31:17:eb:32:91:30:fb:cd:00:c1:3d:ed:
                    04:69:8e:ae:64:b3:f5:c7:30:2f:12:f2:74:d5:38:
                    fb:9c:4b:ba:0a:78:98:84:73:ba:93:e1:ce:2a:4c:
                    9c:6e:88:7a:e1:52:aa:c1:83:66:f8:7f:89:39:72:
                    16:37:1f:9b:12:7d:38:ee:6f:34:f0:e8:86:d5:a3:
                    26:1d:46:6d:70:2d:61:66:2a:84:ff:37:a0:36:a0:
                    fe:e3:f7:53:c8:91:ae:c9:ce:cb:cc:93:a0:26:54:
                    3e:ab:64:17:4c:ea:74:20:ed:09:5e:05:f0:1b:1c:
                    63:a2:e6:92:bc:54:c6:ec:46:a7:e3:bf:47:a8:ce:
                    61:bb:73:d0:9b:d5:bf:47:4e:3c:01:77:22:88:c8:
                    08:65:c1:11:c8:20:be:32:b3:49:f9:c5:6d:fc:76:
                    bc:1e:c9:ed:f2:a7:c0:b0:34:af:04:7f:2c:2f:62:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7E:3D:99:36:DB:8B:D1:50:0D:8A:10:54:1C:4F:0C:AA:DE:AF:60
            X509v3 Authority Key Identifier:
                keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b1:57:cf:73:4a:72:2b:17:97:ef:84:a3:3e:83:05:38:3a:
         68:1a:ec:ef:fd:47:16:a0:c8:45:1b:85:6d:4b:4c:a0:b5:67:
         9a:08:36:8e:48:80:6c:67:0b:72:f6:6a:e1:f6:0a:a4:9a:82:
         6f:27:7b:54:1b:b8:55:51:75:cc:23:89:04:ec:32:a8:0c:86:
         5d:ad:7e:10:e8:52:f0:06:5a:c5:2a:a4:8e:22:a5:43:47:22:
         cb:b8:84:ab:3e:5f:c6:f1:57:4e:eb:b4:63:ff:33:f9:80:d0:
         1c:47:cd:4f:ab:2e:46:a3:e1:29:56:aa:ae:0a:2b:d8:2b:11:
         52:aa:ae:a0:36:5c:b6:f4:4d:36:d4:80:8d:fa:74:d3:65:d5:
         fe:65:a7:61:5d:f4:c7:ba:61:1c:6b:b8:5b:5f:4a:92:42:e7:
         13:81:fb:4a:04:37:aa:43:ed:2c:0b:af:d8:4c:2a:26:52:0a:
         51:86:c9:c9:1f:21:2b:c4:8b:f5:e8:29:fa:42:33:e2:61:4c:
         5d:21:64:af:44:bd:ad:30:09:be:46:84:25:c8:e5:71:c8:f1:
         fa:7f:44:da:38:92:60:a6:58:4e:3d:c2:b6:29:2e:87:88:50:
         55:72:96:96:3c:bd:c3:1a:94:c7:86:2c:8a:bb:57:e6:76:17:
         93:61:0a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:30 2025 by rpki-client