This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
File:                     NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json)
Hash identifier:          On8aeyrjZBQEozjc0PubeFzr5q7+Iuf2MwJHBxFhhLI=
Subject key identifier:   D1:29:33:61:BC:BB:8D:E8:09:DD:30:45:CE:3B:EF:8D:6F:4D:7A:DA
Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
Certificate issuer:       /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Certificate serial:       1480
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
Manifest number:          1478
Signing time:             Sat 06 Dec 2025 16:26:41 +0000
Manifest this update:     Sat 06 Dec 2025 16:26:40 +0000
Manifest next update:     Sat 13 Dec 2025 16:26:40 +0000
Files and hashes:         1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: 9FfqrzAjXFKNjKNN+HwEs/fsayd7bJjNHmDypskpCxM=)
                          2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: IY1KR2STRHWACxUYvedIZffoCYQxTjZXanC5kAZHVDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
                          rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5248 (0x1480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
        Validity
            Not Before: Dec  6 16:26:40 2025 GMT
            Not After : Dec 13 16:26:40 2025 GMT
        Subject: CN=69345940-917f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:45:e5:08:f2:38:15:54:03:6e:06:ae:7b:
                    ef:be:32:79:08:9f:5e:de:70:31:25:e7:e1:08:6e:
                    63:cd:1c:0c:be:fd:e4:b7:bf:d7:f4:5d:26:72:89:
                    68:87:e6:33:06:ee:d5:95:55:f0:20:4f:fb:81:31:
                    0c:2a:39:d1:cf:dc:3d:c3:33:e4:4e:30:a1:80:63:
                    d7:25:20:7a:0c:00:dd:24:8a:04:6d:b0:da:e7:d6:
                    31:fc:ed:63:50:81:5b:a9:38:75:64:2b:0e:42:5c:
                    7b:88:ca:cc:22:9f:af:55:c8:c1:d9:b8:a1:be:28:
                    e0:7b:30:9c:98:f4:9a:60:f8:0b:6f:0e:3e:a8:e8:
                    d8:70:39:2b:48:16:5f:3b:b1:87:75:f2:fe:ca:64:
                    55:3c:18:5f:df:9b:cb:45:f1:c2:e8:f5:09:d1:21:
                    cc:73:36:27:dc:b4:6a:4b:fb:54:85:5d:98:73:40:
                    e8:b7:83:90:3e:20:76:d9:5e:02:17:cc:a9:9b:47:
                    ee:a9:c8:cf:36:6e:a1:8a:bc:0d:04:8d:a0:75:a3:
                    f1:49:e7:86:64:f1:3c:4a:a3:5f:40:4b:7d:16:c0:
                    5c:f8:f5:18:0f:d6:19:cd:99:19:6a:2f:8a:88:25:
                    fa:38:29:60:2d:69:0b:7a:eb:46:9a:d9:18:a4:7a:
                    c8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:29:33:61:BC:BB:8D:E8:09:DD:30:45:CE:3B:EF:8D:6F:4D:7A:DA
            X509v3 Authority Key Identifier:
                keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3a:06:4c:dd:81:ce:ea:94:62:87:68:a5:fe:3d:1a:ea:a6:
         5f:21:d8:9a:e3:4b:0d:62:73:2a:44:c1:08:2a:eb:3c:28:49:
         54:4f:88:91:9d:54:56:1d:d0:46:0d:49:d9:6c:06:12:20:01:
         87:fe:c1:83:f1:67:cb:53:2c:3a:20:f7:1d:ff:cc:51:25:c8:
         5b:2c:27:f4:b9:a7:06:4b:f1:08:dc:b4:75:3c:61:e1:d5:78:
         89:15:69:9f:6c:47:b3:3e:ed:a0:5d:8b:86:bf:4a:c6:83:d8:
         7b:cf:bf:1b:6d:98:df:88:f1:58:90:c2:50:db:02:de:1e:20:
         c1:14:63:46:5c:27:42:39:48:e4:e4:f2:ec:a2:45:67:5c:d1:
         31:84:88:46:9f:4e:08:25:6f:63:0e:c4:b5:9d:ac:fb:7f:35:
         6f:30:8c:76:89:51:1b:f1:cf:e9:e7:cf:23:9c:76:86:3c:51:
         0a:57:6e:ed:a7:87:01:7f:76:e0:e8:11:75:97:67:a1:c5:15:
         1d:a4:1f:39:95:af:eb:07:e9:58:df:7d:ac:1b:fe:39:ba:df:
         2b:f1:2d:b4:49:5d:81:07:c4:9a:e2:c6:bc:81:92:a7:a9:6e:
         b3:1c:68:10:e7:2d:f3:46:23:36:48:9a:a0:41:14:55:9e:b2:
         9e:88:b6:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3
NDMzRUIyRTcwHhcNMjUxMjA2MTYyNjQwWhcNMjUxMjEzMTYyNjQwWjAYMRYwFAYD
VQQDEw02OTM0NTk0MC05MTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnktF5QjyOBVUA24GrnvvvjJ5CJ9e3nAxJefhCG5jzRwMvv3kt7/X9F0mcolo
h+YzBu7VlVXwIE/7gTEMKjnRz9w9wzPkTjChgGPXJSB6DADdJIoEbbDa59Yx/O1j
UIFbqTh1ZCsOQlx7iMrMIp+vVcjB2bihvijgezCcmPSaYPgLbw4+qOjYcDkrSBZf
O7GHdfL+ymRVPBhf35vLRfHC6PUJ0SHMczYn3LRqS/tUhV2Yc0Dot4OQPiB22V4C
F8ypm0fuqcjPNm6hirwNBI2gdaPxSeeGZPE8SqNfQEt9FsBc+PUYD9YZzZkZai+K
iCX6OClgLWkLeutGmtkYpHrIwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEpM2G8
u43oCd0wRc47741vTXraMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC
MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT
MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBeOgZM3YHO6pRih2il/j0a6qZfIdia40sNYnMqRMEIKus8KElUT4iR
nVRWHdBGDUnZbAYSIAGH/sGD8WfLUyw6IPcd/8xRJchbLCf0uacGS/EI3LR1PGHh
1XiJFWmfbEezPu2gXYuGv0rGg9h7z78bbZjfiPFYkMJQ2wLeHiDBFGNGXCdCOUjk
5PLsokVnXNExhIhGn04IJW9jDsS1naz7fzVvMIx2iVEb8c/p588jnHaGPFEKV27t
p4cBf3bg6BF1l2ehxRUdpB85la/rB+lY332sG/45ut8r8S20SV2BB8Sa4sa8gZKn
qW6zHGgQ5y3zRiM2SJqgQRRVnrKeiLay
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:05:24 2025 by rpki-client