This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.mft
File:                     N8N6C_uGfmiXJdsgnzWRLk6IycU.mft (raw, json)
Hash identifier:          fP0YS9ugdS7/wTbm7Pl6uLNZos7+KzS4M6cx/PvDWHU=
Subject key identifier:   8B:FD:26:CC:F5:D8:E6:8C:AC:10:3B:27:A7:90:7E:C2:9E:82:0F:54
Authority key identifier: 37:C3:7A:0B:FB:86:7E:68:97:25:DB:20:9F:35:91:2E:4E:88:C9:C5
Certificate issuer:       /CN=A9190587/serialNumber=37C37A0BFB867E689725DB209F35912E4E88C9C5
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N8N6C_uGfmiXJdsgnzWRLk6IycU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.mft
Manifest number:          4A
Signing time:             Fri 05 Dec 2025 05:12:17 +0000
Manifest this update:     Fri 05 Dec 2025 05:12:16 +0000
Manifest next update:     Fri 12 Dec 2025 05:12:16 +0000
Files and hashes:         1: N8N6C_uGfmiXJdsgnzWRLk6IycU.crl (hash: Lh6QpG56KVXE9zIcgDnoE2NfXwjNbAeQ+DhvZpsaG8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.crl
                          rsync://rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N8N6C_uGfmiXJdsgnzWRLk6IycU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190587, serialNumber=37C37A0BFB867E689725DB209F35912E4E88C9C5
        Validity
            Not Before: Dec  5 05:12:16 2025 GMT
            Not After : Dec 12 05:12:16 2025 GMT
        Subject: CN=693269b1-5405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:96:c5:55:01:04:65:d5:64:3a:0c:c1:1c:25:
                    e1:05:99:bd:67:d1:20:a6:29:cf:b7:cb:bb:e9:d9:
                    0e:d0:e9:b7:7e:58:90:24:a1:c0:bb:eb:f8:70:2e:
                    d4:b1:af:39:e8:32:fc:62:01:d9:ae:32:07:1a:4c:
                    6b:75:07:98:7f:27:85:5f:d3:83:86:23:ea:28:50:
                    18:a1:64:92:9e:f2:91:d3:3d:e4:3f:e3:5f:22:5f:
                    36:75:7c:cc:33:51:d9:08:6e:94:76:1e:32:98:59:
                    38:69:c9:64:4f:3b:09:91:f6:ff:03:2f:46:90:d5:
                    ec:da:05:81:08:ac:9f:bb:5f:95:a8:cc:a3:2f:b9:
                    6d:07:1a:65:c5:0d:0c:34:32:39:8d:e1:20:5b:fe:
                    d9:60:90:a7:29:7d:f3:2a:4e:75:04:a0:1b:f9:9d:
                    9b:e2:92:ff:6f:12:54:c2:04:71:bf:bb:f4:10:95:
                    0e:ff:b9:a9:b1:54:b1:6c:40:3f:be:c7:d9:a7:40:
                    6c:a4:df:8b:86:55:c0:64:43:c0:5c:c2:54:ec:64:
                    91:f8:10:45:93:93:a3:22:58:87:c1:3d:80:aa:ad:
                    e6:1f:d3:5f:0b:bf:7b:ce:f7:68:c1:74:f1:47:03:
                    02:1f:1d:1f:85:50:a6:e0:d2:ca:72:89:43:a8:64:
                    ac:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FD:26:CC:F5:D8:E6:8C:AC:10:3B:27:A7:90:7E:C2:9E:82:0F:54
            X509v3 Authority Key Identifier:
                keyid:37:C3:7A:0B:FB:86:7E:68:97:25:DB:20:9F:35:91:2E:4E:88:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N8N6C_uGfmiXJdsgnzWRLk6IycU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e5:20:19:83:a2:77:fc:81:58:e4:aa:d4:de:ba:c2:84:14:
         cd:37:5e:39:1f:6d:07:ca:44:b9:e0:92:67:67:b6:50:e7:6b:
         a7:18:c3:16:5f:fb:51:2e:d4:fd:3a:0c:b3:c6:12:fc:c8:69:
         78:fd:2b:f7:86:06:f2:6a:db:30:e1:44:a8:84:59:b6:27:04:
         a4:69:90:4b:72:47:b0:ff:cc:ab:d5:d2:83:ff:3e:f5:96:a3:
         60:9d:20:86:97:a3:93:e7:4d:94:dc:53:5e:f6:6f:98:16:d6:
         79:d9:28:47:c7:91:40:1c:20:e7:97:16:eb:6b:d9:34:ac:d4:
         de:89:88:65:fc:cc:74:19:42:0b:13:35:8d:c1:3a:b2:1d:ef:
         d9:1f:fe:05:9c:45:d9:22:da:b3:6e:3c:49:14:96:8c:9b:a5:
         15:78:6b:80:a3:01:19:d4:5f:9d:6d:8e:d3:45:06:0a:64:97:
         50:33:b4:53:84:ba:d7:44:dc:32:43:99:d6:01:d8:69:21:e7:
         44:84:a1:14:b7:39:06:f2:50:43:e2:8c:0c:36:b1:92:f3:54:
         77:58:30:2b:f1:d2:82:cb:ea:47:ed:95:f6:12:21:45:76:3b:
         72:8b:f1:94:3d:20:53:bc:d2:79:3c:1c:34:49:bd:ea:65:eb:
         07:ee:d3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:41 2025 by rpki-client