This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft
File:                     m0_NHtBqHkuhxL6fHRCylF6SjBk.mft (raw, json)
Hash identifier:          u4Y8Kg5kOcEopfsd/RDYETbGCTbPPhH+Kk1g5NWK7JA=
Subject key identifier:   96:4E:66:23:64:B8:EC:15:52:83:72:A6:C7:B8:38:38:B8:70:0F:35
Authority key identifier: 9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19
Certificate issuer:       /CN=A9196780/serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft
Manifest number:          54
Signing time:             Fri 05 Dec 2025 05:04:19 +0000
Manifest this update:     Fri 05 Dec 2025 05:04:18 +0000
Manifest next update:     Fri 12 Dec 2025 05:04:18 +0000
Files and hashes:         1: m0_NHtBqHkuhxL6fHRCylF6SjBk.crl (hash: H/cByzblXndvGxdLYc5bTjAxjmu3uMaj4YIRNUCkRlw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl
                          rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196780, serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19
        Validity
            Not Before: Dec  5 05:04:18 2025 GMT
            Not After : Dec 12 05:04:18 2025 GMT
        Subject: CN=693267d3-34aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:03:8f:be:30:9a:ef:33:02:aa:11:60:d3:
                    17:6c:ba:54:7e:ef:cd:f5:19:f7:82:b6:c1:1a:ba:
                    ef:ad:d0:93:42:ba:e3:89:39:23:a7:6b:af:6f:da:
                    e8:6d:89:bb:45:7d:fd:1f:cf:a7:97:64:80:a9:a4:
                    f6:f4:ac:61:38:de:6e:0c:64:4b:6f:52:d4:3d:a8:
                    1a:21:76:5b:b0:b3:84:ad:5d:3b:9d:9e:b8:4d:05:
                    93:df:ed:fb:8e:7a:84:3b:0d:7c:d0:6e:04:c3:db:
                    7a:06:35:97:89:a8:ce:07:5b:48:be:59:24:c5:28:
                    64:e1:51:58:5a:f5:a7:69:6f:da:71:b8:6b:4a:48:
                    97:c2:52:03:77:db:3f:d1:9c:b1:81:9e:34:b6:17:
                    84:58:59:ff:2b:f4:db:d4:58:8b:70:f9:01:06:5d:
                    63:9c:e6:e5:e5:5c:15:16:62:21:01:5f:21:c5:1b:
                    13:16:11:47:c7:96:e3:83:f7:20:69:35:49:8d:60:
                    95:26:84:f2:16:84:45:22:24:c5:c9:90:d4:9c:69:
                    a4:fa:ca:66:46:c6:d3:3e:75:b0:a3:90:eb:11:db:
                    db:f3:c5:5b:f7:41:09:34:fc:e1:54:2b:99:b4:ec:
                    20:23:d7:8b:ff:b6:06:32:50:98:c5:4a:dc:a6:5a:
                    50:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4E:66:23:64:B8:EC:15:52:83:72:A6:C7:B8:38:38:B8:70:0F:35
            X509v3 Authority Key Identifier:
                keyid:9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:04:5e:68:53:db:f2:6f:cd:1b:11:9d:f7:4c:f5:d1:90:16:
         00:5b:8e:c3:ac:57:08:5c:74:e4:3e:4f:bd:50:d8:57:e9:1e:
         9f:43:3e:63:64:30:c5:ce:32:77:b2:c0:88:21:aa:ad:4c:a5:
         58:95:18:91:7c:0c:c2:a3:76:cf:c5:71:68:3e:bb:da:37:90:
         29:8c:b1:2d:ec:57:1e:9c:23:9d:f2:70:71:2a:9b:33:98:38:
         ef:e8:ea:5f:e8:aa:b1:30:96:d3:35:fb:e2:76:da:5e:09:52:
         27:22:94:cd:8f:28:2c:b9:58:32:05:08:d6:e3:47:45:9c:6c:
         09:fc:01:0f:1b:e7:1b:70:10:ac:6d:56:f6:40:6a:cf:43:ee:
         88:d3:52:07:5f:c8:fd:e7:0e:38:f3:9e:28:86:28:3b:59:07:
         98:c6:3e:f6:18:70:16:fe:de:87:56:4a:6b:39:9c:54:18:64:
         c9:8c:33:d0:78:77:bb:ca:d1:46:81:40:08:a1:46:08:29:65:
         47:b2:86:82:43:9e:52:a8:af:e1:52:ea:a9:11:9f:01:cd:74:
         6b:89:24:50:bd:35:b2:4d:3e:e0:e3:f0:c3:f7:55:f9:ba:88:
         54:d4:75:2e:8f:cc:cd:a4:5b:d8:dd:27:0b:97:e4:00:fc:66:
         e2:06:7e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:09 2025 by rpki-client