This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
File:                     nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json)
Hash identifier:          XyoET8f+9HWe7rbwRy5u5RTQlUpTJDehEd2Y5oJjq1I=
Subject key identifier:   AB:60:78:B1:B4:1C:63:77:44:2F:17:6D:F5:F2:54:AF:18:19:89:86
Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF
Certificate issuer:       /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
Certificate serial:       0798
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
Manifest number:          078A
Signing time:             Sat 06 Dec 2025 20:35:28 +0000
Manifest this update:     Sat 06 Dec 2025 20:35:27 +0000
Manifest next update:     Sat 13 Dec 2025 20:35:27 +0000
Files and hashes:         1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: mAqjiOlpoeo6Er7U/6vralyYhf8Zse4pqEX6dVi2O1w=)
                          2: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: jS334U9iP0LsvG7IMQzbvCDhrmoJkxnr7mSzJK0aIOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl
                          rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944 (0x798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
        Validity
            Not Before: Dec  6 20:35:27 2025 GMT
            Not After : Dec 13 20:35:27 2025 GMT
        Subject: CN=6934938f-35b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:0a:bd:8c:e2:17:2f:9d:10:84:f0:e0:16:
                    e4:cb:16:a9:d8:54:df:c4:4f:32:ba:0b:0b:7c:93:
                    25:b1:c5:1b:fc:06:96:e2:b0:79:54:56:c4:94:d2:
                    7f:c9:82:59:74:e1:ca:4e:84:59:fb:c8:0a:b1:84:
                    5b:b7:a5:93:c2:5b:46:4d:ad:41:ed:33:16:58:2c:
                    d8:07:41:2e:6a:e1:52:84:8b:3e:31:35:76:90:56:
                    c0:96:66:08:4a:b7:3c:0d:42:59:f7:0d:d6:cd:e8:
                    cc:57:6e:54:de:1c:60:23:20:2b:13:1b:39:b5:01:
                    84:6b:c6:bb:14:ec:ee:12:dc:b2:86:cf:df:a3:84:
                    50:06:42:4e:d5:d9:49:9b:59:39:2c:ad:d2:fd:9e:
                    34:3a:ce:bd:c3:06:5a:47:70:03:ce:ce:5f:e0:15:
                    fb:07:62:5c:ac:e5:ed:9a:d4:2a:4a:ea:aa:f3:de:
                    11:0f:81:30:8c:95:88:59:68:ff:07:1e:72:62:17:
                    d8:ba:77:33:1d:7c:49:9b:94:ba:09:da:2c:fe:40:
                    96:80:d1:b0:85:e9:f9:6f:40:fe:6c:df:b0:ec:d0:
                    cb:bf:81:41:da:3d:9f:95:2f:d6:56:ed:28:d7:01:
                    d6:07:c6:bf:90:3d:8e:fb:af:db:5e:fa:9b:82:07:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:60:78:B1:B4:1C:63:77:44:2F:17:6D:F5:F2:54:AF:18:19:89:86
            X509v3 Authority Key Identifier:
                keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:29:23:d7:f4:c8:d7:ab:ce:b8:9d:f4:42:5e:7e:47:be:
         0e:97:06:0a:a5:ec:ce:7c:72:2e:a6:a4:f9:60:69:96:16:f0:
         db:74:66:89:fe:fa:71:cd:f9:12:78:b7:fc:90:39:f3:b2:49:
         2c:21:59:37:23:d0:11:27:63:d1:00:f1:ff:95:db:0e:96:ba:
         8c:73:3e:74:c5:ea:ab:08:f6:fd:21:ce:1e:e8:bb:15:ee:ac:
         61:bd:ca:af:1c:75:e4:ba:34:4a:cc:c4:13:2b:a0:89:c7:33:
         4c:05:3a:28:8c:33:29:78:f2:9b:70:99:a2:b7:11:41:10:8b:
         f2:00:76:d5:d7:18:bb:5b:cb:55:85:53:63:80:d8:5e:0a:aa:
         f5:2d:5c:5b:a8:fa:3b:0e:50:4f:48:18:d3:81:66:cd:8f:3a:
         95:22:04:44:d2:e0:44:0f:36:93:5a:2b:fb:a9:b8:f2:25:f5:
         ff:dc:db:42:01:52:f3:27:68:c7:d8:86:a7:3a:9f:bd:f0:dd:
         24:f2:e6:5b:70:9d:a4:e2:40:a2:d1:71:cb:c3:64:19:3b:fd:
         12:ef:0f:83:a8:29:b3:44:b6:c2:cc:dc:42:9e:3b:71:fd:67:
         a4:ca:5c:1c:08:76:68:ae:2d:7b:36:15:a5:3c:61:9e:cb:3b:
         61:1b:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:41:18 2025 by rpki-client