This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
File:                     Ny468IjbN1qP-RmFiy3MXH_Epeg.mft (raw, json)
Hash identifier:          Zj1T3SSwKnAwrotkIRZ6E1Nd0xFbzKNKVgvd4eQwppw=
Subject key identifier:   0A:F7:40:A9:3B:F6:90:75:ED:60:67:EF:E6:F7:74:35:82:F2:86:B4
Authority key identifier: 37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
Certificate issuer:       /CN=A91A679F/serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Certificate serial:       07AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
Manifest number:          079C
Signing time:             Thu 04 Dec 2025 20:27:31 +0000
Manifest this update:     Thu 04 Dec 2025 20:27:31 +0000
Manifest next update:     Thu 11 Dec 2025 20:27:31 +0000
Files and hashes:         1: Ny468IjbN1qP-RmFiy3MXH_Epeg.crl (hash: 0lGL6Yh8HTZYy3Tg7OnAUjsleX7U5E5ba21hhzLJCVk=)
                          2: B033793C686D11EE8607594CC4F9AE02.roa (hash: JOi7OHLhFtdHcYqhgYyNkkEIbuwvBfapNIuWdidQbmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl
                          rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1967 (0x7af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A679F, serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
        Validity
            Not Before: Dec  4 20:27:31 2025 GMT
            Not After : Dec 11 20:27:31 2025 GMT
        Subject: CN=6931eeb3-94a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ac:67:6d:27:29:d7:32:d9:9e:61:34:1a:8d:
                    79:53:80:e2:cc:0a:e6:85:85:3a:27:5e:e6:d6:19:
                    76:29:17:ff:00:0e:43:14:ae:cc:41:dc:79:97:00:
                    6a:31:5f:7d:c8:84:e1:af:1b:4a:31:5a:94:a9:a6:
                    86:7d:d3:8c:aa:0f:30:7e:bd:ce:32:e9:d4:1e:be:
                    b8:6e:bb:20:eb:0f:6a:e8:8a:43:a9:13:22:2b:74:
                    9d:00:69:d5:e0:23:b7:25:77:f7:d7:7c:c8:63:46:
                    ab:e0:77:96:80:68:e8:08:24:e0:d9:69:f0:ea:56:
                    71:99:30:ed:73:0d:46:8b:da:10:31:6d:5d:3f:23:
                    e0:98:b0:3f:20:93:fc:61:11:b4:76:06:a9:f8:88:
                    59:a8:94:16:fa:5f:72:c9:66:d1:04:9c:af:d7:8a:
                    81:21:e6:ff:96:aa:5c:ee:f7:fc:c3:ba:b0:bd:e1:
                    15:a4:30:4c:2c:f1:78:29:de:ea:f9:15:da:7e:7b:
                    61:8d:f6:d5:30:e4:27:f9:1c:3d:b0:05:e8:04:36:
                    28:7f:f2:d1:75:aa:72:1c:12:d5:c3:33:70:4e:4f:
                    e3:e7:47:f9:ff:7d:f2:f8:3a:dc:19:4a:e3:af:a8:
                    e2:88:58:0a:a5:d5:d3:8f:fb:16:f5:99:23:6b:0b:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F7:40:A9:3B:F6:90:75:ED:60:67:EF:E6:F7:74:35:82:F2:86:B4
            X509v3 Authority Key Identifier:
                keyid:37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6f:12:4b:91:4b:5c:5d:b6:23:15:7c:3f:af:88:9e:c1:1d:
         27:3d:e5:90:3d:f6:ee:f5:a6:6f:6b:5b:d6:47:29:83:9c:1b:
         13:c1:3b:63:f9:76:c6:ed:b7:57:b3:43:fc:7c:c6:a6:35:10:
         65:4f:d9:df:15:e6:1d:be:fa:42:a0:42:72:2b:37:c9:ea:77:
         13:f7:43:93:f2:47:24:89:e1:2c:dc:d1:cf:aa:c6:24:24:f7:
         28:75:1c:71:be:14:81:a5:b4:e3:6d:2b:37:09:13:f2:9d:e0:
         77:e8:89:eb:66:7d:12:a5:ae:fc:b6:61:6e:76:f7:df:61:fb:
         b2:0d:95:49:94:c3:1e:fc:8d:02:b0:9c:ac:59:ed:a2:c6:79:
         0e:49:f0:9a:f1:db:6a:7e:b3:1b:54:6a:4c:68:96:6b:e9:4a:
         0b:14:3f:10:88:10:5c:4a:65:cd:fa:66:14:e7:e6:1d:31:84:
         09:90:da:2f:b3:fe:21:17:1f:36:7e:3b:0a:12:20:50:b0:dd:
         41:6f:32:b0:64:2b:22:7e:9a:f1:aa:36:08:30:09:3c:cf:69:
         3b:5f:6d:5e:31:e5:60:c4:7a:a8:c3:4d:2c:53:0f:a7:04:58:
         94:05:b4:e1:37:a7:0c:80:2d:f0:3b:da:8e:66:dc:fd:f9:31:
         e7:cd:b0:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY3OUYxMTAvBgNVBAUTKDM3MkUzQUYwODhEQjM3NUE4RkY5MTk4NThCMkRDQzVD
N0ZDNEE1RTgwHhcNMjUxMjA0MjAyNzMxWhcNMjUxMjExMjAyNzMxWjAYMRYwFAYD
VQQDEw02OTMxZWViMy05NGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2KxnbScp1zLZnmE0Go15U4DizArmhYU6J17m1hl2KRf/AA5DFK7MQdx5lwBq
MV99yIThrxtKMVqUqaaGfdOMqg8wfr3OMunUHr64brsg6w9q6IpDqRMiK3SdAGnV
4CO3JXf313zIY0ar4HeWgGjoCCTg2Wnw6lZxmTDtcw1Gi9oQMW1dPyPgmLA/IJP8
YRG0dgap+IhZqJQW+l9yyWbRBJyv14qBIeb/lqpc7vf8w7qwveEVpDBMLPF4Kd7q
+RXafnthjfbVMOQn+Rw9sAXoBDYof/LRdapyHBLVwzNwTk/j50f5/33y+DrcGUrj
r6jiiFgKpdXTj/sW9Zkjawt8nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAr3QKk7
9pB17WBn7+b3dDWC8oa0MB8GA1UdIwQYMBaAFDcuOvCI2zdaj/kZhYstzFx/xKXo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjc5Ri9BMTUyNUY2QzJG
OTIxMUVCQjNFQkFGMjlDNEY5QUUwMi9OeTQ2OElqYk4xcVAtUm1GaXkzTVhIX0Vw
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL055NDY4SWpiTjFxUC1SbUZpeTNNWEhfRXBlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Njc5Ri9BMTUyNUY2QzJGOTIxMUVCQjNFQkFGMjlDNEY5QUUwMi9OeTQ2OElqYk4x
cVAtUm1GaXkzTVhIX0VwZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCibxJLkUtcXbYjFXw/r4iewR0nPeWQPfbu9aZva1vWRymDnBsTwTtj
+XbG7bdXs0P8fMamNRBlT9nfFeYdvvpCoEJyKzfJ6ncT90OT8kckieEs3NHPqsYk
JPcodRxxvhSBpbTjbSs3CRPyneB36InrZn0Spa78tmFudvffYfuyDZVJlMMe/I0C
sJysWe2ixnkOSfCa8dtqfrMbVGpMaJZr6UoLFD8QiBBcSmXN+mYU5+YdMYQJkNov
s/4hFx82fjsKEiBQsN1BbzKwZCsifprxqjYIMAk8z2k7X21eMeVgxHqow00sUw+n
BFiUBbThN6cMgC3wO9qOZtz9+THnzbDF
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:21:45 2025 by rpki-client