This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
File:                     neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json)
Hash identifier:          mZQSeXk4Q/vd6mcdaOk4ex8QP1kipqwOW71ALgmpug4=
Subject key identifier:   3D:33:DD:C5:E1:38:52:22:68:81:69:E2:BF:FF:A7:8B:E2:56:5C:1F
Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
Certificate issuer:       /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Certificate serial:       06F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
Manifest number:          53B2
Signing time:             Sat 06 Dec 2025 14:56:46 +0000
Manifest this update:     Sat 06 Dec 2025 14:56:46 +0000
Manifest next update:     Sat 13 Dec 2025 14:56:46 +0000
Files and hashes:         1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: VT+jl4peDUDaTNjqLnKooSOvMc3FeZqEz/doDcbaNAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
                          rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
        Validity
            Not Before: Dec  6 14:56:46 2025 GMT
            Not After : Dec 13 14:56:46 2025 GMT
        Subject: CN=6934442e-09fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:a1:4e:5c:87:5a:11:8e:97:35:df:02:f2:
                    0a:89:ce:2a:91:b3:83:76:ee:14:32:e0:0b:b9:1a:
                    1b:81:8d:77:1e:8c:20:19:41:f3:42:b1:de:c8:1f:
                    71:66:55:57:40:26:9c:53:02:46:9d:da:a0:b1:f2:
                    5b:38:e2:19:57:25:65:f5:dc:30:9f:ae:4d:e9:53:
                    8c:0b:a9:c2:3f:91:ce:f5:19:09:47:e2:c2:62:28:
                    c0:62:d0:82:2e:00:c5:a0:8a:76:7a:3e:e6:6e:b5:
                    c2:d9:27:be:7f:53:31:23:e6:70:b4:39:13:8d:f5:
                    53:05:6b:c2:81:92:3f:7d:aa:a2:bc:59:0f:13:b8:
                    82:82:17:5f:c0:32:ff:c5:fd:d6:51:bc:d8:73:55:
                    f2:84:05:4c:5a:33:d5:a3:2f:63:24:40:f9:e0:01:
                    fc:94:e9:6f:31:d9:ae:c3:96:06:95:e1:07:6b:ed:
                    1e:91:98:8a:0d:dd:3a:bf:43:0d:12:7b:5a:63:71:
                    d1:59:42:cf:76:6b:17:df:48:e8:db:a6:05:60:ca:
                    fe:ad:bd:8e:71:b3:e6:ff:e5:c3:0a:54:6d:09:a5:
                    17:1f:6f:ef:4d:c9:40:54:2b:92:a4:db:46:66:43:
                    0b:13:48:02:55:22:ea:04:b3:32:da:13:e9:63:37:
                    da:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:33:DD:C5:E1:38:52:22:68:81:69:E2:BF:FF:A7:8B:E2:56:5C:1F
            X509v3 Authority Key Identifier:
                keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:83:46:00:0a:42:5c:f3:bb:71:8a:7c:9f:97:88:58:b8:c1:
         70:b9:1c:6a:76:64:93:e9:2d:16:69:3f:51:e7:87:45:c1:42:
         b3:8a:4c:b8:a6:27:74:a0:ac:c3:87:65:48:96:eb:77:41:20:
         62:37:5e:47:49:0e:9a:ab:f7:e1:96:86:a6:ff:77:56:6a:00:
         e4:2f:16:a8:ac:99:d0:b3:9d:ff:12:2c:d9:35:c3:54:26:3b:
         ae:ac:a1:1c:a0:eb:fa:c6:75:8c:bf:59:82:c3:b7:ae:98:f2:
         a8:95:66:9f:d3:f2:2d:d1:ae:7a:c7:b7:f9:db:93:5a:9d:f5:
         67:57:3e:13:e6:9d:f0:05:d2:03:14:32:96:75:c4:f3:18:92:
         4b:40:96:33:f5:cd:e1:9a:f8:42:c3:d3:2b:22:cb:8e:f8:22:
         ad:9a:18:88:20:40:88:47:81:33:87:12:5d:85:67:09:5c:62:
         0a:11:f0:d9:b0:b7:41:97:b0:d0:b3:6a:58:b9:f6:67:b1:c2:
         72:e4:f6:e3:25:51:99:df:35:31:cb:2c:4a:5a:12:bf:1e:33:
         f8:56:02:29:42:6b:4e:1c:6d:c4:bb:f9:a8:9c:e5:02:4d:92:
         8a:3b:7c:c0:82:87:25:c3:10:44:58:7b:f8:50:ad:6e:97:86:
         f5:1f:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:44:18 2025 by rpki-client