This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
File:                     N-rtpCQtUJYrh7SiB6xMNEszBgw.mft (raw, json)
Hash identifier:          4tRs23sw3bt5+iJIyHwkqDjgRP/Otz/FootUMsMGs5Y=
Subject key identifier:   C0:86:B5:58:4B:6E:14:B4:7A:C4:63:FF:34:BD:62:9B:E6:C3:D3:B9
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0E79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
Manifest number:          0E3E
Signing time:             Sat 06 Dec 2025 17:15:59 +0000
Manifest this update:     Sat 06 Dec 2025 17:15:58 +0000
Manifest next update:     Sat 13 Dec 2025 17:15:58 +0000
Files and hashes:         1: N-rtpCQtUJYrh7SiB6xMNEszBgw.crl (hash: c4jiqhX/xxkKLYTc7M65anL7zYQbbQk23Kee3kWuMJQ=)
                          2: C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa (hash: XXEtd4acA5WN5nQ55u0c/6B2fLJ5iEmhPHp1iyDBTHg=)
                          3: 571B65E63DB411EEAA68F342C4F9AE02.roa (hash: c5cKsH/wywjFJuntQ2zEXHvdACLKbLED/IyUky+0prg=)
                          4: A26FA1DC51B811F0B1C0B748C4F9AE02.roa (hash: +ia9FDkk8XhHZAjnVE6jiqT+IAX2KrKqfIZK/zSEFO8=)
                          5: 4B058994B18D11EC886B063CC4F9AE02.roa (hash: hz9U6Vrjf2uu8O9hhyxsvGgsibbnQkjfxQGCzPSoo1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3705 (0xe79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741, serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Dec  6 17:15:58 2025 GMT
            Not After : Dec 13 17:15:58 2025 GMT
        Subject: CN=693464cf-e5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:e6:1f:cb:8d:75:fe:0f:1e:1b:e8:8c:50:
                    d6:b0:25:ac:67:2d:38:c2:7d:97:eb:c1:05:f0:ef:
                    0f:de:48:cd:c4:b3:0f:6e:77:4f:b1:27:ab:11:89:
                    8b:fc:79:ce:15:2b:70:8b:96:74:b2:70:0d:8e:0b:
                    31:8c:0f:bc:f6:37:23:59:cd:19:b3:ce:b7:88:7b:
                    0f:af:9e:6d:96:24:29:69:9c:fb:3a:f9:74:fc:df:
                    76:67:34:87:00:cc:00:6d:e3:4b:70:d8:4f:d4:29:
                    a7:45:d3:5c:b8:3b:f2:9b:0f:6b:30:96:b0:4f:bd:
                    84:4c:a4:72:df:cd:1f:55:9e:62:11:13:09:78:9e:
                    6b:08:57:c1:bc:5c:83:75:d7:7b:3f:5d:c9:ea:c2:
                    bc:0e:a9:68:8c:39:86:f1:c6:d7:ca:ec:f1:b0:78:
                    0a:3c:ca:7d:58:b0:a0:e2:58:9b:f2:3f:6c:b9:13:
                    c7:c3:5e:74:67:36:fc:02:50:88:9b:81:a7:f0:af:
                    d4:4a:7e:c4:17:f6:33:cd:11:ab:24:db:08:df:21:
                    bc:a6:7f:23:db:9a:54:63:f1:f4:dc:2b:51:44:9e:
                    5e:64:55:a5:d0:a8:5d:1f:2c:35:d2:c1:9a:3f:4a:
                    cd:c4:10:da:12:a6:23:e0:02:c1:d5:98:a8:fb:83:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:86:B5:58:4B:6E:14:B4:7A:C4:63:FF:34:BD:62:9B:E6:C3:D3:B9
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:aa:08:c7:12:94:4a:0f:3c:9f:0c:b3:f9:ff:14:2c:e7:a8:
         50:52:ff:1d:68:7e:d7:0a:92:17:28:69:f5:be:aa:af:25:58:
         f3:79:da:41:ad:d7:4b:10:70:81:bd:c5:32:17:98:c9:62:5e:
         40:b0:23:2b:78:fe:4e:be:6d:11:b5:de:3e:78:44:1f:25:76:
         c1:ef:51:b6:d6:b0:a5:14:68:b5:56:7a:a0:48:e1:4a:ae:e0:
         ac:e0:ea:40:a8:b6:82:8e:06:b4:e3:27:d2:07:ed:5b:1c:6a:
         0e:35:ab:0f:4a:2e:b5:2d:87:22:b3:e1:56:03:e3:3b:e0:00:
         76:39:0c:17:40:68:d2:c1:32:d7:b6:84:43:a7:8a:a4:c9:65:
         0b:ad:76:29:a6:e4:93:06:44:f1:0f:3a:df:02:2a:e3:1f:9b:
         2b:6a:79:a4:08:b4:57:40:c0:24:41:6c:46:06:25:67:1c:f0:
         32:34:75:03:73:f2:14:c0:87:4f:63:e0:79:4f:3f:51:a5:32:
         6e:39:9b:68:9a:c9:37:6e:c3:1e:46:48:9d:0a:8c:da:bf:39:
         eb:77:55:fe:c9:d0:91:38:08:e7:36:30:7d:82:02:d6:b9:95:
         12:26:d4:67:d1:b7:b7:dc:c1:8d:62:f2:75:ca:c3:73:60:b5:
         51:97:ad:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA3NDExMTAvBgNVBAUTKDM3RUFFREE0MjQyRDUwOTYyQjg3QjRBMjA3QUM0QzM0
NEIzMzA2MEMwHhcNMjUxMjA2MTcxNTU4WhcNMjUxMjEzMTcxNTU4WjAYMRYwFAYD
VQQDEw02OTM0NjRjZi1lNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqd7mH8uNdf4PHhvojFDWsCWsZy04wn2X68EF8O8P3kjNxLMPbndPsSerEYmL
/HnOFStwi5Z0snANjgsxjA+89jcjWc0Zs863iHsPr55tliQpaZz7Ovl0/N92ZzSH
AMwAbeNLcNhP1CmnRdNcuDvymw9rMJawT72ETKRy380fVZ5iERMJeJ5rCFfBvFyD
ddd7P13J6sK8DqlojDmG8cbXyuzxsHgKPMp9WLCg4lib8j9suRPHw150Zzb8AlCI
m4Gn8K/USn7EF/YzzRGrJNsI3yG8pn8j25pUY/H03CtRRJ5eZFWl0KhdHyw10sGa
P0rNxBDaEqYj4ALB1Zio+4M/AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCGtVhL
bhS0esRj/zS9Ypvmw9O5MB8GA1UdIwQYMBaAFDfq7aQkLVCWK4e0ogesTDRLMwYM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDc0MS83N0M5MTY4RUJE
MTIxMUU5OTBGNEJGMkNDNEY5QUUwMi9OLXJ0cENRdFVKWXJoN1NpQjZ4TU5Fc3pC
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04tcnRwQ1F0VUpZcmg3U2lCNnhNTkVzekJndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MDc0MS83N0M5MTY4RUJEMTIxMUU5OTBGNEJGMkNDNEY5QUUwMi9OLXJ0cENRdFVK
WXJoN1NpQjZ4TU5Fc3pCZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOqgjHEpRKDzyfDLP5/xQs56hQUv8daH7XCpIXKGn1vqqvJVjzedpB
rddLEHCBvcUyF5jJYl5AsCMreP5Ovm0Rtd4+eEQfJXbB71G21rClFGi1VnqgSOFK
ruCs4OpAqLaCjga04yfSB+1bHGoONasPSi61LYcis+FWA+M74AB2OQwXQGjSwTLX
toRDp4qkyWULrXYppuSTBkTxDzrfAirjH5sranmkCLRXQMAkQWxGBiVnHPAyNHUD
c/IUwIdPY+B5Tz9RpTJuOZtomsk3bsMeRkidCozavznrd1X+ydCROAjnNjB9ggLW
uZUSJtRn0be33MGNYvJ1ysNzYLVRl624
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:54:17 2025 by rpki-client