This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
File:                     MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft (raw, json)
Hash identifier:          XPUFjhK5DhlHlaPfqgBfjjOifrLItNZg1rDMGDG1LN8=
Subject key identifier:   FA:86:B5:29:8B:8D:8A:E3:08:0D:BB:99:96:4E:57:44:57:6F:4F:CA
Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03
Certificate issuer:       /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
Manifest number:          8D
Signing time:             Fri 05 Dec 2025 04:32:18 +0000
Manifest this update:     Fri 05 Dec 2025 04:32:18 +0000
Manifest next update:     Fri 12 Dec 2025 04:32:18 +0000
Files and hashes:         1: MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl (hash: z7+1yS7hRSCb1Haq+qwI3zz7DmgcrJidcJBfepULFrs=)
                          2: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (hash: t9LgVYyuR76/7PmfedGxaDrMAlK0pUEQonnQh6SyVwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl
                          rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03
        Validity
            Not Before: Dec  5 04:32:18 2025 GMT
            Not After : Dec 12 04:32:18 2025 GMT
        Subject: CN=69326052-5f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:bc:01:b0:ab:99:8f:f4:55:96:45:ba:75:
                    84:eb:ba:65:7b:e6:7c:ed:25:e7:2f:43:9b:18:8c:
                    4b:df:36:11:31:c7:7b:a1:ee:45:60:85:55:6b:89:
                    e8:2f:2e:d2:7b:90:03:bf:a2:6d:12:c4:d3:ce:2d:
                    8b:0e:4e:55:f9:e4:a4:53:de:6b:15:52:9a:70:80:
                    3f:63:0f:03:38:8d:b9:36:0f:aa:be:69:44:23:e0:
                    97:a8:fe:31:70:4c:da:3e:54:e3:82:ee:73:27:3a:
                    84:b1:aa:80:31:76:1f:07:66:dc:e3:04:bf:33:17:
                    6c:16:e9:b6:ef:06:03:40:4e:3f:78:47:da:0e:b9:
                    fa:93:f6:0b:66:f9:ac:95:12:8e:2d:b7:54:50:4f:
                    87:2a:fd:6f:31:2d:cc:54:94:ea:6b:bc:92:fe:77:
                    69:24:0d:87:61:29:59:44:84:fb:d2:d5:cc:8f:ae:
                    a9:e8:3c:a5:c2:50:1f:1d:b2:6f:bd:b2:69:0e:c1:
                    6a:91:f7:ec:7e:7b:d3:5e:87:c3:6d:5a:a1:30:18:
                    88:b9:df:ce:6c:15:81:db:1f:2f:3b:bd:ab:f7:9a:
                    58:95:65:29:2a:b1:97:7e:64:94:e8:75:99:9c:d6:
                    99:55:0f:b8:bd:16:8c:1b:15:cb:cd:21:f1:86:9a:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:86:B5:29:8B:8D:8A:E3:08:0D:BB:99:96:4E:57:44:57:6F:4F:CA
            X509v3 Authority Key Identifier:
                keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9a:d4:d8:97:31:fd:c1:56:80:ba:b9:c2:88:93:52:c8:da:
         0d:40:ef:78:45:dc:57:b5:59:74:e1:66:5a:51:78:46:8d:8c:
         6a:57:2b:4c:83:99:ea:19:81:0f:0e:e4:7f:68:a1:56:11:d0:
         9f:8b:46:da:4d:3d:25:4b:4d:7a:ec:52:f4:a1:35:63:43:26:
         08:4e:9a:95:4c:d9:1b:1e:f1:3e:a5:73:c8:bc:2f:fc:4c:5c:
         10:9c:c5:bc:ee:30:9e:74:34:c7:41:81:f0:de:d2:cf:41:62:
         b2:0a:16:64:84:5b:30:f2:db:b2:29:91:e1:5d:eb:ee:af:47:
         65:59:77:18:d0:d1:c0:a6:1a:56:8b:7e:09:bd:e4:5c:6f:64:
         51:fd:05:e4:22:86:e6:70:23:01:d8:cc:52:69:6f:d3:18:67:
         c0:6c:51:cd:e5:73:b1:5c:d4:2f:eb:2f:c2:4f:c3:3f:8f:be:
         bd:c6:7b:78:38:5f:4a:33:a2:2b:cc:a9:71:77:31:6f:46:9a:
         7b:3b:46:6f:c2:78:dc:f4:04:ea:06:3a:af:87:44:51:b6:7a:
         39:72:d4:9d:b6:00:32:b4:87:6e:70:a9:07:6c:07:04:9a:23:
         00:ce:e4:35:ff:48:ca:52:6e:03:ba:a2:d3:40:cc:da:67:38:
         83:db:21:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:29 2025 by rpki-client