This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
File:                     N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json)
Hash identifier:          4k21IHwEDoI35q29vNgAmHTYnFqxI7J3UeeNLYPbb/E=
Subject key identifier:   10:F2:24:37:80:15:9D:13:21:F1:54:F4:5B:B7:D9:98:CB:F1:F9:51
Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
Certificate issuer:       /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Certificate serial:       03F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
Manifest number:          03F2
Signing time:             Tue 16 Dec 2025 23:56:31 +0000
Manifest this update:     Tue 16 Dec 2025 23:56:31 +0000
Manifest next update:     Tue 23 Dec 2025 23:56:31 +0000
Files and hashes:         1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: OI3mq0CKBsbkeWUjBOFyspqdvFoCJ7E1/3ahv6Mue5A=)
                          2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl
                          rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 23:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
        Validity
            Not Before: Dec 16 23:56:31 2025 GMT
            Not After : Dec 23 23:56:31 2025 GMT
        Subject: CN=6941f1af-d2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:4f:c5:a9:16:c4:1e:b1:ce:e2:06:dc:92:
                    50:2f:af:5a:01:d1:57:5e:d8:05:8f:72:1b:e6:be:
                    6b:dc:e0:9b:34:f4:c9:8d:64:14:ca:6f:0a:bf:2a:
                    25:90:03:5d:56:8b:59:d1:9c:c8:17:46:29:4c:45:
                    76:69:26:24:6d:9e:92:e2:82:89:8c:43:be:9a:a2:
                    06:fd:79:0d:fc:41:b6:45:48:64:5b:81:37:3d:44:
                    40:15:da:09:e3:13:2d:4c:ca:2e:7f:63:34:2b:fb:
                    01:44:30:eb:25:11:5d:9d:db:9d:7d:70:82:24:58:
                    8b:04:90:8b:b3:e3:dc:c4:ea:28:94:36:3c:af:d1:
                    d1:8c:3a:75:47:c7:2b:1c:e3:8c:7e:03:b0:91:a7:
                    be:a1:90:ae:41:46:91:c4:da:0e:31:d0:25:b5:e1:
                    2a:18:b9:b5:a8:5a:ff:ab:d5:19:20:40:fb:4d:30:
                    b1:6e:77:00:97:aa:6b:bd:94:6d:03:f2:55:63:20:
                    45:e8:55:3b:e3:30:01:41:b7:50:2b:b3:6a:aa:0c:
                    49:55:b3:b7:df:74:c8:47:8e:71:bc:91:02:60:2f:
                    78:26:84:ce:74:ee:f5:d4:48:e6:a1:2f:c9:52:1d:
                    e4:51:9f:63:07:f7:91:c0:ed:2c:ff:91:ba:ab:f3:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F2:24:37:80:15:9D:13:21:F1:54:F4:5B:B7:D9:98:CB:F1:F9:51
            X509v3 Authority Key Identifier:
                keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:24:b1:b3:88:4c:19:e7:b6:f9:0f:d4:bd:cd:24:37:71:
         e2:75:d4:78:c7:78:86:99:38:b7:02:3f:81:bf:0f:9b:7a:fa:
         1d:03:14:5a:9b:c5:70:6b:b7:ce:44:b0:c2:13:56:02:2d:64:
         ab:3d:c2:66:c1:45:d9:7e:a1:30:6e:74:c2:0f:6e:fa:1e:b8:
         b3:36:58:fb:da:eb:dd:fc:95:21:d0:5c:18:8f:ba:37:dc:77:
         93:be:49:a1:bb:e3:bb:37:20:a7:d9:51:88:46:ab:f7:05:3a:
         34:29:15:a6:40:de:95:0c:7d:da:b4:4c:e8:84:a0:87:b4:b2:
         1c:5c:a0:69:3a:c9:80:fa:20:68:89:ef:8b:24:cf:cd:95:19:
         7d:1a:90:29:46:e3:9a:e6:90:e1:a6:bd:ff:14:f6:88:0b:d2:
         c7:5e:2e:6f:22:8b:dc:7a:24:4d:f5:f3:ab:22:d5:20:4a:dd:
         af:a3:5c:30:d0:fe:c6:2e:0b:1a:ee:7d:26:e8:a7:8f:5c:3f:
         06:63:ea:4b:2c:71:48:4f:fd:b6:b0:33:f2:d0:48:12:b5:04:
         1b:0f:67:11:02:08:26:30:ee:6f:bf:d7:dd:23:09:3f:ee:b5:
         9a:da:01:32:6e:81:b6:38:a9:88:39:37:15:5e:c7:4f:d9:6f:
         85:54:4d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:31:49 2025 by rpki-client