This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File:                     NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier:          y1CUhcMiBDqwk7nSqEpZbg9tAR9bXthp4m/VO/1Wte0=
Subject key identifier:   B8:60:32:83:C9:E4:E5:BB:85:37:73:E0:B9:65:FD:C8:57:EE:1A:A7
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number:          4A
Signing time:             Fri 05 Dec 2025 05:11:20 +0000
Manifest this update:     Fri 05 Dec 2025 05:11:19 +0000
Manifest next update:     Fri 12 Dec 2025 05:11:19 +0000
Files and hashes:         1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: ItZ+zP682wC5F8Obex7iW2mX7rKm/o6M3bigGnDhXWU=)
                          2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: dgVomHsPjy8dnzAeq1krltAgv8t1jsAsT7S8XSGxsvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Dec  5 05:11:19 2025 GMT
            Not After : Dec 12 05:11:19 2025 GMT
        Subject: CN=69326978-392e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:fc:be:42:a0:52:ac:f6:03:85:63:97:54:
                    32:3e:53:5f:11:ba:ac:cc:32:41:f9:b7:fd:ee:19:
                    3d:41:84:06:11:13:4e:ca:07:83:34:21:bf:0d:3d:
                    18:37:39:fc:1c:2b:30:fb:22:a1:49:ca:68:96:d3:
                    7c:af:04:13:f1:2e:9a:23:d4:76:bb:9a:32:ae:2d:
                    b4:76:ca:b6:4f:d2:9f:06:1d:24:dd:e2:d1:76:11:
                    49:ba:36:06:04:2b:95:0f:d9:2b:a6:26:12:52:86:
                    39:01:08:1a:2c:e0:15:c5:56:61:ea:04:aa:39:dc:
                    e8:d9:c0:5d:f4:ee:7e:32:af:b1:9b:2b:68:6d:46:
                    10:88:5f:6b:62:fa:36:3d:50:ff:ef:1a:aa:a3:e2:
                    c5:2f:17:26:48:2b:70:7b:dc:1a:f4:93:60:55:a0:
                    c4:b1:33:6d:2b:1e:a0:59:81:1e:7a:89:b2:b3:ae:
                    d1:46:4b:08:c7:bc:c5:97:c9:bf:a8:5a:b9:ef:67:
                    79:86:a2:fa:e3:a0:ff:c4:0c:ff:d8:3d:7f:29:aa:
                    37:b5:e7:bf:3d:aa:2d:71:b5:1c:4a:19:b8:54:d0:
                    5a:a7:8b:fb:a2:46:ef:18:96:2f:dd:2c:b3:83:0b:
                    29:eb:ef:ad:9f:34:6a:e4:5f:58:73:c9:31:87:a3:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:60:32:83:C9:E4:E5:BB:85:37:73:E0:B9:65:FD:C8:57:EE:1A:A7
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:b3:80:76:55:03:a4:ba:be:1b:af:4d:1d:d4:bc:ca:25:
         bb:6b:bb:35:b5:5c:dd:56:9e:af:d9:7b:89:55:ad:74:0f:61:
         96:2f:63:45:0f:13:dc:ba:c3:b1:ee:ca:3c:24:e3:13:4e:72:
         42:94:56:c6:92:30:ce:d0:c6:32:d3:98:43:97:3c:e6:fd:51:
         c9:80:79:82:6c:f3:cb:7e:ed:0c:98:a9:3d:f0:f5:96:88:24:
         1e:3d:f9:55:74:34:c4:86:46:01:17:95:ac:72:bc:3f:d7:08:
         86:74:29:b3:18:59:8b:8b:57:83:c2:43:12:04:42:62:ab:34:
         1a:c4:f4:b0:4c:bb:e3:7b:07:f5:a3:be:2a:a4:6f:5f:7a:75:
         56:e9:33:81:48:54:12:47:d8:6a:b3:c0:83:9b:0e:d0:31:61:
         4a:55:da:be:34:09:af:5f:f6:71:4e:cf:db:aa:fe:8c:10:72:
         2f:94:e2:00:76:39:1d:a9:fa:1d:7d:e5:a3:f3:9e:e6:96:cb:
         e0:01:6d:ad:3f:54:4d:74:f3:11:30:0d:7c:b1:9b:23:6f:74:
         18:13:6b:72:bf:b0:67:41:57:54:35:be:fc:59:7e:19:b5:85:
         cc:71:8d:1d:0d:5f:48:aa:2e:bb:03:b7:b5:bd:55:a1:96:61:
         bc:28:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:12 2025 by rpki-client