This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
File:                     NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json)
Hash identifier:          rFifxH0GeXuNdFmfaSybLPo8OSFYu9+vko2Zb6x08C0=
Subject key identifier:   7F:6D:33:A5:CA:EC:39:87:4A:75:8A:D3:AB:78:5F:D1:07:B7:D5:E0
Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
Certificate issuer:       /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
Manifest number:          010F
Signing time:             Fri 05 Dec 2025 02:58:42 +0000
Manifest this update:     Fri 05 Dec 2025 02:58:42 +0000
Manifest next update:     Fri 12 Dec 2025 02:58:42 +0000
Files and hashes:         1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: oIdsB1BFgahILpdwU9RvPZSFenzmYqe7QTShNG9nH78=)
                          2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: sjsLTuWeFwgevoPUUjQqWdyEX8OASo8b7yHbpb8l0pc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
                          rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
        Validity
            Not Before: Dec  5 02:58:42 2025 GMT
            Not After : Dec 12 02:58:42 2025 GMT
        Subject: CN=69324a62-3069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:3d:99:d1:c9:d8:f8:69:dd:90:4a:be:79:
                    48:fc:9e:28:98:29:f4:55:d3:1f:f6:cd:6d:31:8c:
                    e4:34:d8:b4:6b:c5:c0:53:89:af:c6:7f:57:24:7e:
                    d6:ab:0c:60:fe:14:e3:76:4d:24:5e:9e:d2:6a:5b:
                    c7:95:15:aa:d8:d2:3e:34:a4:30:84:db:bc:ee:77:
                    1e:84:78:16:5d:bd:9a:10:93:5c:8e:a3:1b:a1:89:
                    66:2a:4c:59:f0:0c:af:95:50:e6:ca:e4:dc:08:55:
                    b3:65:70:98:f3:c6:97:86:88:f4:a7:1b:46:58:5e:
                    a5:fc:2c:59:65:04:d3:48:a8:ad:24:32:0d:a9:6a:
                    9c:d3:7d:ec:d2:dc:24:83:b1:16:95:a4:77:c7:2a:
                    ca:b8:cc:42:fc:9d:43:31:05:ab:42:94:c6:7b:5c:
                    03:c5:1f:25:2b:b4:df:e5:fb:6e:cc:2b:ff:aa:22:
                    a0:30:82:89:af:c8:43:6d:75:4a:b7:06:68:40:14:
                    84:38:de:d8:ab:2a:69:82:71:45:7f:4e:0d:f5:0d:
                    81:4a:86:69:70:57:0f:4c:7b:ac:7c:b0:df:56:48:
                    da:67:3d:10:4f:59:10:d5:a6:20:de:1e:04:70:9c:
                    46:32:17:33:05:7c:78:f7:28:87:7b:c2:fa:44:f8:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6D:33:A5:CA:EC:39:87:4A:75:8A:D3:AB:78:5F:D1:07:B7:D5:E0
            X509v3 Authority Key Identifier:
                keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:bd:82:72:c8:dd:86:c7:56:da:c0:a7:04:34:1b:b2:36:
         c3:39:94:4c:82:32:ea:f9:57:b7:00:cb:ff:13:65:16:d2:9b:
         0b:f6:39:aa:53:35:70:71:a8:3f:4d:29:93:ac:00:f2:b5:52:
         ab:11:82:c4:c5:85:31:5e:71:86:6d:b1:da:c6:dc:7d:48:27:
         bb:11:97:32:09:79:54:e4:5d:fb:5a:1a:ae:88:c7:77:df:de:
         16:98:81:3c:ab:85:21:bb:91:17:58:a0:8b:b6:a2:bc:56:df:
         64:0c:47:53:c3:7a:71:64:0a:7c:8a:1c:b4:61:c3:29:9b:24:
         d1:2e:29:cc:8c:4e:fb:7a:36:a9:b8:f5:73:43:b5:8e:d0:1b:
         ee:d7:90:3f:07:c1:13:c2:a7:b3:31:ee:76:95:5e:1c:4d:72:
         70:9e:63:49:2f:29:8f:11:cd:0c:ec:89:47:fa:c7:f2:3c:97:
         8d:64:1e:c8:08:ce:a1:b8:8b:7b:4b:d2:1c:77:a8:dc:41:a8:
         c0:cb:88:28:4e:b6:cc:47:45:e6:6b:ec:37:6f:99:7d:a4:23:
         f7:05:13:45:d7:85:70:23:df:02:38:b0:2b:bb:d5:45:92:74:
         61:78:20:14:1d:d7:38:d6:4f:04:a7:ab:58:4f:7d:c8:df:8e:
         c3:d7:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:34:44 2025 by rpki-client