This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
File:                     nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft (raw, json)
Hash identifier:          TWI4ulMenXj12zhLIng4gmWqZJb2KOfEVC1oh3Zz1Dc=
Subject key identifier:   C9:60:95:ED:5E:C3:F3:A5:E6:68:AB:1F:91:6B:FD:D3:E7:3C:4C:C0
Authority key identifier: 9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5
Certificate issuer:       /CN=A91DE8B4/serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
Certificate serial:       083F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
Manifest number:          0839
Signing time:             Thu 04 Dec 2025 19:51:52 +0000
Manifest this update:     Thu 04 Dec 2025 19:51:52 +0000
Manifest next update:     Thu 11 Dec 2025 19:51:52 +0000
Files and hashes:         1: nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl (hash: 3+6I2SiE9x/EdjBho0ZApTV+JDNfv8dUBy/aBIxPnh8=)
                          2: 149009E6EE8111EAABC5C05CC4F9AE02.roa (hash: ZuNx07Xi3l7zK6QE18qPa3KdYreh+VNjcsKw+zEu9qY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl
                          rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111 (0x83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE8B4, serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
        Validity
            Not Before: Dec  4 19:51:52 2025 GMT
            Not After : Dec 11 19:51:52 2025 GMT
        Subject: CN=6931e658-18cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:6c:42:7f:c3:ac:46:c1:1a:82:c7:fc:4f:
                    36:07:7d:81:a7:bf:fe:23:2d:4a:87:35:ae:94:f7:
                    98:c2:37:ba:07:37:24:b4:c8:22:4c:d8:f4:91:4c:
                    f9:fd:31:78:71:c7:56:99:55:4a:a8:af:c3:81:cf:
                    90:57:73:fb:5e:63:0f:23:df:b1:57:0d:2e:a8:02:
                    ea:74:1f:75:e1:fe:1b:6c:66:0a:a5:82:ec:12:5c:
                    ab:1b:90:15:6f:32:fd:29:0d:d1:44:e1:6d:62:bb:
                    c0:60:61:b8:11:9f:70:bf:70:a6:f1:ec:bf:b1:19:
                    f2:f0:b5:ba:1f:8d:18:ac:0b:d6:cd:fe:a0:cb:0a:
                    da:0b:33:10:fa:ee:95:13:20:95:b8:62:45:92:cd:
                    73:9b:68:b2:fc:58:74:e9:ad:4c:d3:2d:a4:96:c6:
                    2b:ba:c1:e2:4e:45:2a:a4:eb:7f:d7:2e:aa:e5:36:
                    ea:13:cb:2a:1c:bd:cd:ad:b8:b4:f0:2a:12:eb:21:
                    f8:6f:b6:8a:44:06:55:56:46:b8:7b:cc:a4:80:1e:
                    b1:bc:55:b5:18:fb:88:ed:92:d0:1e:c6:7e:45:29:
                    c4:4b:ad:83:fb:ee:e8:a8:f2:07:b6:14:f9:87:05:
                    22:d6:35:5d:3b:1b:7b:73:92:f9:e1:3d:29:fa:dd:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:60:95:ED:5E:C3:F3:A5:E6:68:AB:1F:91:6B:FD:D3:E7:3C:4C:C0
            X509v3 Authority Key Identifier:
                keyid:9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:24:df:a1:64:51:ab:c6:3f:74:aa:4f:83:37:35:8c:b2:b0:
         51:84:9c:10:79:7d:14:85:b4:38:c6:9e:a4:8f:70:cb:02:30:
         41:62:b9:83:d0:a0:4f:5d:33:e6:1e:70:1b:01:fb:56:92:a7:
         ae:3f:fb:60:92:25:e8:6c:71:dd:0c:95:70:ce:5e:0a:1a:f7:
         4e:d7:c1:ca:4e:d4:2f:fb:bc:fa:8c:cd:ff:60:44:54:0e:05:
         05:1b:30:a5:0e:09:a0:b4:95:e1:20:79:f6:a1:df:22:ad:ef:
         f9:b4:c1:d5:e6:ca:fa:ef:13:9b:c4:36:90:d0:68:98:94:e9:
         a8:ba:99:58:3c:06:e6:13:03:e0:59:07:a9:a3:fc:e0:13:58:
         6b:7a:52:57:3d:70:78:f4:a3:55:63:16:e2:bb:53:b6:9e:23:
         80:4b:2c:11:54:f9:f7:3f:ac:6c:1d:44:94:fa:a9:59:d9:8a:
         fb:d5:e6:3e:fc:d9:55:52:81:60:99:3a:9b:fa:b0:3e:5f:ea:
         d8:dc:03:f6:61:6d:fc:53:8b:f5:18:f9:ac:0c:5e:8d:de:17:
         96:d4:78:ec:54:47:cc:06:63:ea:1b:08:5b:d1:5c:b6:be:45:
         9e:bc:ea:8b:c6:e8:53:b9:8f:b7:3e:63:e0:2d:97:93:18:03:
         58:4b:56:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:46 2025 by rpki-client