This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
File:                     nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json)
Hash identifier:          288hHLzzLZpwcm3JZiUEDZyc6S8/aPDBxltu7mhkifA=
Subject key identifier:   91:55:44:A9:0C:7D:F3:75:29:6A:9E:F5:E2:E0:98:0F:C8:01:7E:A8
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Certificate issuer:       /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
Manifest number:          014B
Signing time:             Fri 05 Dec 2025 02:41:03 +0000
Manifest this update:     Fri 05 Dec 2025 02:41:03 +0000
Manifest next update:     Fri 12 Dec 2025 02:41:03 +0000
Files and hashes:         1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: V9XjIPmW7evF+09Yo37j9HrBUXq7hHHGLp/P/zeEGC8=)
                          2: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (hash: CmgxaioZaqBmTAKdrvrQvMBUPzNHQbmNsCbdVyQjo74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
                          rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
        Validity
            Not Before: Dec  5 02:41:03 2025 GMT
            Not After : Dec 12 02:41:03 2025 GMT
        Subject: CN=6932463f-d8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:30:0f:0e:30:72:07:6e:24:48:50:8f:66:c8:
                    ee:d1:f1:98:46:99:c7:2e:d1:0e:49:93:24:02:b0:
                    a2:fa:0d:a7:85:0e:24:dd:80:00:bc:60:94:66:9d:
                    03:ae:00:a0:2e:49:ec:09:95:b6:bb:29:94:2a:94:
                    cc:fb:de:87:61:f5:e2:27:04:2f:df:59:54:35:88:
                    9a:82:43:b2:9e:a6:8d:a4:e3:43:07:9b:c5:11:fa:
                    ab:8b:05:e2:b9:a6:51:8d:5a:c5:49:7d:bf:03:dc:
                    fa:2d:ff:98:21:7b:c2:e4:03:bc:28:53:46:3a:54:
                    09:09:3b:34:bd:10:2b:96:1b:03:4f:90:8a:62:d0:
                    1d:eb:89:27:55:a6:28:a1:e7:9f:8e:c2:10:96:91:
                    ca:c5:b7:95:86:f7:91:1c:44:1a:06:f0:2c:94:c2:
                    c5:50:ce:4b:ba:52:f9:17:ff:54:a3:76:0c:c9:2e:
                    2f:9f:8e:97:26:1b:6d:06:62:1c:93:4c:4a:f6:19:
                    5f:c8:3f:ce:96:e4:70:dd:0e:bc:2e:c7:61:c6:3f:
                    c2:15:27:07:8f:ba:a7:e7:30:5a:c2:d6:fc:7a:09:
                    59:ee:be:d1:0a:94:51:a1:8e:13:ad:1b:29:e1:e4:
                    94:19:5f:a0:f6:78:5a:95:c5:9f:37:2e:3a:be:f8:
                    4d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:55:44:A9:0C:7D:F3:75:29:6A:9E:F5:E2:E0:98:0F:C8:01:7E:A8
            X509v3 Authority Key Identifier:
                keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8b:ac:07:49:77:1f:41:7d:2d:76:d9:85:78:0e:6a:2d:2d:
         95:e5:0b:62:1a:75:4c:bf:51:46:11:51:18:07:85:ce:b3:0a:
         1f:6e:32:ac:cc:0f:3d:da:ea:6e:bd:9c:c8:42:22:a4:ea:d7:
         04:5e:95:28:68:0b:03:ca:ac:79:e1:d7:6e:42:73:ab:e1:11:
         59:d1:1f:f6:d9:05:c1:51:13:9b:c3:74:c7:07:cf:0b:7e:55:
         54:37:99:e9:db:b4:a4:15:e9:18:c7:88:00:85:53:c7:25:24:
         e9:74:10:bd:7e:4e:16:53:20:58:40:92:ce:09:12:be:19:b3:
         bf:34:a5:3c:7e:00:a3:ac:26:c8:a2:97:ee:ef:bc:10:42:8f:
         a0:9a:01:8d:aa:fc:34:bd:c1:3d:92:f4:c9:27:31:fd:78:65:
         1b:e4:6f:52:a2:ef:8f:22:21:b6:d0:1c:1d:4c:df:ba:fd:16:
         4c:de:1c:8f:e4:37:99:fd:84:18:25:0b:88:fa:1d:08:fe:20:
         e2:51:7f:dc:c7:1b:11:79:21:29:6c:83:71:6f:14:58:49:48:
         44:d2:40:38:fa:e9:e4:08:6d:bb:79:4c:23:7b:30:1f:68:fe:
         27:cd:05:ab:06:c7:60:fd:8c:6a:13:fa:64:f2:31:be:54:2b:
         f5:8d:42:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:40:22 2025 by rpki-client