This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
File:                     NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json)
Hash identifier:          pM/oQ6+IfvfU4So+CLLZ/JhMiOQvMv9xw1gCRB/0yjI=
Subject key identifier:   54:D6:36:E1:60:DC:DE:4A:42:1D:F5:FE:27:7B:D4:60:1C:E4:31:FB
Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
Certificate issuer:       /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
Manifest number:          01BF
Signing time:             Fri 05 Dec 2025 01:18:06 +0000
Manifest this update:     Fri 05 Dec 2025 01:18:06 +0000
Manifest next update:     Fri 12 Dec 2025 01:18:06 +0000
Files and hashes:         1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: mdWPWiq/C/UlAdbQl8hH5fF3kDdXo2DPrXDqnR6BN78=)
                          2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: 8GoJZpCZ9P4ckdBt/ZtHhmXHWFZw1X3kEDMJv2TH3VQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
                          rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
        Validity
            Not Before: Dec  5 01:18:06 2025 GMT
            Not After : Dec 12 01:18:06 2025 GMT
        Subject: CN=693232ce-221e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:53:5f:40:1e:67:cb:82:0b:54:94:72:4d:
                    a1:e6:48:dc:9a:18:1e:e4:b8:e9:36:23:61:9c:7e:
                    e6:fe:ef:82:60:79:e6:09:a6:69:6a:61:73:f5:65:
                    41:2d:50:b6:47:ef:b1:8a:c2:02:22:62:b6:21:fd:
                    e7:4b:b3:49:ed:03:c1:2a:1c:13:14:9e:bb:ff:84:
                    09:14:91:1e:f1:a5:ce:3a:ab:09:22:ac:b5:a0:e8:
                    f2:13:a9:53:fe:1d:21:33:3d:cc:82:9c:c8:d0:1c:
                    b8:90:25:56:25:8d:e8:57:e5:9d:84:af:85:ed:64:
                    83:32:04:86:f4:b7:40:f3:a8:67:3e:30:a1:4b:68:
                    ec:da:9a:26:59:11:33:30:ae:43:c0:6e:fd:fa:87:
                    6f:08:f1:48:0e:3b:71:ea:90:9e:f2:de:c6:2b:04:
                    08:83:8f:a5:c4:79:f4:38:81:7e:ba:fd:9a:46:21:
                    d8:38:7c:0b:6c:2c:00:55:1a:65:43:04:34:fb:57:
                    6c:65:24:5e:86:e5:60:c6:a5:32:d5:1f:3e:93:20:
                    d0:cf:ee:54:e2:3d:d2:2f:76:54:ca:c4:61:db:22:
                    ed:1d:6b:86:0d:99:50:f7:d5:bc:48:ca:9c:cd:97:
                    6e:ef:ee:aa:81:3d:30:e5:46:84:d4:31:3d:6a:be:
                    38:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D6:36:E1:60:DC:DE:4A:42:1D:F5:FE:27:7B:D4:60:1C:E4:31:FB
            X509v3 Authority Key Identifier:
                keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:87:65:2f:76:71:64:47:5f:a9:13:d7:a2:7a:df:df:cc:32:
         15:13:a4:1f:e1:36:92:36:86:af:40:fe:f9:60:ef:8c:f8:d3:
         72:80:68:a6:0e:41:bd:47:9c:63:da:96:6a:30:7d:da:fb:d9:
         f9:50:71:88:21:cb:59:6d:b4:8c:e5:98:69:04:54:a9:f7:ac:
         00:e9:c0:bf:01:28:90:4a:f0:eb:bd:fd:f8:2e:1e:23:07:23:
         a1:40:12:06:6b:08:24:b5:a4:7c:f7:01:6d:4f:92:b6:68:55:
         32:75:d4:c6:c2:ce:14:5c:26:7b:e6:d2:e5:af:33:76:ef:29:
         20:25:c2:49:1a:f1:c8:30:73:a3:a9:3d:ec:98:36:1f:7b:73:
         b1:71:3a:13:a0:74:53:11:41:eb:39:c2:a9:3d:78:be:81:ef:
         7f:69:02:b7:5e:f4:28:b9:81:b2:7d:36:ad:f4:1b:19:c3:6f:
         ef:7f:ff:9a:c8:ba:7a:8f:26:dd:7c:95:38:fa:95:29:9e:fb:
         16:89:4b:9d:bc:50:30:ab:65:93:70:3e:40:80:9e:07:15:ba:
         e7:36:1d:5a:75:44:5d:67:7a:08:3a:1a:6a:13:1b:30:6a:7f:
         b6:00:8c:81:34:0f:4b:ce:9b:c5:70:0f:cf:fe:94:66:3b:e4:
         be:eb:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:13 2025 by rpki-client