This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File:                     4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier:          gKRM/fLZaYx5JL30nTQXm2ySUZZ/s9cTlyvKUI3itp8=
Subject key identifier:   A0:C7:CA:3B:69:F8:FA:38:34:BE:32:59:4B:E4:DE:9C:B8:FD:F7:82
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer:       /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial:       1394
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number:          1306
Signing time:             Mon 22 Dec 2025 16:46:28 +0000
Manifest this update:     Mon 22 Dec 2025 16:46:27 +0000
Manifest next update:     Mon 29 Dec 2025 16:46:27 +0000
Files and hashes:         1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: N/cdsLqaRw1fSxYSX4svYDBI0AMDpIseUxlVvHV/nNg=)
                          2: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: r6ZmJmXo5KHVG/yLQVWI5msuFaPg0Y7qHUR8OuUmDmQ=)
                          3: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: u3hqsVF2IxROae06RgQqau4TwcmQ2hfIoS0ycS2ZYYk=)
                          4: 0038D872072E11EB8914E540C4F9AE02.roa (hash: Sm2BWR/x62V1ChSVqLl9qtUU2JtttSVmIcQ57lBV/yg=)
                          5: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: xso6zKvBbi3wM6Wy7sgUcNmQLyVakEEliXt2454vT2g=)
                          6: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: mBWzVj8R0JSgpTd2/lwo26j0nuTovGbgz3rVwBfIjuw=)
                          7: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: dSHlc69pRBGdn38cVlmBltnXpffbwXc9Xns6KXz/aJM=)
                          8: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: J5rudUriqxnG3Kj9XK1/m/G4HKNPvqCv13zNix3h72Y=)
                          9: AD7B2798CDCA11F096B9035EC4F9AE02.roa (hash: 9AZNpWMBQO5+BmyYbBmo4faP647OYT7C6DNutUy5NOo=)
                          10: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GtCwmWc8gA6Yj8DbZ5w0Aat1zBOR2vnVTBDt8/HEVGA=)
                          11: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: FblJx4AhcAktvj2/dwTjDbd3uRT5iMvilMffwyS9Rtk=)
                          12: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: 4ijPBPOAaTXJb677dP3lcdQkWKRIh34QpbisACynIlc=)
                          13: 6A5222E2B8CA11F0AEF0BA3CC4F9AE02.roa (hash: 6+gB7mL+bEvy7oGoW94iW1fZ9WL9S07it/mKgQAz+c0=)
                          14: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 732T9uPwwK9ZGQYizjkN4dg8xKfMSmsajV4WXneqdWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5012 (0x1394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
        Validity
            Not Before: Dec 22 16:46:27 2025 GMT
            Not After : Dec 29 16:46:27 2025 GMT
        Subject: CN=694975e4-74f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:9d:db:a6:98:9a:52:8b:6c:2b:d4:7c:d4:
                    54:e4:60:ad:d1:54:8b:35:e0:92:7a:15:ad:09:24:
                    35:c0:ee:88:ac:fd:16:17:3b:7f:ba:3c:0c:0c:35:
                    ca:b6:22:af:c6:99:b4:be:3f:9a:af:c3:ec:73:b9:
                    34:6a:bf:04:1d:50:e7:15:7d:b4:f8:ad:c0:98:72:
                    0c:b1:ed:b6:f9:69:06:78:37:ab:a0:f8:a7:59:7d:
                    e4:50:1c:99:be:b7:01:a4:1d:52:ab:71:fc:cd:bb:
                    76:0d:8c:63:03:a2:8b:73:9b:b1:2d:1f:94:78:08:
                    ec:ef:4a:62:e1:7c:10:71:52:26:4e:7c:23:ab:75:
                    d3:dc:7e:6e:9d:63:aa:eb:0d:ea:19:e2:54:94:b4:
                    ee:64:84:56:23:cb:fb:5f:21:8c:1f:9a:5b:79:1f:
                    41:99:b9:44:83:f1:d9:fa:b7:ab:1d:7d:e6:d5:ba:
                    28:ee:ab:78:aa:cd:e8:6b:09:8c:41:b6:1b:1f:10:
                    fd:80:f8:38:66:e5:50:38:8f:9d:ce:89:62:03:31:
                    76:45:2e:ff:d7:52:cb:7d:9a:4d:fd:76:1b:07:8c:
                    3d:ea:38:26:34:c6:66:89:e6:99:bd:01:25:1d:4e:
                    0f:30:5b:cd:65:cc:64:38:6b:61:d1:14:ad:b9:0e:
                    b0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C7:CA:3B:69:F8:FA:38:34:BE:32:59:4B:E4:DE:9C:B8:FD:F7:82
            X509v3 Authority Key Identifier:
                keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:81:f3:56:05:87:ec:7a:1b:09:60:07:cd:fa:c6:95:ef:
         96:83:be:ba:05:e0:2e:cd:4a:7d:6d:62:c9:4d:1d:6d:83:d8:
         5e:31:d9:51:1e:97:b7:f3:e0:85:b4:d3:f6:15:99:10:41:81:
         7d:67:4a:cd:8b:b2:32:76:a1:7d:6e:53:55:3a:64:fe:c0:93:
         7d:6b:46:27:f6:95:f4:dc:82:9e:c7:e4:61:af:8d:95:e3:7b:
         51:1e:00:1f:e9:75:79:ca:4d:00:ff:fd:a4:09:2c:34:6b:9b:
         af:c8:76:56:ba:58:77:c0:84:02:1a:a9:5c:12:77:14:2b:6c:
         7b:ef:2b:cf:e8:05:a0:f9:3e:64:44:7e:36:a1:6f:07:53:5b:
         dc:47:1b:d2:cd:20:8f:bc:76:40:32:cf:e1:27:30:64:69:ce:
         24:d5:25:b4:c5:c2:5d:f4:97:22:d6:46:b4:b7:2f:6c:9b:40:
         8f:da:ea:c9:5b:f3:eb:f9:7a:5a:c2:3a:81:c0:05:8b:b4:54:
         a9:ad:eb:03:6a:a1:a6:ba:42:f6:16:33:bc:a3:4f:8a:38:57:
         3f:08:aa:2f:74:d4:74:17:52:a7:48:57:be:b6:78:6f:65:7a:
         eb:7f:6e:e4:91:b9:d3:bd:46:f9:9c:d0:a1:ca:39:bc:22:c1:
         45:6f:43:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:20:05 2025 by rpki-client