This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
File:                     4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json)
Hash identifier:          zt0QwWeWpVuKB5zQRo4TkB/U2juwI6idBo765cuyiVE=
Subject key identifier:   81:9F:24:16:EE:F2:4E:DE:EE:64:2C:75:DE:A9:C3:9F:25:DB:82:BD
Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Certificate issuer:       /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
Manifest number:          56
Signing time:             Tue 23 Dec 2025 06:06:49 +0000
Manifest this update:     Tue 23 Dec 2025 06:06:49 +0000
Manifest next update:     Tue 30 Dec 2025 06:06:49 +0000
Files and hashes:         1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: NVlTrmMoPuLWo3cGrzCbWeza/pQI7oeAM/nDyE4pwQ0=)
                          2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: VJHNLTTmYE0OnrSaYRsFhyrLIddh+nJKNb/E2v8OcCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
                          rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
        Validity
            Not Before: Dec 23 06:06:49 2025 GMT
            Not After : Dec 30 06:06:49 2025 GMT
        Subject: CN=694a3179-c0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2c:25:b6:09:32:51:70:16:2d:4b:f1:43:26:
                    33:c5:c9:35:3a:a2:73:92:21:a6:a1:de:f5:00:04:
                    5f:2e:1b:65:ed:6a:95:a0:83:2f:eb:c0:2b:1c:2e:
                    97:c7:6c:ce:11:d4:4c:b5:7d:b7:2f:12:98:e3:1c:
                    9e:10:dd:f0:59:9a:79:17:8c:42:d0:24:f0:bf:ff:
                    0f:a5:eb:f7:80:78:00:77:a5:50:0a:64:4c:5f:03:
                    77:ce:f8:89:10:b8:f4:2d:bf:38:d8:ec:92:01:17:
                    39:2f:e6:5b:42:1a:83:83:3a:71:71:ec:bf:b9:cb:
                    e1:f3:39:a3:70:49:52:8f:60:8f:ab:81:f4:c8:24:
                    09:1e:49:45:e1:bc:d8:25:74:20:67:f4:32:14:9a:
                    0f:ed:43:b6:09:1b:09:fb:8e:a8:0b:36:88:33:8f:
                    a4:b7:c6:e3:cb:75:5b:19:60:3e:9d:cf:83:90:d5:
                    56:33:fc:01:4c:ec:5a:31:1f:8f:fd:c1:46:b1:7b:
                    38:79:0a:23:22:11:4a:b6:7c:64:ed:cb:c6:25:b4:
                    bb:ca:9c:28:67:da:18:5f:5d:be:0b:28:17:86:79:
                    1b:4d:ea:43:52:7f:0a:ed:4f:d3:a8:96:5d:80:5a:
                    95:d7:32:62:91:82:0d:86:ba:c9:5e:6a:a8:be:b5:
                    29:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9F:24:16:EE:F2:4E:DE:EE:64:2C:75:DE:A9:C3:9F:25:DB:82:BD
            X509v3 Authority Key Identifier:
                keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:89:a4:24:13:d6:3c:e7:08:9f:0e:15:a9:66:91:61:d6:
         59:83:1e:e6:93:4b:da:60:22:b5:70:bf:6a:06:f4:1a:ae:20:
         12:e0:53:31:24:14:47:f0:28:ad:7e:27:35:3b:8c:13:85:7b:
         4d:a5:2e:28:9d:9f:09:1b:f6:a8:48:cb:80:68:10:bc:27:d1:
         4d:b5:37:ad:b0:6e:8e:b1:37:14:f1:b5:b6:1a:6e:a4:f0:71:
         8a:0a:cd:54:d5:d7:c0:0e:9f:18:71:74:94:89:c1:db:42:21:
         ba:12:17:09:c8:1c:1a:93:91:0b:0e:6d:ca:b0:d3:23:e9:d6:
         da:61:b5:a3:2e:1f:5f:2e:d8:e1:d5:00:d0:d9:bc:c8:38:b2:
         41:91:b9:33:9b:3d:34:69:c3:33:1a:26:d8:53:90:90:70:42:
         ae:9c:3b:3d:a3:37:2f:74:f5:8c:c9:c7:e7:18:f3:68:13:53:
         1b:4d:77:0a:06:e8:99:c6:03:ff:5f:a3:02:9d:6f:e0:91:ee:
         96:36:85:19:92:bd:f3:76:95:20:e0:8f:e2:c5:85:91:41:82:
         10:f6:db:39:28:40:bf:9e:e0:3e:e2:c3:1e:79:34:b1:30:d0:
         09:fc:66:c1:f7:73:9f:82:82:ba:a5:8f:af:68:5b:e4:ab:16:
         66:c8:37:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:38 2025 by rpki-client