This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
File:                     aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json)
Hash identifier:          SRIm1mGF0zIuy+1ZlfZVL6KfKIPQUcD9joRrW8gbNwI=
Subject key identifier:   07:CD:89:A1:E5:D9:82:6E:19:1A:66:BA:A5:72:BC:12:9F:7E:1A:02
Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
Certificate issuer:       /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
Manifest number:          0187
Signing time:             Tue 23 Dec 2025 02:37:22 +0000
Manifest this update:     Tue 23 Dec 2025 02:37:22 +0000
Manifest next update:     Tue 30 Dec 2025 02:37:22 +0000
Files and hashes:         1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: CfBy2ZLNB0YzcYTLgeaJ9v8lJ/pf6HQwdtCJgjhYopo=)
                          2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: zthvVJ0xeL5J9gMyWu/Onbxvo/kp68K5vsS8CZ3Wqh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
        Validity
            Not Before: Dec 23 02:37:22 2025 GMT
            Not After : Dec 30 02:37:22 2025 GMT
        Subject: CN=694a0062-31e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:d4:95:12:0b:61:be:88:78:45:3c:73:20:
                    bd:a2:57:3a:db:1e:e1:47:5c:15:7a:9e:5b:f1:02:
                    bf:f0:ab:3c:7c:5d:eb:90:fa:58:85:f8:7e:21:9a:
                    39:00:a1:7a:3c:b7:55:02:e5:b7:0a:e2:dd:0e:14:
                    ff:ce:50:f1:6d:9e:e4:ef:be:df:48:cc:c1:a9:7e:
                    0c:93:14:f5:7c:3f:e8:35:89:e0:47:dd:d0:da:e6:
                    95:13:5f:ca:5e:01:f8:e7:a5:ab:dd:33:73:7d:f8:
                    f8:da:ad:31:8b:64:ab:0f:36:a2:b9:9d:63:df:11:
                    5b:49:34:13:05:a4:64:21:ec:8d:50:a4:67:6b:30:
                    ca:91:8e:d4:d4:19:dd:e0:dd:da:01:2b:ac:e8:79:
                    c2:61:13:33:fd:55:fd:08:86:26:73:02:f4:90:7b:
                    16:8d:29:3d:93:fb:b4:4c:15:38:a7:06:9a:73:0d:
                    6e:3c:7a:68:a7:ed:0d:9d:be:d3:1a:8a:fa:85:f1:
                    bf:9a:a9:53:c8:f3:10:19:bc:67:11:47:f0:13:02:
                    2b:8a:46:fc:8b:1a:69:f1:64:c2:54:7a:85:dc:da:
                    b7:0c:17:e6:d5:5f:b2:c0:e7:15:94:b4:eb:fb:a3:
                    36:4f:0f:a6:42:52:4e:53:14:33:1c:d0:93:7d:6f:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CD:89:A1:E5:D9:82:6E:19:1A:66:BA:A5:72:BC:12:9F:7E:1A:02
            X509v3 Authority Key Identifier:
                keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:ea:e5:90:f3:f9:38:03:65:b4:33:1c:66:ed:36:50:5d:
         6b:88:ce:4f:ac:e8:5d:ab:6d:26:95:0a:b8:8c:5b:0c:7d:4e:
         e1:a6:78:47:96:8a:26:b4:de:a8:0f:6c:30:ad:9d:72:67:fb:
         0a:c8:49:b8:27:a0:62:da:98:f9:19:0f:ff:44:01:3a:8f:79:
         f0:16:20:f9:d5:8f:06:00:0a:ec:a1:4a:36:d1:28:e6:28:30:
         55:0a:43:86:c0:12:c6:62:60:2e:41:46:fd:e6:83:e5:cc:fd:
         9f:6d:07:01:db:f4:c0:81:b4:ea:4c:a2:cf:ba:e0:c0:84:81:
         7b:28:af:17:e8:03:40:fe:bb:a1:5d:d7:de:76:b2:0a:1a:89:
         b2:73:c5:75:18:0f:71:73:af:3f:b2:6a:52:03:74:3a:52:51:
         4d:ea:01:69:a6:fd:97:1d:2f:03:8e:79:bf:81:15:ed:38:9f:
         8c:51:c3:86:11:ea:60:d4:a6:6f:9a:eb:d7:42:50:54:92:df:
         ae:6f:31:e6:93:a0:63:77:64:8f:48:8d:4c:02:76:ba:ad:bc:
         f3:ac:c2:05:99:0e:27:78:03:a4:f5:5f:b8:8d:f9:9f:7c:e9:
         16:5e:fa:ca:23:d9:06:88:30:33:16:e5:81:0b:c3:7c:16:dd:
         36:9f:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:41:40 2025 by rpki-client