This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
File:                     4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json)
Hash identifier:          lJQnCQVhoR2BMWa3hc2w49ceynpfcLc3TfHxRwZaNzQ=
Subject key identifier:   7A:5B:5C:7C:C7:AC:22:95:21:B2:41:9A:6B:F3:36:6C:9F:3E:E7:75
Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
Certificate issuer:       /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
Manifest number:          01E2
Signing time:             Tue 23 Dec 2025 01:41:53 +0000
Manifest this update:     Tue 23 Dec 2025 01:41:52 +0000
Manifest next update:     Tue 30 Dec 2025 01:41:52 +0000
Files and hashes:         1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: oTVeuqGGEKTLulwtF2koDj0T/7vusXd3huWU5a+AXF4=)
                          2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: g/bQAw9THkYcNZaMLuiJQ2Zt7avDBvnfO+P6mLE3afM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
                          rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
        Validity
            Not Before: Dec 23 01:41:52 2025 GMT
            Not After : Dec 30 01:41:52 2025 GMT
        Subject: CN=6949f361-c7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:b0:24:85:93:40:01:de:c1:34:ad:5f:66:
                    26:06:c5:f8:5b:4f:67:d1:ef:d3:86:6c:82:7f:8c:
                    75:ea:58:a3:b3:17:3b:5a:43:cd:b6:d4:69:a5:05:
                    f5:69:e0:23:72:ed:44:fb:06:6a:e6:d2:4f:1f:65:
                    98:09:53:de:3d:9a:ef:74:79:ea:71:fd:6e:fd:82:
                    45:c6:f0:3c:be:0c:04:57:ca:58:6c:26:9b:fd:fe:
                    e9:58:1f:e8:87:a5:62:d9:af:05:02:ae:d1:dc:c8:
                    fc:e6:70:e8:6c:79:a4:4e:f4:ce:cd:ac:81:cf:cf:
                    47:55:54:be:d3:29:48:b6:90:c9:a4:16:bd:04:13:
                    a6:9c:b2:44:e2:9f:76:49:ff:2e:48:b3:88:1e:0b:
                    1b:f6:e4:c5:33:a2:3c:79:f1:05:9d:a4:bd:0d:04:
                    54:b0:3e:b0:f1:c1:d4:d7:87:e5:09:7f:83:3f:a1:
                    1a:24:94:d9:3f:20:ea:7b:ec:9d:1f:37:9f:7b:8b:
                    53:9f:6f:9e:9c:2d:2d:d4:7f:6b:b8:9d:1a:ef:6f:
                    5f:29:16:7a:7d:5f:13:ea:20:4b:ec:e1:87:17:7c:
                    a7:0c:0a:c5:a4:27:02:17:54:2c:5b:af:2c:f6:a3:
                    25:48:76:90:bc:dc:99:09:6d:c2:49:e5:5d:8b:c0:
                    40:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5B:5C:7C:C7:AC:22:95:21:B2:41:9A:6B:F3:36:6C:9F:3E:E7:75
            X509v3 Authority Key Identifier:
                keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:59:c2:d3:78:8c:52:09:40:72:7b:42:db:b9:d4:64:ea:22:
         27:5e:d1:ee:7b:43:ae:ba:70:9b:78:c6:a7:a5:3c:05:5e:ba:
         dd:da:07:5a:64:a3:d3:78:7b:09:12:46:5c:e2:d7:62:68:74:
         a7:e9:d1:e4:43:a7:84:73:1b:17:b7:d8:10:67:23:46:a7:46:
         c4:d8:19:3c:54:59:6b:f1:da:61:92:a7:50:22:88:91:45:5d:
         6c:5d:11:5d:b0:8e:98:8a:05:49:4f:e8:a1:19:27:a4:c4:73:
         39:e5:17:8b:35:2c:cc:0e:9d:98:b6:ea:1d:8a:b9:e7:3b:07:
         1d:31:26:01:84:06:e4:a6:9b:2a:10:8c:22:c2:08:52:c3:2a:
         4e:fa:3b:0a:90:e4:8f:4e:7d:9c:10:3d:ad:73:47:fc:6b:89:
         3c:fc:c9:54:3d:b9:e2:c7:61:2f:b6:2a:60:19:56:e3:19:e1:
         af:b0:d3:06:05:a7:1b:97:2d:b8:88:86:56:d6:49:af:18:fb:
         db:c8:4d:31:56:a1:04:ef:e6:35:97:73:b2:45:2a:1a:c9:57:
         c2:49:fb:e0:c8:e5:95:be:74:b5:f1:86:38:1a:a8:7b:d0:ff:
         f5:bd:37:ef:61:f4:a1:46:e0:0b:15:91:3c:92:14:d7:8b:17:
         47:17:41:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjczQTkxMTAvBgNVBAUTKEUwQjQ0NThCOUFCRDMyMDM1MTczNTNFQzgwQkUzMTBD
MzY1NTREQUUwHhcNMjUxMjIzMDE0MTUyWhcNMjUxMjMwMDE0MTUyWjAYMRYwFAYD
VQQDDA02OTQ5ZjM2MS1jN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA19OwJIWTQAHewTStX2YmBsX4W09n0e/ThmyCf4x16lijsxc7WkPNttRppQX1
aeAjcu1E+wZq5tJPH2WYCVPePZrvdHnqcf1u/YJFxvA8vgwEV8pYbCab/f7pWB/o
h6Vi2a8FAq7R3Mj85nDobHmkTvTOzayBz89HVVS+0ylItpDJpBa9BBOmnLJE4p92
Sf8uSLOIHgsb9uTFM6I8efEFnaS9DQRUsD6w8cHU14flCX+DP6EaJJTZPyDqe+yd
Hzefe4tTn2+enC0t1H9ruJ0a729fKRZ6fV8T6iBL7OGHF3ynDArFpCcCF1QsW68s
9qMlSHaQvNyZCW3CSeVdi8BA5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpbXHzH
rCKVIbJBmmvzNmyfPud1MB8GA1UdIwQYMBaAFOC0RYuavTIDUXNT7IC+MQw2VU2u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNBOS9EOEVGMTNDMkZB
Q0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1nTlJjMVBzZ0w0eEREWlZU
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRMUkZpNXE5TWdOUmMxUHNnTDR4RERaVlRhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzNBOS9EOEVGMTNDMkZBQ0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1n
TlJjMVBzZ0w0eEREWlZUYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDPWcLTeIxSCUBye0LbudRk6iInXtHue0OuunCbeManpTwFXrrd2gda
ZKPTeHsJEkZc4tdiaHSn6dHkQ6eEcxsXt9gQZyNGp0bE2Bk8VFlr8dphkqdQIoiR
RV1sXRFdsI6YigVJT+ihGSekxHM55ReLNSzMDp2YtuodirnnOwcdMSYBhAbkppsq
EIwiwghSwypO+jsKkOSPTn2cED2tc0f8a4k8/MlUPbnix2EvtipgGVbjGeGvsNMG
Bacbly24iIZW1kmvGPvbyE0xVqEE7+Y1l3OyRSoayVfCSfvgyOWVvnS18YY4Gqh7
0P/1vTfvYfShRuALFZE8khTXixdHF0EW
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:32 2025 by rpki-client