This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File:                     T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier:          1qmlG8SJOuyK81O7CDPOsMnuFTLdz18TOU3YQcOGGv0=
Subject key identifier:   81:CB:97:02:60:D7:A1:4F:30:9E:97:14:3F:E5:09:C1:6F:2B:1C:08
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer:       /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number:          0164
Signing time:             Wed 03 Dec 2025 02:28:33 +0000
Manifest this update:     Wed 03 Dec 2025 02:28:33 +0000
Manifest next update:     Wed 10 Dec 2025 02:28:33 +0000
Files and hashes:         1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: ReNuuyFPxg11HU0xRvmFkemcoSzefqwkKBIh4+mbfBs=)
                          2: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: yeuOidXSk24zKJ3fs5QRV6AIbEvRNYhviKgrMlbwKF0=)
                          3: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: RAjyk/fK8qUwEx1/AGy4sz8Z8uX3xfNXLzvmKTaNnbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 02:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
        Validity
            Not Before: Dec  3 02:28:33 2025 GMT
            Not After : Dec 10 02:28:33 2025 GMT
        Subject: CN=692fa051-6d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:b5:53:e0:91:ac:c6:6e:95:8f:02:8f:0f:
                    06:c0:32:5a:c0:fd:8e:7d:4a:50:db:b1:41:e9:e4:
                    8d:b9:aa:d6:81:71:eb:3e:6d:57:d8:13:27:22:94:
                    6a:6d:45:d5:95:dc:e6:da:6a:ce:0f:f7:21:f0:de:
                    27:da:16:b2:90:be:2b:36:aa:ed:e1:a3:c2:2e:c4:
                    81:7f:00:b9:2b:b4:c6:39:38:9b:f8:80:91:69:b0:
                    56:9b:d9:86:2d:2b:7a:bb:35:ac:e1:6e:b3:96:bf:
                    a0:13:7f:ac:d3:cb:a3:71:12:3f:01:47:f9:7c:c4:
                    52:9b:e6:6e:28:42:06:fe:34:dc:df:09:a4:36:1b:
                    a5:f0:23:f3:56:bd:41:94:90:b6:b1:e4:e3:6a:d3:
                    dc:7c:8d:2e:80:22:3f:6b:bf:55:94:85:a6:a8:de:
                    67:0d:84:73:c7:32:9b:27:9e:2e:e2:88:73:98:67:
                    d3:e3:6a:42:44:36:d8:af:62:16:83:db:51:a8:cc:
                    8d:87:84:96:4f:b1:6f:04:28:28:00:5a:a3:0f:c1:
                    e9:b2:2f:38:77:40:87:8c:c7:ef:bb:dc:0e:7d:2f:
                    73:b4:23:4a:e7:8c:2a:94:a2:47:4f:dc:fc:3a:65:
                    7b:fa:70:26:3e:4c:5f:7f:c6:e3:3b:ae:f1:4b:ed:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CB:97:02:60:D7:A1:4F:30:9E:97:14:3F:E5:09:C1:6F:2B:1C:08
            X509v3 Authority Key Identifier:
                keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a3:0c:4e:61:e8:ae:11:c8:e5:e3:51:cc:bd:78:a3:71:f3:
         f9:04:32:07:21:3b:40:0a:cc:84:83:57:43:ae:f8:a4:9b:12:
         c5:b2:b5:72:cb:db:49:ce:7d:7b:a7:40:9d:7a:77:90:77:1c:
         3b:e6:3e:5a:a2:3c:9d:e5:14:3f:78:d1:35:fc:09:00:d9:b8:
         d6:85:83:1e:f4:52:48:f3:ab:57:ba:f0:8a:58:91:4c:23:19:
         d2:6f:95:65:ed:9d:f1:ce:81:34:a5:a1:90:1e:4a:37:e4:0a:
         e5:95:5d:1b:17:a9:86:7d:78:2c:a5:ce:27:aa:aa:12:b4:6d:
         bb:dc:5f:ac:95:03:22:12:19:b2:90:20:5d:41:0d:be:b4:de:
         32:aa:72:c3:f3:9e:9b:8f:8e:f2:6d:95:7e:6f:d2:01:cd:2e:
         2d:dc:96:1e:6a:02:bf:02:bc:af:fc:23:77:96:53:94:9f:2d:
         6c:3d:b4:14:c2:3c:96:8f:2c:b3:cb:0c:47:30:1b:b7:a9:c1:
         0a:86:4b:de:7d:df:63:57:49:22:19:de:44:c9:d8:e1:fc:64:
         f5:f9:d0:f4:a0:8b:22:f6:0f:e0:88:77:f3:1a:f9:c7:cd:b0:
         68:2b:c2:1f:94:b6:be:68:4c:27:b3:71:c5:e4:7d:61:b4:d5:
         84:7b:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:55 2025 by rpki-client