This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
File:                     V4hJyblKNVp2IKl0eXPSG77aP1M.mft (raw, json)
Hash identifier:          0RLqQjeQVCgyDbXOl47Kz8Kfo0ozAPONtm3C0eQacIk=
Subject key identifier:   27:E6:83:19:3F:8D:40:77:27:1E:42:54:AF:B0:26:FF:D4:17:4B:80
Authority key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
Certificate issuer:       /CN=A91410C5/serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
Manifest number:          57
Signing time:             Wed 03 Dec 2025 05:27:31 +0000
Manifest this update:     Wed 03 Dec 2025 05:27:30 +0000
Manifest next update:     Wed 10 Dec 2025 05:27:30 +0000
Files and hashes:         1: V4hJyblKNVp2IKl0eXPSG77aP1M.crl (hash: jtec/6v8+B9bn7Olcykf1SU2VR7hTB6Q4h3+KMpMyXc=)
                          2: C7142BC6654E11F0903B1F31C4F9AE02.roa (hash: N2WAIBH8ZMkrMk9CktT8AtzaLV74cC0YpuQq3dTGOmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl
                          rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
        Validity
            Not Before: Dec  3 05:27:30 2025 GMT
            Not After : Dec 10 05:27:30 2025 GMT
        Subject: CN=692fca42-f6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:55:6a:39:c2:c2:3e:bf:1c:b7:52:fd:79:
                    e3:66:af:9f:58:bc:84:63:0a:01:cc:de:2d:67:b8:
                    12:97:dc:ec:7d:65:ac:66:f9:4d:31:fe:68:04:8b:
                    c4:1b:78:59:1a:eb:f0:a5:39:37:94:03:81:fb:01:
                    41:98:41:2b:16:38:56:23:55:84:3e:a2:85:11:1d:
                    2e:59:fa:50:28:e0:b4:de:6c:0b:36:04:e8:02:3a:
                    d0:ac:29:c5:50:3e:34:e2:22:96:42:8d:db:74:6a:
                    39:73:c5:ce:66:0e:2a:a4:14:fa:f0:09:78:33:8b:
                    12:c1:03:4a:f4:70:c7:54:60:2a:2c:b2:eb:17:b4:
                    82:44:85:41:de:0f:b0:fb:ac:db:79:5e:62:99:5b:
                    ca:6d:e9:44:e7:88:ec:97:5b:e5:50:dd:af:52:f6:
                    cc:62:72:92:52:72:2a:7e:b0:e9:42:f6:d9:af:73:
                    a8:a5:6a:38:7c:66:f9:fa:f5:26:7c:6d:83:80:60:
                    ea:e4:ba:1e:bb:d9:fd:9e:21:4f:c4:42:34:0f:ad:
                    71:bf:a4:e3:5f:e5:03:25:a9:72:b4:c6:46:3d:45:
                    31:c2:1d:cb:dc:ab:4f:00:ba:b4:bb:2c:e4:a7:3f:
                    13:8b:4a:f3:c5:74:33:66:26:af:8b:38:13:a0:7d:
                    a8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E6:83:19:3F:8D:40:77:27:1E:42:54:AF:B0:26:FF:D4:17:4B:80
            X509v3 Authority Key Identifier:
                keyid:57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f6:dd:ab:45:4b:08:8e:bd:ec:01:64:ed:b8:60:ef:41:d4:
         5e:71:8f:7b:90:9e:5c:47:bd:5d:b0:39:01:72:75:6e:d0:d2:
         3a:83:89:e3:68:84:a6:7e:b2:7c:14:46:d5:ab:0b:30:f3:5e:
         e6:6f:3c:4e:54:3b:89:ae:b6:a1:cd:66:3d:0a:cc:be:a6:48:
         3d:53:95:a8:1c:2c:08:ac:04:c8:f7:1d:37:71:0d:8e:a7:02:
         a3:c3:6d:b7:dc:40:3a:2f:af:d4:22:76:71:e6:44:b6:63:62:
         4c:42:fb:57:49:28:43:29:33:ca:d8:2d:71:a4:96:77:5d:a9:
         51:75:6d:04:08:63:a7:40:28:0c:94:5b:fe:07:81:27:d0:5c:
         c0:37:e0:eb:c1:0e:7b:80:fe:3d:80:57:15:a3:b5:10:98:10:
         f4:f7:6b:52:f7:a6:20:c9:3e:b2:3d:0a:af:32:81:e7:a5:7b:
         68:0d:70:e0:c7:e2:0c:98:65:4f:07:2e:54:d7:6c:9f:bc:10:
         6a:c7:8c:97:3b:f5:03:4e:72:79:5a:47:37:1c:08:60:97:59:
         cd:10:bf:f2:7b:fc:dc:45:cc:9e:23:d1:91:1e:f1:de:94:98:
         58:bb:6f:b0:e1:01:0f:00:bc:ae:bf:cf:c4:46:75:2f:67:b5:
         2a:53:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:26 2025 by rpki-client