This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
File:                     f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json)
Hash identifier:          1C4fOZ8/EySMjpcZEE87eQELxm/LsSdQF0liyfW5pBE=
Subject key identifier:   29:74:92:E4:92:44:12:70:F6:EC:2A:63:B8:38:C6:67:39:31:A3:A9
Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53
Certificate issuer:       /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
Manifest number:          F2
Signing time:             Tue 23 Dec 2025 04:20:57 +0000
Manifest this update:     Tue 23 Dec 2025 04:20:57 +0000
Manifest next update:     Tue 30 Dec 2025 04:20:57 +0000
Files and hashes:         1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: e4eGxp4u7R27CnZQz93WMC1rTGVth4z9COy85xWCvhE=)
                          2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: AW0AjmB1MBpf81Bbaj4obKJm9vXagVv8vcAISz8uehk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl
                          rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
        Validity
            Not Before: Dec 23 04:20:57 2025 GMT
            Not After : Dec 30 04:20:57 2025 GMT
        Subject: CN=694a18a9-fd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:38:30:fa:21:c9:98:d9:58:3a:6d:52:e4:
                    e0:ac:53:a4:9d:d0:48:84:6b:c9:11:c6:5d:ec:c7:
                    63:97:7d:de:73:7c:af:67:2d:fd:57:c9:73:a5:a1:
                    10:dc:fe:ff:e8:60:12:2b:0e:aa:c3:f9:0c:55:6f:
                    19:34:9a:b4:75:12:10:73:0f:d4:cf:a3:ba:55:c3:
                    41:0c:57:dd:30:bf:8a:ed:7f:65:32:f8:cc:de:c2:
                    64:df:45:0f:f0:ae:e3:12:89:51:05:8f:6c:55:aa:
                    a1:e6:4e:9d:ed:df:e0:44:1c:7a:7d:f6:57:ff:1f:
                    b4:d9:08:97:4c:09:27:82:9e:75:8d:51:b3:e3:71:
                    d6:a1:39:8e:67:45:75:ba:43:2e:c4:9f:14:0e:9c:
                    6e:13:f2:e2:7b:d1:76:4f:37:17:db:68:f3:63:d1:
                    01:6e:26:b4:e3:43:10:6d:e8:13:38:0f:56:44:6c:
                    69:a8:26:38:cd:8b:68:ec:3c:54:23:cb:f7:a2:02:
                    97:ea:10:46:c6:6a:d5:e3:3b:87:71:66:c6:a5:e5:
                    76:ff:04:c4:37:e4:ad:b1:b1:f2:5f:9b:aa:5b:bb:
                    cb:ed:7f:ed:a8:ad:c3:12:86:4f:a1:a6:d7:ff:91:
                    6b:1d:d1:10:c8:44:a7:0f:46:5f:a6:fb:87:b1:61:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:74:92:E4:92:44:12:70:F6:EC:2A:63:B8:38:C6:67:39:31:A3:A9
            X509v3 Authority Key Identifier:
                keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:43:15:99:5b:f0:d5:fb:08:80:d8:3f:9b:00:d9:3a:b9:a8:
         7a:a5:8e:4c:10:16:52:e8:5a:86:a8:8f:b4:62:e6:ba:fd:c2:
         ed:ad:52:29:27:0f:2f:ae:60:8d:08:2f:63:8b:00:71:0b:da:
         66:be:22:65:ca:10:09:db:8e:e0:de:69:b6:d3:0f:d9:a5:23:
         83:61:16:79:7d:ce:b2:82:d3:8e:92:b9:5e:19:48:9b:28:ff:
         ff:3e:9e:16:dc:91:09:02:77:95:1c:9c:34:5c:72:58:f2:e4:
         af:d9:84:c5:ec:05:e5:63:61:c6:ac:91:3f:2a:5b:a7:a1:e4:
         ee:d7:54:65:e7:f5:0e:04:8e:11:fc:30:46:fb:40:7e:40:ff:
         ca:f0:b9:15:05:aa:6f:ce:98:32:88:96:1b:6c:fc:16:81:08:
         08:02:51:4c:67:7b:a6:a0:be:b1:f6:e9:01:b3:8b:5d:da:9b:
         b2:ad:40:f2:dd:6a:3f:80:dd:cc:b4:c0:0d:db:28:10:18:10:
         73:90:6d:6a:73:3d:60:9f:a1:f4:72:16:8c:41:a7:38:ef:96:
         bb:f0:86:eb:7b:99:f7:6d:5d:30:d8:48:23:af:99:74:02:c4:
         28:48:87:2f:2f:6e:99:76:5c:0e:9b:37:f9:02:1a:45:57:71:
         8a:a8:44:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU2MDAxMTAvBgNVBAUTKDdGODI0NUJCRDRENDU5NzIxQjQxRDRGRjJCQkZCNDI1
RkYxMTg5NTMwHhcNMjUxMjIzMDQyMDU3WhcNMjUxMjMwMDQyMDU3WjAYMRYwFAYD
VQQDDA02OTRhMThhOS1mZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzC44MPohyZjZWDptUuTgrFOkndBIhGvJEcZd7Mdjl33ec3yvZy39V8lzpaEQ
3P7/6GASKw6qw/kMVW8ZNJq0dRIQcw/Uz6O6VcNBDFfdML+K7X9lMvjM3sJk30UP
8K7jEolRBY9sVaqh5k6d7d/gRBx6ffZX/x+02QiXTAkngp51jVGz43HWoTmOZ0V1
ukMuxJ8UDpxuE/Lie9F2TzcX22jzY9EBbia040MQbegTOA9WRGxpqCY4zYto7DxU
I8v3ogKX6hBGxmrV4zuHcWbGpeV2/wTEN+StsbHyX5uqW7vL7X/tqK3DEoZPoabX
/5FrHdEQyESnD0ZfpvuHsWHsdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCl0kuSS
RBJw9uwqY7g4xmc5MaOpMB8GA1UdIwQYMBaAFH+CRbvU1FlyG0HU/yu/tCX/EYlT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yQUE3RDQ1RTc3
RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdYSWJRZFRfSzctMEpmOFJp
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Y0SkZ1OVRVV1hJYlFkVF9LNy0wSmY4UmlWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTYwMC8yQUE3RDQ1RTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdY
SWJRZFRfSzctMEpmOFJpVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEQxWZW/DV+wiA2D+bANk6uah6pY5MEBZS6FqGqI+0Yua6/cLtrVIp
Jw8vrmCNCC9jiwBxC9pmviJlyhAJ247g3mm20w/ZpSODYRZ5fc6ygtOOkrleGUib
KP//Pp4W3JEJAneVHJw0XHJY8uSv2YTF7AXlY2HGrJE/KlunoeTu11Rl5/UOBI4R
/DBG+0B+QP/K8LkVBapvzpgyiJYbbPwWgQgIAlFMZ3umoL6x9ukBs4td2puyrUDy
3Wo/gN3MtMAN2ygQGBBzkG1qcz1gn6H0chaMQac475a78Ibre5n3bV0w2Egjr5l0
AsQoSIcvL26ZdlwOmzf5AhpFV3GKqESk
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:13:59 2025 by rpki-client