This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File:                     4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier:          AXxbKJEtB9VX5EKQjZC6uu2dEWgotPa/qVuMhXPGIs8=
Subject key identifier:   E2:D3:7B:C8:F6:C6:E8:53:E3:79:C9:59:48:8E:A5:DE:09:F1:88:71
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer:       /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial:       137D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number:          12FC
Signing time:             Sat 06 Dec 2025 16:36:03 +0000
Manifest this update:     Sat 06 Dec 2025 16:36:03 +0000
Manifest next update:     Sat 13 Dec 2025 16:36:03 +0000
Files and hashes:         1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: qLJMPSfKDocn9+ukKP0qRK4dSNENsklGOXbQSLxvJ5g=)
                          2: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: jk5NfHi6Ak10G3qvwwRLBuA+9+MuEQTJVNCIOpp4ijc=)
                          3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: o0TBqHxczgW2iXEBGTx5nw86Q8zs7jfB/2ZiH2tcXBM=)
                          4: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: J5LxjosxnnfdXaMAoaZ/PL1BfkizkN1e40crDyxzXgM=)
                          5: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GdNQEvmzlHfA6Ec8mmP8z6x+jIWG7iAnHlvJMuf8oD8=)
                          6: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: RjqRbyNMK1bVIARBTioOMwGD64cpM4a47WdlllK30gY=)
                          7: 6A5222E2B8CA11F0AEF0BA3CC4F9AE02.roa (hash: pBVdrYkFMYbMM7FXnA5NEHBFD69jZzGLSHL7ZsHrvao=)
                          8: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: 21MmIK/xKiS7JETWE4m4JFsmki6dx7l2EGE0grkpOo4=)
                          9: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: RAc63GKSag+ebIvPIiKjuswG8wAgmCrcqifdzue1EA8=)
                          10: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: duhPOulpnnqLJOw021zARLEkW5qMCDlozjaUuWOU1CE=)
                          11: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: RBZSewamTngEQkgjLa0OkH4nQrMAppxSjX91nS2Wpzo=)
                          12: AD7B2798CDCA11F096B9035EC4F9AE02.roa (hash: FCJ0Leshn5Im37PLEajQHqEp0O35Wv4DJOyaOelwlCs=)
                          13: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: PiSgVIn+A3YVcVJ8J1LY1Q9+m55+zt9vsCjTvJtZIKc=)
                          14: 0038D872072E11EB8914E540C4F9AE02.roa (hash: bM9HkA9Kov8pVlsp7/+B8Lhib1zUTj1baRTYw1iNq78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4989 (0x137d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
        Validity
            Not Before: Dec  6 16:36:03 2025 GMT
            Not After : Dec 13 16:36:03 2025 GMT
        Subject: CN=69345b73-9db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:ca:68:08:91:67:bd:d7:e3:31:a8:16:23:
                    eb:37:06:30:fc:e2:cf:91:f0:3e:19:36:d9:8c:dd:
                    fa:ba:1d:f5:91:dd:a8:e1:22:e0:fd:ec:68:6c:4e:
                    70:a3:76:40:59:7c:60:bc:34:01:7c:e6:27:6c:e7:
                    8a:8c:a5:bc:21:7a:13:4c:6c:34:6f:fc:44:00:e5:
                    61:3c:a7:d6:24:09:3e:50:a1:47:6d:7a:b8:5d:9b:
                    cc:b2:c0:74:c5:f2:1c:c4:00:18:0e:e6:d8:fc:73:
                    8d:fb:ed:c1:af:99:1c:10:69:a2:48:d5:8b:7c:61:
                    0c:dd:39:3f:2d:3a:55:85:f8:88:87:b8:eb:7e:a6:
                    17:cf:65:61:de:fc:96:39:3d:cb:26:33:f1:0a:e6:
                    93:4d:77:3c:43:19:90:0f:cd:c1:b4:82:f7:5c:f6:
                    f3:d2:b2:01:91:4f:5b:45:02:68:2e:68:38:a8:cd:
                    5a:e7:cc:23:f5:79:17:46:ba:67:0c:90:27:e2:54:
                    18:bc:b5:56:93:37:ff:40:e2:3c:bd:92:69:fe:d4:
                    9b:15:36:7e:91:06:6c:95:b1:9c:16:c9:db:dd:af:
                    27:d3:2f:6b:ba:cb:d0:cb:8c:ba:b4:ba:b5:d2:d5:
                    0f:c2:8f:16:72:80:46:62:cb:4a:55:ad:d2:ea:05:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D3:7B:C8:F6:C6:E8:53:E3:79:C9:59:48:8E:A5:DE:09:F1:88:71
            X509v3 Authority Key Identifier:
                keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:08:e5:ee:13:06:18:62:5a:96:11:3c:08:22:ef:57:ee:c2:
         31:83:ca:7b:c4:c4:0f:ed:4f:df:00:21:30:a9:bb:bd:47:ea:
         a1:04:97:d5:07:b2:e2:86:86:2d:ef:e8:0d:d9:b1:24:98:94:
         6c:1d:51:ea:53:38:83:0d:75:1a:7a:80:f6:a1:d9:4f:6f:31:
         25:f2:6e:bb:0e:f9:7e:e3:d6:79:a5:49:27:b7:2b:87:74:5a:
         28:4e:4e:3a:24:ce:bb:21:6a:8e:b8:15:e5:ca:f5:8d:7d:1c:
         76:7f:26:c3:34:d8:1a:72:69:5b:6b:48:4d:d0:ca:02:ee:76:
         d8:4c:b8:20:79:25:0a:c4:f1:11:a0:74:d0:72:7d:78:01:2d:
         46:ca:9d:d4:49:9f:cf:83:78:68:68:7a:ec:60:f1:57:a4:1e:
         06:a5:a1:d6:f2:4e:08:07:ac:5d:e8:3f:9f:f8:8e:7a:85:68:
         2a:4e:f9:1e:58:04:b4:87:44:fc:e7:10:ae:3d:c4:f6:0c:6a:
         85:c6:21:96:75:05:f8:69:cf:97:5b:c0:b9:da:ae:4b:12:00:
         4d:88:95:7d:23:3e:ca:43:73:3b:f0:81:f9:5f:d2:32:88:e6:
         70:99:85:d2:bf:37:1d:64:a8:d7:a4:dc:49:ad:b6:27:4c:bb:
         72:6f:b9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:31 2025 by rpki-client