This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File:                     T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier:          PfxSaOerbRtbURt55j3IyudHGcB/p/ldGjzH/VHmm/Q=
Subject key identifier:   CF:A6:D2:41:91:E3:A7:6B:AD:E2:8F:7D:52:FC:68:97:FF:A8:26:0C
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer:       /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial:       03E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number:          03DC
Signing time:             Mon 22 Dec 2025 23:36:51 +0000
Manifest this update:     Mon 22 Dec 2025 23:36:51 +0000
Manifest next update:     Mon 29 Dec 2025 23:36:51 +0000
Files and hashes:         1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: KJb4vJJrwQZordOnqwBs6JYb/v/gi1eN2VoGJcqNVBc=)
                          2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
                          rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
        Validity
            Not Before: Dec 22 23:36:51 2025 GMT
            Not After : Dec 29 23:36:51 2025 GMT
        Subject: CN=6949d613-ac45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:2e:b0:14:5f:bd:8f:77:e9:7e:89:4c:63:
                    cc:11:f7:8b:bc:33:5d:0c:54:67:e2:8f:f6:20:48:
                    55:f5:5d:ed:b9:53:45:0f:1f:ca:29:fe:48:ef:28:
                    80:48:61:e7:38:d3:7e:79:cc:cc:98:f2:7c:8c:65:
                    f0:60:f4:ef:3c:32:74:13:d1:ec:ff:09:67:e4:a0:
                    e4:8a:11:16:cd:bd:67:93:44:f3:21:b8:55:38:b4:
                    32:61:79:c1:a9:2e:5a:b2:aa:5b:79:ef:95:dd:20:
                    7b:29:93:0a:eb:fa:55:be:7b:78:9a:f9:e6:f9:40:
                    69:c5:77:ac:ea:cc:9c:60:4a:1f:22:2b:70:e6:da:
                    ed:cf:52:3f:01:f8:16:91:25:5f:f2:7a:93:b6:30:
                    5f:ca:92:e4:47:ed:db:25:da:37:6f:02:96:d7:35:
                    92:2a:7e:4a:1e:5a:ff:82:6a:31:83:33:51:da:2e:
                    fd:b8:d4:07:76:c6:e7:23:a9:b2:1c:b8:f7:b9:18:
                    44:4c:a5:7c:e5:d3:49:45:c2:6e:d9:dd:19:c7:e7:
                    d9:ec:08:77:46:b6:13:81:4a:ba:d5:3c:9e:1c:b4:
                    07:2d:15:f4:3d:24:46:77:29:46:75:15:9c:a6:04:
                    a2:6a:fc:77:19:6a:f5:b1:38:a7:38:db:46:05:97:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A6:D2:41:91:E3:A7:6B:AD:E2:8F:7D:52:FC:68:97:FF:A8:26:0C
            X509v3 Authority Key Identifier:
                keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:97:24:b6:ff:0b:1f:e3:6e:90:f5:cc:38:29:d1:48:98:e1:
         a4:5f:71:0c:c6:e9:f9:5a:44:1e:e5:ec:3a:5d:59:db:a9:2d:
         0d:47:5a:17:45:4e:70:e8:14:80:45:cb:3b:c9:cb:e9:a8:9a:
         75:f8:18:eb:cf:45:5c:c5:f5:da:8f:ce:ec:09:da:c8:8c:89:
         ce:9b:57:a7:21:86:e9:a9:78:85:3c:c3:0a:85:5b:91:3f:1c:
         26:da:9f:d0:b8:21:78:a9:46:f9:c3:15:b1:0c:26:59:b9:18:
         63:be:cf:46:dc:2e:99:16:ce:1e:2f:ca:5a:65:a6:96:04:d9:
         83:b7:7f:a1:e9:85:3c:df:f7:eb:23:b4:60:d7:12:af:73:64:
         c7:21:90:05:02:53:85:ea:1e:d4:3d:da:85:ce:23:c3:74:ba:
         d7:22:73:60:07:49:7b:43:e3:21:0e:47:ad:e1:b6:32:ce:38:
         a2:b8:d1:af:48:cb:69:9d:5f:15:f9:38:cf:cd:27:11:a3:02:
         ca:3e:7b:96:4c:99:87:50:a6:b5:f6:eb:66:14:fc:45:44:7b:
         0e:dd:85:cf:e5:f7:c3:2f:73:74:2d:da:34:9c:06:c6:92:ca:
         29:2b:24:52:12:d0:a7:88:b1:79:a3:33:53:1b:f0:1a:18:f3:
         2d:9d:ab:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:09 2025 by rpki-client