This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
File:                     4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json)
Hash identifier:          c2g/nasJ6vNk6DFtfpJDnA0L/k8HUeyEva5Q9z6mr0U=
Subject key identifier:   9C:F8:98:3E:43:DB:B4:24:18:54:9B:25:A6:72:F3:C7:E6:E0:31:05
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Certificate issuer:       /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
Manifest number:          B6
Signing time:             Tue 23 Dec 2025 05:00:28 +0000
Manifest this update:     Tue 23 Dec 2025 05:00:28 +0000
Manifest next update:     Tue 30 Dec 2025 05:00:28 +0000
Files and hashes:         1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: 7K0OJkq91ix2WR+U7EdeTPwEu1zOroCLdTBPboqB6tA=)
                          2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: ICu/yjGLx5mxYSM0WJFCxUELVponO7X2E1rDJr+HfU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
                          rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
        Validity
            Not Before: Dec 23 05:00:28 2025 GMT
            Not After : Dec 30 05:00:28 2025 GMT
        Subject: CN=694a21ec-7a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:ab:71:a4:f1:da:e6:f9:05:75:4d:fa:71:
                    00:22:13:48:02:8b:22:92:2f:c6:40:0c:5d:18:22:
                    98:7f:5e:45:7f:ba:40:6e:ad:1a:c8:e5:d8:bd:cc:
                    a0:75:c8:77:97:7f:e3:4b:75:35:a3:4a:7c:78:b1:
                    32:1c:62:4c:79:71:2d:7a:b3:38:8c:bd:9f:46:4b:
                    26:86:d6:c2:a6:ff:71:dc:0d:27:d5:1a:50:cc:17:
                    56:98:bb:3e:31:6b:30:69:7c:8c:05:64:de:b5:06:
                    28:2a:69:28:16:de:3e:d1:26:d9:05:e1:65:6e:95:
                    44:d9:ed:26:9c:41:70:fd:06:e8:8c:b0:12:62:bc:
                    da:f3:a5:ac:af:3e:a5:df:f7:ab:f5:67:40:bd:f4:
                    a6:94:e6:93:31:9d:88:39:b3:ed:a7:73:30:cb:61:
                    06:45:a5:e1:16:23:14:24:82:8f:d8:0f:84:f5:22:
                    12:1c:09:da:73:39:8e:98:43:66:71:af:50:a8:c2:
                    6c:57:c0:db:1d:e5:b9:ac:3e:a9:99:f6:cf:58:06:
                    28:40:f5:b8:01:1e:36:19:8d:38:13:45:e9:65:69:
                    fe:0d:6c:1b:f1:b1:52:cc:18:5b:93:ca:bf:f8:f4:
                    18:0c:8e:98:fd:62:75:8f:8c:cf:b4:85:bd:a0:9b:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F8:98:3E:43:DB:B4:24:18:54:9B:25:A6:72:F3:C7:E6:E0:31:05
            X509v3 Authority Key Identifier:
                keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ec:a7:4b:b2:ad:2a:cf:ce:92:84:71:90:df:d1:e9:03:69:
         16:4a:15:7d:98:9a:2e:4b:55:b2:3b:38:6d:fb:4c:69:cb:54:
         b1:c6:42:64:6f:0c:8f:a0:75:57:f3:51:2c:32:72:9d:82:11:
         f8:43:34:8a:31:1b:a7:bf:97:0b:af:f7:e6:0f:53:e3:06:9a:
         5f:48:c7:0d:36:90:65:a2:7c:6e:b1:85:f8:21:7a:bd:f1:ae:
         47:03:fb:98:3d:c2:b8:dc:f0:a3:02:f0:f4:6f:4a:51:2d:8d:
         12:f8:56:51:b4:1d:37:d3:5f:ac:92:af:38:ef:f4:79:0d:b9:
         9b:38:68:8d:53:35:c9:04:b7:02:68:1a:50:50:87:66:06:7b:
         08:63:75:98:70:f2:6a:3d:4b:21:a1:b4:a5:32:0f:8e:ea:6c:
         01:09:11:03:cb:97:b6:a2:1d:32:c8:c8:23:7f:ad:81:0d:b9:
         06:45:b0:db:de:2d:3c:65:cc:cd:48:b3:37:8a:33:61:24:1e:
         88:01:0f:f5:58:14:d5:4f:2a:b8:04:ad:bc:88:a4:6e:79:e3:
         f9:09:16:03:49:03:b1:6c:8f:43:eb:2e:fd:cc:d2:64:a0:43:
         82:df:02:1c:89:c9:97:01:b6:a0:14:e6:bb:a3:6b:e2:df:58:
         3a:2e:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:53 2025 by rpki-client