This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
File:                     4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft (raw, json)
Hash identifier:          OB0oljI7k8/K5OxLHd0XVtWdI083CC2koUS2Ak3Gjiw=
Subject key identifier:   E2:43:C9:EF:2A:EA:7A:83:AC:C2:10:F5:7B:1E:0F:4D:50:2E:67:65
Authority key identifier: E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E
Certificate issuer:       /CN=A9190059/serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
Manifest number:          05
Signing time:             Wed 03 Dec 2025 06:17:37 +0000
Manifest this update:     Wed 03 Dec 2025 06:17:36 +0000
Manifest next update:     Wed 10 Dec 2025 06:17:36 +0000
Files and hashes:         1: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl (hash: ktXNT2u3e1aUma1KfYdDDE/RYKE7fZUYKSgLOV4tHWU=)
                          2: 0DA28718CE5E11F084703925C4F9AE02.roa (hash: 8U8EBiVLGcGZamqQu9ebR7wEndmlf6Ty8cVKrFdTa4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl
                          rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190059, serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
        Validity
            Not Before: Dec  3 06:17:36 2025 GMT
            Not After : Dec 10 06:17:36 2025 GMT
        Subject: CN=692fd600-d159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:44:7f:71:bc:37:87:b7:45:e6:5a:30:b2:ea:
                    d9:7d:6f:87:6a:91:0c:a9:29:f0:35:82:95:39:1e:
                    dd:70:f2:81:63:9e:79:9b:97:76:35:97:7b:3e:ac:
                    2a:c6:74:1d:d6:6a:fc:39:42:38:7b:95:03:0b:72:
                    f0:44:27:be:39:0f:e1:ff:9c:39:e7:c3:7e:43:05:
                    9e:5d:3e:63:89:f1:73:1f:89:af:54:1a:e9:8b:be:
                    80:92:b9:34:a5:0f:e9:d1:18:fe:a3:4c:2e:85:63:
                    e7:52:5e:a4:e0:96:9a:68:f9:9c:41:f6:73:6a:a5:
                    2d:61:77:8a:04:07:0c:cd:d7:2d:33:12:a7:37:b2:
                    08:6b:a0:dd:0d:7b:49:ee:ae:bd:f1:a1:09:c2:68:
                    aa:da:86:c7:2e:16:48:d4:2c:06:13:14:51:ac:b9:
                    5b:9d:08:01:ca:69:a1:aa:cc:7d:f4:45:39:5d:29:
                    b1:9e:ef:1c:02:e6:31:86:13:ba:b0:d8:11:20:36:
                    f3:8a:53:77:51:62:96:5b:e4:c8:18:c5:86:35:ca:
                    c7:97:7c:4a:0a:c3:5b:7f:24:14:94:36:b2:cf:fe:
                    dd:65:83:d8:cd:3f:8c:77:3d:2e:f2:f6:37:8c:ae:
                    4d:2a:2d:b8:db:0b:50:70:97:8f:81:e6:f8:f3:27:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:43:C9:EF:2A:EA:7A:83:AC:C2:10:F5:7B:1E:0F:4D:50:2E:67:65
            X509v3 Authority Key Identifier:
                keyid:E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:a0:39:1f:f8:4d:12:e6:be:8d:6d:81:55:c9:b2:9c:b2:27:
         ec:a2:6f:da:df:95:b3:20:b2:ba:d1:86:3d:fe:06:04:77:95:
         d7:44:e3:5f:60:fd:47:e5:38:43:ed:6e:ae:a0:48:8a:9d:ef:
         bd:1a:2c:f8:87:fe:de:c1:20:c2:e8:64:72:ab:33:40:bd:ed:
         c9:89:e1:c7:73:b0:30:6e:19:b8:59:a3:4d:00:8d:db:db:0f:
         c4:6b:5f:ec:26:08:a2:79:22:1e:a1:95:0a:02:9c:f5:a3:1a:
         71:0d:c6:f3:c3:fd:43:a6:bd:d4:d5:0f:08:dc:96:68:d7:3e:
         98:5a:71:e0:8a:3a:b6:78:d9:45:94:48:ea:65:db:cc:d2:1e:
         47:df:f5:d3:96:b2:d0:1f:3a:78:27:53:27:3e:c4:9b:b1:a0:
         5d:c9:56:fd:ba:48:0a:6c:92:63:56:ff:c2:49:79:4f:28:3d:
         cf:0a:87:5f:77:52:db:39:36:35:1f:5a:a6:ac:3f:37:04:44:
         6f:11:e6:63:c9:c8:0d:bf:24:fe:b1:08:b7:b8:99:2e:2d:cc:
         c3:29:10:98:ee:df:cb:6a:0c:70:32:62:12:cf:42:00:ed:8d:
         ca:f2:59:d7:c3:b6:cc:50:ec:2d:06:17:9f:87:97:da:0a:8b:
         70:2c:9a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:10 2025 by rpki-client