This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
File:                     R4pL3QESHRxrMz7MPiW6Gohxmao.mft (raw, json)
Hash identifier:          OZMYJFtai/tLB5vm5Wuvd/RlNSXRas61omFdf8QnDL8=
Subject key identifier:   E1:85:34:BB:A7:1E:06:6C:1D:DA:BC:08:38:85:04:E4:02:82:81:D2
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Certificate issuer:       /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial:       0E3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
Manifest number:          0E34
Signing time:             Mon 22 Dec 2025 17:27:32 +0000
Manifest this update:     Mon 22 Dec 2025 17:27:31 +0000
Manifest next update:     Mon 29 Dec 2025 17:27:31 +0000
Files and hashes:         1: R4pL3QESHRxrMz7MPiW6Gohxmao.crl (hash: jSaPCgKzxDfWyPU6FVbt7+lHTfJ2tekxFBP3JrROqlk=)
                          2: 7043D43679BB11ECB6D72266C4F9AE02.roa (hash: iU2Hi3gnDAAGhDttleotVYNL88jidVA94xxut38qdqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
                          rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3646 (0xe3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
        Validity
            Not Before: Dec 22 17:27:31 2025 GMT
            Not After : Dec 29 17:27:31 2025 GMT
        Subject: CN=69497f83-3829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:08:c0:3a:ee:e4:2b:24:ba:51:74:53:72:37:
                    65:76:50:c9:63:6f:19:b8:84:d5:c3:c2:1e:73:28:
                    a6:6a:44:71:fb:05:22:16:c4:64:22:4b:e1:da:40:
                    e7:6a:ec:1a:cb:6e:b2:95:38:8f:52:6e:92:b0:db:
                    74:dd:63:46:73:99:90:8e:01:ed:bf:0c:f4:9a:54:
                    5d:1c:8c:fe:fa:e2:f2:ea:76:37:fd:df:75:0a:e3:
                    a4:22:22:e6:93:3c:7f:39:ae:2e:b0:ea:7e:b1:64:
                    43:6c:50:bb:7f:17:bf:00:8e:f6:bd:8b:62:b7:21:
                    d0:c8:dd:02:c9:91:96:4f:6a:b3:1f:8b:4e:82:dd:
                    e1:4b:bc:6f:46:53:eb:20:54:ba:16:6d:39:5f:b8:
                    60:91:75:37:59:03:c6:91:38:eb:f0:1d:d3:e0:c2:
                    65:1c:7d:b3:51:77:72:fa:85:61:95:fd:86:f4:03:
                    b5:fe:3a:9e:10:00:dc:02:20:71:9e:02:1c:bb:56:
                    77:b2:8e:4d:6a:b1:ce:45:90:6c:ab:f5:bc:24:1c:
                    5f:f7:53:7e:e7:ec:56:37:cb:09:ed:b3:25:34:6f:
                    ba:53:b5:7b:39:26:5e:d6:ae:03:07:3f:a3:1a:c2:
                    52:59:f0:ce:49:6d:fc:a8:41:87:38:e6:0d:98:87:
                    6c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:85:34:BB:A7:1E:06:6C:1D:DA:BC:08:38:85:04:E4:02:82:81:D2
            X509v3 Authority Key Identifier:
                keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2c:53:9e:57:ae:e9:b3:e2:ff:2d:86:e8:d3:06:59:c0:7a:
         9d:1b:c9:43:e4:3a:0f:4e:28:ee:c4:c0:6b:ef:fa:4b:ab:c8:
         ce:fb:f7:6a:73:19:09:67:76:14:9d:9d:46:a3:12:07:9d:83:
         1d:4a:d7:51:8c:89:e0:f0:42:6d:62:af:1f:68:ba:22:ca:03:
         c7:4f:4b:34:9b:17:af:f3:a5:6d:64:17:1d:96:9e:45:a0:30:
         86:00:5c:39:32:2c:fb:ad:75:93:c5:5a:64:b0:b5:96:c5:01:
         b2:ca:71:7a:b3:2a:c8:30:33:55:53:cd:24:2f:5a:b5:ee:c2:
         4e:89:4a:2c:44:81:62:18:dd:b8:13:81:7c:d8:8a:d9:0b:e8:
         2a:86:c5:ec:c0:57:d6:21:82:7a:0f:8a:63:84:14:a9:46:77:
         bc:2b:08:bc:30:4c:13:54:4d:aa:98:29:b4:49:9c:5e:a8:3f:
         06:49:24:12:20:3e:e4:9e:58:39:83:2a:4a:c2:6b:5f:b2:cc:
         9e:15:8c:e2:08:4b:dc:f3:bf:28:1d:54:db:c2:de:26:a2:f2:
         ec:e4:e4:18:af:76:24:f3:b8:84:d0:91:27:54:0c:a5:3c:4b:
         3c:1c:7f:2c:0d:28:8f:15:cc:87:74:2c:d7:eb:71:96:ae:28:
         da:f7:40:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:22:57 2025 by rpki-client