This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft
File:                     E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft (raw, json)
Hash identifier:          nUNY68yrGeAtXCqADWa3nZj6jyTBTuaguBnPWcck/u4=
Subject key identifier:   0B:AE:C4:3C:0B:41:9E:9B:4F:8D:81:76:E5:9C:93:F9:F8:73:7E:E8
Authority key identifier: E4:A2:D2:F4:E4:87:25:65:FB:EB:0E:AA:00:02:F7:EB:05:9E:5C:1C
Certificate issuer:       /CN=A918C2870001/serialNumber=E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C
Certificate serial:       5343CB51504FF3E8724665AC0A5E4F8BADA57010
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft
Manifest number:          11
Signing time:             Wed 24 Dec 2025 02:41:24 +0000
Manifest this update:     Wed 24 Dec 2025 02:36:24 +0000
Manifest next update:     Wed 07 Jan 2026 04:40:24 +0000
Files and hashes:         1: E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl (hash: QK/vf/7m/n9mFe9jsj7HiMOW1aKTXwmTwCmTDnReRAg=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl
                          rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 14:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:43:cb:51:50:4f:f3:e8:72:46:65:ac:0a:5e:4f:8b:ad:a5:70:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2870001, serialNumber=E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C
        Validity
            Not Before: Dec 24 02:36:24 2025 GMT
            Not After : Jan  7 04:40:24 2026 GMT
        Subject: CN=0BAEC43C0B419E9B4F8D8176E59C93F9F8737EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:53:e7:57:a2:d8:31:2a:7b:40:bc:ec:81:
                    f8:cd:88:8a:b2:ed:d3:67:6a:79:55:16:ac:5d:e8:
                    85:78:7e:09:d2:7e:4d:ee:82:8b:e5:e5:9f:8b:6a:
                    92:3e:93:78:e2:d1:35:07:8c:dc:94:f9:07:63:73:
                    5e:e0:8f:46:4e:82:7a:f2:a4:a2:bb:e3:a5:7c:51:
                    fc:7c:39:70:aa:c7:38:9e:2c:f8:8e:45:87:ae:4c:
                    83:cb:3d:26:56:5f:ea:40:9f:8e:5f:7e:b5:96:ea:
                    30:33:fe:72:81:cb:30:dd:0d:6f:10:9c:d1:43:f4:
                    81:7f:37:66:67:3d:6a:c6:90:87:6d:1e:be:99:b4:
                    40:df:35:e4:74:2a:e6:fe:cb:39:ce:b9:e5:e1:ff:
                    49:b7:b6:a5:ba:64:d8:0b:12:8c:09:e0:26:4c:8f:
                    30:d6:0e:c6:4d:96:dd:c1:79:c7:e0:1e:86:b4:5a:
                    10:28:04:15:fa:f2:58:7a:39:43:67:05:3f:4a:9c:
                    24:b6:4c:ea:a5:e7:15:a0:2c:8e:c0:80:be:82:ff:
                    20:cc:d0:e6:6e:32:44:91:f4:6a:c5:3b:d5:05:d1:
                    72:e2:76:76:5a:f9:91:5a:ee:0d:b0:51:bb:51:84:
                    58:82:71:85:ad:92:a5:eb:2f:8b:cd:4a:92:db:8e:
                    59:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AE:C4:3C:0B:41:9E:9B:4F:8D:81:76:E5:9C:93:F9:F8:73:7E:E8
            X509v3 Authority Key Identifier:
                keyid:E4:A2:D2:F4:E4:87:25:65:FB:EB:0E:AA:00:02:F7:EB:05:9E:5C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:31:24:16:52:b3:cb:9d:0b:4d:1b:c1:02:62:7b:5d:3b:ec:
         1a:81:8c:af:c7:dd:1e:88:d9:38:3d:fe:43:51:d1:b2:95:27:
         39:f9:12:69:83:c8:59:94:dd:3e:78:33:95:8a:8c:2f:8b:32:
         b3:2a:a0:e3:5b:ed:4b:63:7f:37:34:3c:3b:d9:00:7b:03:87:
         2b:d3:2b:98:5f:a6:28:03:62:f0:0e:97:a3:dd:f7:2e:02:e0:
         e4:60:6b:fe:6e:ce:03:43:2a:58:d5:22:96:8d:a0:53:99:38:
         5c:a6:73:53:3e:f5:fa:1c:51:bc:95:ec:49:91:93:81:c9:2e:
         2d:8d:a7:39:1b:68:b6:92:a0:73:0d:c9:01:6a:5e:8f:7d:4d:
         82:c3:8c:26:fd:21:e6:a7:84:9f:f0:83:ca:b7:aa:ec:25:f6:
         6f:1f:30:4e:cb:98:e8:dd:db:da:21:7d:e0:85:8a:33:59:c0:
         62:0b:73:d0:ea:af:31:d1:45:d4:4d:65:2d:1a:12:23:47:da:
         33:8c:2c:75:96:df:df:6f:05:10:e1:03:6a:96:b1:a7:5b:5d:
         37:d3:5d:46:fe:91:2f:78:14:e9:ad:42:5b:ce:37:1a:ba:ce:
         99:0b:c7:01:e3:b4:ab:74:5c:4a:cd:4e:e4:80:80:6a:c7:da:
         5a:06:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:36 2025 by rpki-client