This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File:                     4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier:          7WkEmyvTu0GZSSaJ3Y/irzbt83WB+tFt/tqq1QsSq1c=
Subject key identifier:   C1:8D:B6:21:57:1C:68:89:96:5C:13:B1:B4:FF:95:4D:DD:8E:14:53
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       6D956038EA9F479050978242E2B472DDD7638176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number:          037F
Signing time:             Tue 23 Dec 2025 00:26:26 +0000
Manifest this update:     Tue 23 Dec 2025 00:21:26 +0000
Manifest next update:     Wed 24 Dec 2025 02:58:26 +0000
Files and hashes:         1: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=)
                          2: 4B1987D5160068092602529871C93EA320045A75.crl (hash: fGqj73H1tNa3zS1YXInhLSkLHEQu1x3CgppoFtIKu4M=)
                          3: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=)
                          4: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 02:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:95:60:38:ea:9f:47:90:50:97:82:42:e2:b4:72:dd:d7:63:81:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Dec 23 00:21:26 2025 GMT
            Not After : Dec 24 02:58:26 2025 GMT
        Subject: CN=C18DB621571C6889965C13B1B4FF954DDD8E1453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:94:d9:77:8e:cc:0e:8f:7a:91:1b:7c:1f:
                    4e:a1:7a:ae:3c:52:05:91:43:aa:e7:d6:d4:aa:1d:
                    f3:35:4b:d7:8c:58:66:3c:78:11:cb:25:f4:8b:53:
                    80:1d:37:7d:9f:2c:71:97:03:15:e1:89:42:2a:87:
                    b9:c6:a7:19:fa:bb:35:9c:80:1e:8c:67:f9:54:41:
                    9b:f9:63:a2:68:3d:35:f1:ed:e1:92:2e:0a:58:b2:
                    1e:ec:9d:ab:04:a3:3f:0a:38:fa:f6:12:0d:63:dd:
                    cc:4e:ab:7a:00:eb:24:0b:fd:3c:de:a0:53:ad:0e:
                    03:8d:07:98:90:37:09:f3:9b:63:4c:a3:69:c0:a4:
                    c8:19:05:fd:fd:7d:05:41:ac:ec:75:d1:74:ef:11:
                    f7:d3:96:c7:a0:be:81:ff:d6:fb:d6:b1:53:72:2b:
                    f7:5e:03:d0:7a:a4:86:52:de:90:18:ac:84:85:5c:
                    0e:d7:d4:5a:ff:17:16:6a:b3:17:5c:8f:5a:01:2e:
                    11:9d:1f:3d:dd:3c:8d:e8:4f:ae:e8:cf:b7:d5:b4:
                    df:28:2e:40:a5:2f:69:5f:93:25:75:06:0c:30:89:
                    1c:91:65:cf:25:d4:19:67:5b:c1:af:4c:92:9a:28:
                    90:73:ca:27:70:d7:18:02:ce:84:2d:c0:7e:7b:e9:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8D:B6:21:57:1C:68:89:96:5C:13:B1:B4:FF:95:4D:DD:8E:14:53
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:fc:a9:d8:a9:f4:b1:70:47:04:7c:c8:3f:c5:e4:56:b4:92:
         6c:d1:e7:a5:92:61:af:d8:ef:74:b8:7f:6e:17:e5:df:9b:b3:
         b7:55:82:16:6d:bf:0d:8c:e6:19:96:bc:cf:0b:ca:ca:12:26:
         b2:0c:14:5f:16:f0:e7:1a:d7:39:e0:75:66:be:9f:1a:9c:ed:
         e3:40:56:c6:f6:bd:2c:08:c9:3c:8d:09:c6:58:06:32:2c:f9:
         d4:e8:49:02:66:2c:f9:e5:c1:35:d8:83:5e:6d:07:a5:42:21:
         d8:7e:8a:04:60:f3:01:5c:f9:db:13:a5:88:7c:99:c7:1e:22:
         70:0f:6a:64:95:40:e9:f2:02:1e:3f:fd:b4:55:9b:d1:84:66:
         b9:46:b2:c3:7b:c7:ae:b0:ad:1a:79:8c:7b:75:23:9d:ea:3a:
         70:13:c6:28:33:85:70:7b:07:db:4a:86:4c:3b:58:8d:de:4d:
         90:e2:6b:14:4b:5d:2c:9e:80:66:2a:2f:2e:4f:32:a8:c5:58:
         e7:93:df:b7:c4:78:44:3b:3a:42:ab:64:e7:e6:90:3e:15:8c:
         87:20:9e:b7:95:f2:1c:14:84:2d:0c:60:61:6e:d9:65:0a:34:
         ce:78:cf:b3:9c:3e:92:c6:cd:9a:f7:c4:3d:87:14:26:32:09:
         c6:dc:48:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:08:27 2025 by rpki-client