This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
File:                     4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft (raw, json)
Hash identifier:          +HV+wWBhY7O5s5DtNXYtHZOh85KNDYbonNrRjD7WI4s=
Subject key identifier:   A0:1C:F6:61:E9:44:11:45:68:2A:BB:FD:E3:AF:14:61:54:A1:4D:67
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Certificate issuer:       /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial:       03ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
Manifest number:          03D7
Signing time:             Sat 20 Dec 2025 23:52:43 +0000
Manifest this update:     Sat 20 Dec 2025 23:52:43 +0000
Manifest next update:     Sat 27 Dec 2025 23:52:43 +0000
Files and hashes:         1: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl (hash: ZKfzV85DGK0t2Dg/ayctvz4PujY+NtZNyMHE/jZnj2A=)
                          2: 9D5E76267A5B11EFAB107D22C4F9AE02.roa (hash: 9HTI4YsG+MVKk2SPKB83AXiFVagV7EoMAnUgolUkaKs=)
                          3: AF8F74D07A5B11EFAD45A522C4F9AE02.roa (hash: oZf6EaGqkiYgycEdcpRUWL54DKGgCS87nNNS1RZh6OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DEF, serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
        Validity
            Not Before: Dec 20 23:52:43 2025 GMT
            Not After : Dec 27 23:52:43 2025 GMT
        Subject: CN=694736cb-3f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:80:c7:ba:6e:89:87:59:57:38:0b:46:ca:
                    08:c3:17:66:7d:36:bf:04:2d:bf:e2:d1:15:60:26:
                    5e:60:71:76:ee:aa:b7:8c:6f:8e:5b:7e:5d:9c:92:
                    e3:e8:3b:dc:b9:b2:5f:cd:c3:b9:68:c9:6b:1d:53:
                    f8:11:08:00:6d:ab:50:29:f0:b9:46:54:e2:ac:c3:
                    53:29:9f:b8:b0:19:d2:13:d5:bd:eb:4c:cc:26:7b:
                    04:a8:75:a5:6b:dc:db:17:99:56:f1:2f:fd:14:2c:
                    55:66:20:38:99:58:39:13:4e:2d:f6:25:81:cc:c3:
                    fd:2c:e3:1a:a5:e3:00:e2:96:60:50:df:a7:c8:2a:
                    e4:f6:38:46:c9:50:25:83:7c:e2:73:12:74:bd:d9:
                    94:53:28:21:48:48:cd:22:0d:3b:71:71:63:0a:ba:
                    99:a2:0f:dc:b3:23:f1:c9:62:ba:7c:86:b2:64:a0:
                    30:55:46:86:b1:a9:eb:80:90:4f:d5:ee:9f:52:48:
                    b6:a9:8f:f0:67:86:fd:6e:d7:53:9d:08:14:67:ac:
                    7d:41:01:43:d7:e4:8a:b2:25:e9:42:92:73:3d:c8:
                    e0:b1:68:e1:03:7b:9c:85:a9:2c:60:15:0b:3d:9e:
                    bd:a4:e8:4e:b6:e4:1d:7d:d2:d5:63:d4:78:6a:52:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1C:F6:61:E9:44:11:45:68:2A:BB:FD:E3:AF:14:61:54:A1:4D:67
            X509v3 Authority Key Identifier:
                keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:4b:39:78:42:7b:78:52:9c:53:9b:76:e2:c3:f4:ab:92:
         14:2a:21:21:5f:c5:9e:92:3e:ed:58:2b:03:9f:7e:13:91:d8:
         ad:0b:26:49:10:b4:50:e1:d4:bd:27:3a:07:ad:ae:36:d3:f5:
         07:c2:e7:23:b4:7a:89:6a:52:96:dd:d5:e2:c5:7e:ff:a7:4f:
         07:a0:9c:b9:49:09:44:47:2a:e9:73:03:1a:b7:3c:23:be:e2:
         74:7d:32:04:e1:5b:2b:02:41:7b:3f:36:9f:31:f4:22:7d:d5:
         25:0f:53:8c:60:ef:db:a1:08:fd:e1:00:da:38:84:2a:22:bc:
         a2:e2:b0:25:e8:57:09:87:9d:22:77:af:9a:55:f8:e7:26:df:
         58:2f:57:c0:67:64:0a:55:a6:e6:b8:53:ec:62:bc:16:ae:be:
         1e:ad:50:4a:ec:40:bb:0f:fd:2d:47:d9:0d:15:3e:08:84:16:
         0c:f3:3b:f5:e3:3b:89:9c:ce:d6:0c:f3:c8:4c:a4:c5:d3:db:
         f8:a5:7e:0e:4c:20:47:54:fa:22:0b:74:f8:07:38:d5:0d:66:
         73:51:9f:94:85:a5:26:61:33:96:12:28:f5:64:21:4b:58:aa:
         9c:5e:71:fb:cd:6a:65:55:ab:12:37:af:ad:08:69:c9:21:29:
         26:7a:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 16:37:02 2025 by rpki-client