This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
File:                     4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json)
Hash identifier:          CDxo95hoK+NfLkYSAzrb4x1V6jISoTLa4AtUD5QrR4U=
Subject key identifier:   6C:BC:60:1C:08:05:A9:06:AB:2B:AF:EB:1C:C0:77:E0:FB:53:06:5C
Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Certificate issuer:       /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
Manifest number:          54
Signing time:             Fri 19 Dec 2025 06:13:52 +0000
Manifest this update:     Fri 19 Dec 2025 06:13:51 +0000
Manifest next update:     Fri 26 Dec 2025 06:13:51 +0000
Files and hashes:         1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: 3Q1YY+H4ms3yQQi85RXNl09jBY9bYBpgjgaz4YSC5pM=)
                          2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: VJHNLTTmYE0OnrSaYRsFhyrLIddh+nJKNb/E2v8OcCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
                          rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
        Validity
            Not Before: Dec 19 06:13:51 2025 GMT
            Not After : Dec 26 06:13:51 2025 GMT
        Subject: CN=6944ed1f-dabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:9b:8b:15:c0:45:18:0b:42:92:94:85:a9:21:
                    ff:59:68:5c:00:b4:e7:eb:4a:42:5d:ca:53:3f:32:
                    d1:3c:47:4b:40:ec:46:23:15:81:6e:a6:32:e2:a6:
                    16:72:cc:61:e0:44:9d:54:a4:78:e2:e1:6b:f7:a2:
                    20:38:66:51:47:f8:a3:f0:bc:2f:df:af:f8:77:24:
                    7a:03:72:a9:5f:16:c1:f5:ec:7c:40:14:73:b0:54:
                    82:d6:11:81:3f:30:8e:22:8d:25:42:e8:c8:7c:56:
                    a0:db:33:85:bf:02:7c:74:64:88:bc:c7:c6:6f:06:
                    5d:6f:51:80:0f:ed:f4:9e:a9:2f:b8:57:16:ae:c9:
                    8f:f0:80:61:80:f3:eb:96:d1:82:56:88:a7:9c:66:
                    7a:ba:9d:b7:cd:ef:51:6e:fb:ab:fd:60:6a:d3:c7:
                    1c:db:43:8f:1d:97:c3:ff:dc:0a:68:e2:56:91:a8:
                    52:1a:3a:48:1f:33:16:5a:67:9f:f1:83:4b:f4:aa:
                    b9:aa:c7:7c:39:81:7b:19:28:e9:e4:92:90:03:44:
                    e7:b9:74:58:78:03:de:ac:3b:ec:69:93:7f:1b:7e:
                    84:be:3d:a7:7c:0b:35:00:e7:a0:c3:01:d8:10:5f:
                    be:6b:b1:49:b5:63:3d:b5:f4:ac:53:86:2b:6c:04:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BC:60:1C:08:05:A9:06:AB:2B:AF:EB:1C:C0:77:E0:FB:53:06:5C
            X509v3 Authority Key Identifier:
                keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b4:f3:5f:b4:69:44:4b:df:de:27:fa:0b:a4:8e:4b:f0:f6:
         f5:d7:25:c0:83:cd:11:ca:b5:8e:61:e4:25:07:44:1a:ff:31:
         68:9b:b1:ca:60:f5:59:26:a9:9e:ea:ff:cf:f0:97:5a:ee:73:
         cb:ab:e4:17:c7:dd:a6:cd:95:dd:0d:b8:cb:b2:08:36:73:79:
         c0:28:50:65:25:4a:90:29:87:54:84:c8:22:d7:5f:68:07:db:
         0b:65:a9:82:02:f3:a4:3e:3a:4d:3e:88:9e:32:6d:e6:aa:f2:
         32:fb:d9:da:e4:d2:e9:08:5a:22:1e:4f:39:a3:6e:ae:34:1f:
         91:65:c0:88:fa:70:19:ed:94:91:0c:72:b4:19:cc:39:42:9b:
         76:41:fe:9e:57:12:8b:9c:c8:ab:d7:43:9a:82:f3:a2:74:5e:
         52:9a:cf:f9:f9:f1:8a:04:2f:1a:c6:82:73:a1:35:f1:f1:ea:
         f7:f5:a7:f5:b7:63:93:90:cd:41:63:26:fc:40:30:ae:50:06:
         e6:27:44:45:e7:c3:a2:33:4a:d6:46:43:5b:bb:b5:1b:27:a0:
         55:ea:31:17:14:ed:b3:a1:21:c0:ec:f0:a4:6a:48:ee:08:57:
         8c:59:49:2f:6b:fd:28:4c:3e:cc:e8:ad:33:85:39:4e:fe:e4:
         04:ac:e8:0c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RTA5RTExMC8GA1UEBRMoRTA1QzY0NTU0NUQ5RUY4NkI0NTFFNTIxOUQ4MzI3NjBG
NDA1Q0FFODAeFw0yNTEyMTkwNjEzNTFaFw0yNTEyMjYwNjEzNTFaMBgxFjAUBgNV
BAMMDTY5NDRlZDFmLWRhYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD4m4sVwEUYC0KSlIWpIf9ZaFwAtOfrSkJdylM/MtE8R0tA7EYjFYFupjLiphZy
zGHgRJ1UpHji4Wv3oiA4ZlFH+KPwvC/fr/h3JHoDcqlfFsH17HxAFHOwVILWEYE/
MI4ijSVC6Mh8VqDbM4W/Anx0ZIi8x8ZvBl1vUYAP7fSeqS+4VxauyY/wgGGA8+uW
0YJWiKecZnq6nbfN71Fu+6v9YGrTxxzbQ48dl8P/3Apo4laRqFIaOkgfMxZaZ5/x
g0v0qrmqx3w5gXsZKOnkkpADROe5dFh4A96sO+xpk38bfoS+Pad8CzUA56DDAdgQ
X75rsUm1Yz219KxThitsBPGRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbLxgHAgF
qQarK6/rHMB34PtTBlwwHwYDVR0jBBgwFoAU4FxkVUXZ74a0UeUhnYMnYPQFyugw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFMDlFL0Q4QkIwRjM2NjFG
QTExRjBCRDRGNjA2RUM0RjlBRTAyLzRGeGtWVVhaNzRhMFVlVWhuWU1uWVBRRnl1
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNEZ4a1ZVWFo3NGEwVWVVaG5ZTW5ZUFFGeXVnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF
MDlFL0Q4QkIwRjM2NjFGQTExRjBCRDRGNjA2RUM0RjlBRTAyLzRGeGtWVVhaNzRh
MFVlVWhuWU1uWVBRRnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABC081+0aURL394n+gukjkvw9vXXJcCDzRHKtY5h5CUHRBr/MWibscpg
9VkmqZ7q/8/wl1ruc8ur5BfH3abNld0NuMuyCDZzecAoUGUlSpAph1SEyCLXX2gH
2wtlqYIC86Q+Ok0+iJ4ybeaq8jL72drk0ukIWiIeTzmjbq40H5FlwIj6cBntlJEM
crQZzDlCm3ZB/p5XEoucyKvXQ5qC86J0XlKaz/n58YoELxrGgnOhNfHx6vf1p/W3
Y5OQzUFjJvxAMK5QBuYnREXnw6IzStZGQ1u7tRsnoFXqMRcU7bOhIcDs8KRqSO4I
V4xZSS9r/ShMPszorTOFOU7+5ASs6Aw=
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:51:12 2025 by rpki-client