This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File:                     4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier:          dvp+gEhaq5KHr5l2N/fcZ73ZT77m93iz9q4Ph4ilh1k=
Subject key identifier:   EC:B3:1C:8E:80:09:49:AC:7A:E6:F6:84:87:6E:68:81:07:B1:4B:89
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer:       /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial:       0B3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number:          0B1B
Signing time:             Thu 18 Dec 2025 18:59:08 +0000
Manifest this update:     Thu 18 Dec 2025 18:59:07 +0000
Manifest next update:     Thu 25 Dec 2025 18:59:07 +0000
Files and hashes:         1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: GR+wiFvLcGR+7W7ooHE7bH0Leple0/QphAunvO1OGRM=)
                          2: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: 0ivrrhOuD8rnlDAlVKRxt/gAlv7oVMt+OxJAV2VhnEQ=)
                          3: 76D38708D64611EE98C44371C4F9AE02.roa (hash: Qz146VM4QvlDNRuGBcUC54NXkp571EsnSbuspPg45Lo=)
                          4: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: eJEKTYYjPmJgzHgGsGpnpxLPRqE5UDEGdtp3iWb4OV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
                          rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2874 (0xb3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
        Validity
            Not Before: Dec 18 18:59:07 2025 GMT
            Not After : Dec 25 18:59:07 2025 GMT
        Subject: CN=69444efb-bf75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:94:0b:03:4e:47:dc:7e:0a:f4:e6:26:30:
                    d3:61:27:9a:62:1d:d9:b3:73:f7:9b:6f:ec:75:10:
                    0f:af:98:3e:a1:ed:b9:bc:70:4d:ee:00:70:48:ce:
                    0a:ff:45:67:8f:a5:89:7f:6e:fd:a8:39:a2:8c:99:
                    5e:51:9d:f2:bf:e8:3a:70:75:41:dd:4d:ab:4d:af:
                    86:dc:c5:84:ad:3b:16:52:d4:52:f6:7a:d9:e3:19:
                    d3:96:22:08:1f:1e:45:d3:d0:f2:fb:94:aa:d6:ce:
                    7a:17:1c:f7:88:87:22:33:6e:52:69:98:b7:f8:60:
                    79:8b:86:35:6f:98:1b:9d:90:a8:17:79:a9:80:e9:
                    4b:a9:61:6d:33:08:32:e4:40:ac:48:f4:06:0c:af:
                    e2:dd:7a:b5:c6:84:94:b3:27:b1:3d:3b:95:dc:3e:
                    e0:22:4d:33:90:7a:36:35:eb:27:c9:ce:16:fe:c9:
                    ff:08:23:8b:ac:36:53:52:24:3c:60:b3:9a:0b:2d:
                    21:93:7a:ea:ce:82:36:0b:e9:6e:31:fa:10:60:a0:
                    86:88:fb:42:3a:fc:cc:c4:06:b0:6b:d7:ec:0b:26:
                    88:7c:c5:c7:ab:d7:d8:ed:36:ef:b7:8a:05:15:66:
                    a9:b3:d9:dc:94:d6:28:68:fd:f2:12:fd:67:a5:46:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B3:1C:8E:80:09:49:AC:7A:E6:F6:84:87:6E:68:81:07:B1:4B:89
            X509v3 Authority Key Identifier:
                keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:c3:a4:76:ae:f5:55:1f:65:d3:da:bc:f2:6c:b4:6c:f7:
         c2:0d:12:96:fa:fc:0f:c5:4c:53:f2:b9:61:b8:8d:5f:8b:ad:
         06:29:50:c0:c7:fd:fb:c1:a8:b9:0c:13:ef:62:7b:e0:67:c4:
         3c:90:13:1c:a9:ae:f7:e9:e3:b1:d4:3f:d0:58:7a:04:93:ff:
         ed:3f:e0:ff:b7:a4:b7:85:b3:7e:06:39:5f:16:dd:b0:17:1e:
         f7:7e:4e:cc:ef:68:7f:9b:f2:6d:16:e5:ae:f3:ad:0c:18:38:
         71:7e:f6:14:4c:0b:09:ea:e7:2c:47:36:a6:43:33:0f:43:9c:
         3d:1f:d0:ba:32:90:7b:b5:a5:9f:ce:73:50:a0:fa:a4:cf:e3:
         f4:ae:e1:c1:7e:71:fe:4f:c5:ba:1b:d0:b5:25:a4:1b:43:92:
         09:fd:11:cf:7e:64:d2:10:f9:a8:68:61:62:40:1c:47:a5:e4:
         8f:e5:b3:64:33:2e:4c:76:64:f5:ed:25:64:a1:7b:0a:47:1b:
         97:92:ee:22:87:9a:cd:4c:11:bc:a6:be:f3:a5:06:83:f8:2c:
         54:3b:ce:b1:92:0c:76:91:b8:c7:77:ab:0d:47:d3:04:86:ce:
         2b:54:28:77:1f:d6:c3:18:02:d2:65:21:a9:bb:02:a0:56:bd:
         34:42:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:53:16 2025 by rpki-client