This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
File:                     q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json)
Hash identifier:          NQK9uftWrMhO4fL9rbkrXN7tVjtDJPFLaoDjgyUmqPM=
Subject key identifier:   9C:59:1B:E9:94:FA:64:0A:80:31:83:68:30:67:20:62:0C:31:3D:B0
Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
Certificate issuer:       /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
Manifest number:          01E8
Signing time:             Fri 19 Dec 2025 02:02:46 +0000
Manifest this update:     Fri 19 Dec 2025 02:02:45 +0000
Manifest next update:     Fri 26 Dec 2025 02:02:45 +0000
Files and hashes:         1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: y7tIwhI6dp0V+8LSjbnoeuURulqfkoOTnwJGFzPi9Yc=)
                          2: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: kG8HKid+EZkU/hyqnFNZ4Dj2sC9Icf/i925ERR1UGyw=)
                          3: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: 7BVmNepQES6T7o+2bZV/zc2Q9T00B1Q0rsuk0jHEIvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
                          rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C91A, serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
        Validity
            Not Before: Dec 19 02:02:45 2025 GMT
            Not After : Dec 26 02:02:45 2025 GMT
        Subject: CN=6944b245-69cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:c6:57:01:02:fd:7b:ef:33:b2:42:34:54:
                    d1:57:a1:2a:7c:fe:cb:35:64:e5:5a:2c:a0:e0:e3:
                    5d:13:82:28:19:7e:04:d5:d0:dc:17:6e:d4:78:8d:
                    54:f1:2a:5d:b2:9a:6e:c5:f4:a5:55:64:d6:07:42:
                    13:08:07:1c:9b:b4:2a:98:37:22:3d:0f:72:66:e5:
                    d0:31:57:ab:7f:bc:35:5e:1f:ca:f1:6a:b6:1c:8e:
                    b4:d6:85:c0:16:2a:93:a9:92:3f:4a:1a:af:73:65:
                    69:9c:43:a9:10:60:ed:94:66:94:8d:db:dc:0a:17:
                    45:57:e5:3e:e8:1f:89:8b:8a:44:bd:77:4f:d4:37:
                    96:40:a9:54:40:2c:93:03:bf:6d:54:2b:4a:3e:b9:
                    0f:58:95:72:89:87:86:60:b1:ba:91:b7:eb:66:10:
                    e0:75:84:74:f8:d7:89:2f:3f:14:52:a1:1d:4f:7f:
                    08:18:03:2d:8b:06:0f:8d:fa:05:17:db:cd:d3:bb:
                    52:85:a1:f7:59:51:98:b9:68:ba:aa:15:87:5a:81:
                    d2:3a:5a:a6:0e:f0:de:0a:17:97:71:9a:a3:a2:47:
                    7a:1a:7f:a8:92:08:4b:40:46:35:e5:40:37:98:5d:
                    9a:76:ac:09:b1:6a:bf:79:72:61:27:c6:1d:5e:f4:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:59:1B:E9:94:FA:64:0A:80:31:83:68:30:67:20:62:0C:31:3D:B0
            X509v3 Authority Key Identifier:
                keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c4:ba:9f:99:40:d5:93:0c:d7:77:2b:d3:2e:a8:3e:eb:93:
         f0:09:f4:7d:e4:e2:f7:d1:fb:ca:45:44:9d:77:b0:f5:08:74:
         36:9d:38:88:d6:77:14:ec:60:d4:9c:bd:a1:78:55:c9:b5:ca:
         f6:0d:20:fc:84:8e:a5:43:6f:61:15:fc:03:41:46:af:f7:28:
         b1:90:2b:e2:38:77:bf:e5:ba:bd:74:b2:e6:1b:97:c9:f2:76:
         b9:d2:83:b7:8d:7e:96:36:dc:7c:94:fa:91:90:66:6e:c1:e5:
         22:9b:ac:60:99:f7:2c:84:9f:b1:c4:03:3c:de:bc:eb:c2:c9:
         78:c0:7a:fe:3d:f6:80:71:73:34:5c:1b:56:41:29:fd:a8:9c:
         ab:74:15:fd:e2:5f:30:70:d3:95:90:6f:5e:c9:47:96:57:87:
         07:34:01:e4:cc:d3:db:6b:9a:76:65:fd:a6:21:e6:5d:61:ce:
         bc:d2:c0:dd:88:7f:f9:90:f4:8d:5f:ce:0c:d7:2d:4e:c6:b8:
         d3:2e:4d:36:2e:0b:96:b2:dd:ff:2e:6b:cf:af:4f:d3:34:35:
         69:b4:97:32:ff:e1:f1:9d:3c:17:9f:4f:80:0d:5b:50:bc:c5:
         dc:c7:2e:ed:fa:e8:77:7a:48:a1:0b:84:e3:b2:18:6f:48:a1:
         6d:45:a5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:32 2025 by rpki-client