This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
File:                     4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json)
Hash identifier:          jutGdy8IdLNsGSlR2L1aKiuqrdvtJfDNxAEq6MPVkqY=
Subject key identifier:   40:69:2F:D9:1B:5E:F1:7D:EE:8E:95:A2:83:01:DC:52:6F:9B:8A:A4
Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E
Certificate issuer:       /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
Certificate serial:       0218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
Manifest number:          0214
Signing time:             Fri 19 Dec 2025 01:26:01 +0000
Manifest this update:     Fri 19 Dec 2025 01:26:00 +0000
Manifest next update:     Fri 26 Dec 2025 01:26:00 +0000
Files and hashes:         1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: +SgjiXVGFhA5knnovs6+3mF0CVGx7nYGcvKmrscGl00=)
                          2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: n8o3xnaflWVbOqkp6JntoRCYSrJ8NdzSSuqGUsQkMzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl
                          rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142091, serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
        Validity
            Not Before: Dec 19 01:26:00 2025 GMT
            Not After : Dec 26 01:26:00 2025 GMT
        Subject: CN=6944a9a9-db32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9f:47:24:97:05:bd:a0:8d:38:bd:23:1f:4f:
                    37:21:79:3a:76:03:49:70:00:2e:4c:52:f7:19:6b:
                    8e:5f:ac:ca:78:ee:e3:d3:34:27:5c:7b:25:92:2a:
                    c7:84:16:ae:3d:4e:12:64:28:6f:4a:bd:e4:c8:ce:
                    f9:96:96:d6:91:5c:33:3d:77:86:b1:ea:5b:51:2b:
                    d5:e2:84:96:4b:14:13:e7:fe:89:2e:04:7e:26:c0:
                    36:96:e5:50:0b:a3:31:35:0c:de:82:ce:32:6d:cd:
                    a6:82:9e:88:29:31:d0:cb:e9:4a:3d:f4:76:f0:ad:
                    a5:37:ee:6b:33:f2:19:50:ac:6c:aa:1a:c7:8e:d6:
                    c2:44:54:80:d8:f0:7f:b7:a9:e0:2a:aa:1b:78:6c:
                    2f:ab:11:33:7d:a6:8f:82:a2:d2:a4:4d:0c:3e:22:
                    dd:2f:62:ec:ee:4e:32:3f:a9:60:ea:9d:1c:90:98:
                    f5:a6:49:12:34:28:3b:93:99:ef:28:a8:b8:33:d6:
                    09:3d:b2:6f:a3:9a:6f:85:5d:9b:f9:2f:fa:ba:02:
                    85:3d:d8:1a:1d:28:25:0c:12:e8:d9:ed:df:fc:95:
                    cc:73:eb:a5:16:8b:d0:f5:86:96:d5:f1:93:be:e3:
                    2f:11:4d:40:36:73:f6:78:f0:e0:88:30:53:bc:91:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:69:2F:D9:1B:5E:F1:7D:EE:8E:95:A2:83:01:DC:52:6F:9B:8A:A4
            X509v3 Authority Key Identifier:
                keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:35:d3:2c:f3:08:f5:87:fe:67:42:21:3f:1b:cd:8d:0f:a7:
         38:3f:17:9c:b1:46:ec:7a:98:3c:35:fd:18:29:4d:59:19:76:
         33:db:a1:39:37:bd:0d:ce:32:f1:c6:8c:cd:dc:9c:ff:81:16:
         57:cc:0d:00:c9:bb:a5:4c:b3:03:ad:1e:93:4f:ed:68:b3:03:
         6b:75:ae:58:c6:2c:b7:87:53:46:55:17:b7:6b:bc:e8:e6:d0:
         3e:7c:79:12:6e:85:ab:b7:df:1c:e8:4b:96:47:55:3c:d2:77:
         68:af:98:fb:a1:b0:64:05:50:4b:76:48:8f:c8:15:54:9a:87:
         95:2d:cc:82:52:d0:f3:fb:4a:dc:1f:8c:18:de:2c:a3:d6:48:
         40:b8:5e:9a:18:7d:e1:09:14:6b:70:f3:ee:74:9b:de:9f:b4:
         f4:d1:34:56:ea:43:05:d7:9c:85:03:b3:bd:77:1b:75:7e:ec:
         a2:10:2e:7a:95:fd:1e:8b:0c:8d:b1:75:ba:28:a7:87:32:50:
         36:b9:03:f7:6f:4b:b8:67:eb:eb:2e:71:47:e7:d0:53:90:84:
         9b:82:21:55:8e:37:83:87:de:3f:e3:85:c6:4f:94:f9:d8:68:
         92:13:66:0b:d7:8a:a8:a0:e2:d9:5a:51:7f:45:78:f6:9c:4b:
         0d:73:00:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:35:58 2025 by rpki-client