This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
File:                     4bzIEhAO1GAiFweJMk8cw6-_aq0.mft (raw, json)
Hash identifier:          FnWyroA1kRHNlyl6emd5IbHtli2Qh3Q0jEfM6De22Bo=
Subject key identifier:   EF:7F:AF:CB:EF:63:9B:AA:B0:10:DF:08:FF:54:80:B1:2B:0D:A3:0C
Authority key identifier: E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
Certificate issuer:       /CN=A916AAFF/serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
Manifest number:          0173
Signing time:             Mon 29 Dec 2025 03:04:02 +0000
Manifest this update:     Mon 29 Dec 2025 03:04:02 +0000
Manifest next update:     Mon 05 Jan 2026 03:04:02 +0000
Files and hashes:         1: 4bzIEhAO1GAiFweJMk8cw6-_aq0.crl (hash: +Av/r8d6SeFA6q5aF1U3CI8bD19dPzmjiMBIq4D02RY=)
                          2: 69E8AC12555811EFA88AEA24C4F9AE02.roa (hash: phqylkhfGei3IojXYcRRdYxObeB6TnyHw6jd5mx17zE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
                          rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 03:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AAFF, serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
        Validity
            Not Before: Dec 29 03:04:02 2025 GMT
            Not After : Jan  5 03:04:02 2026 GMT
        Subject: CN=6951efa2-fe2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:36:06:f7:64:5d:11:a5:17:76:96:d7:dc:
                    35:98:28:7a:b4:6b:ac:34:54:2e:72:08:0b:ae:e6:
                    4a:a1:f3:23:73:b5:1e:93:28:63:24:71:5a:97:4b:
                    de:96:e8:62:97:2a:dc:de:7d:cf:a6:66:73:21:0c:
                    3b:00:f4:58:75:fb:3e:e0:35:5e:12:23:e0:53:0d:
                    ea:49:cf:0f:bc:f7:db:ab:54:27:7c:a7:6c:2d:c5:
                    8a:94:16:3a:81:f8:ee:c9:7b:a5:c6:58:c7:1d:bf:
                    49:30:ce:f5:f0:95:c6:d0:ae:05:30:a3:54:0e:4b:
                    37:2b:53:09:ca:f6:42:8e:14:8d:5d:58:7e:21:cb:
                    df:28:ca:6e:f7:2b:24:7d:33:20:07:7b:19:f5:df:
                    ad:be:a0:f0:ad:dc:ab:3e:17:10:42:bd:f6:bd:47:
                    26:15:10:9d:fa:45:44:07:80:12:9d:3e:dd:33:80:
                    29:5f:c7:69:40:26:6f:aa:fe:cd:b7:96:f8:6f:0c:
                    82:ec:82:8d:91:de:11:82:f7:d8:8b:a7:53:0a:03:
                    0a:61:21:41:b9:30:59:b9:30:4b:80:74:53:0c:b0:
                    b4:a5:9d:91:91:46:f7:e7:ca:d3:f5:81:03:13:67:
                    43:60:e3:73:7e:ab:84:52:2f:0b:09:bc:92:b9:09:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7F:AF:CB:EF:63:9B:AA:B0:10:DF:08:FF:54:80:B1:2B:0D:A3:0C
            X509v3 Authority Key Identifier:
                keyid:E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7f:0f:45:70:01:68:c5:ef:e5:9d:3c:de:e9:ca:76:46:f0:
         aa:41:ea:50:ca:33:c2:36:ee:48:35:9d:27:5f:bd:49:4f:8c:
         91:6a:72:0d:eb:48:ca:8b:eb:b9:58:95:df:04:84:49:a2:38:
         fd:68:44:f2:07:7f:94:a1:59:6b:00:33:ce:05:2b:00:2e:13:
         0d:80:a2:aa:22:d6:32:4a:1b:a1:20:0c:03:0f:ad:dc:18:d2:
         3f:ae:f5:9d:d5:2e:b0:cd:14:d5:c2:0e:ba:d1:26:34:ce:cf:
         b3:8a:29:f9:e8:18:7d:c8:cf:58:ec:b7:10:2a:bc:dc:59:6b:
         5a:87:1e:53:1e:a7:76:be:f8:5a:92:1d:dc:ca:10:c7:81:5f:
         3a:84:fa:86:a9:6a:88:bb:bb:52:2e:c9:17:64:a5:30:1e:76:
         48:c1:7c:64:da:61:5f:24:33:5d:0b:3e:09:07:72:09:33:a0:
         90:19:35:1c:b9:1a:82:48:2d:16:81:6b:07:fd:59:5f:19:38:
         2b:6f:a4:7e:f4:2c:b8:60:c4:fc:39:a8:87:8e:71:a5:fd:2d:
         c6:f2:2e:ea:2a:67:2b:aa:a4:7b:bf:68:43:cd:26:35:f4:da:
         cc:5a:33:28:ea:24:e7:d9:c5:fd:0e:a7:93:25:a0:32:83:7e:
         1a:0c:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 08:52:49 2025 by rpki-client