This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File:                     T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier:          begTBDFF2pIGoI1dhZcGB6zWsfwSOx9GSn7zoIpTRkI=
Subject key identifier:   F5:5B:45:77:5F:8E:CE:69:C8:1C:40:0A:09:94:10:C7:72:EB:29:7C
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer:       /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial:       03DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number:          03DA
Signing time:             Thu 18 Dec 2025 23:51:16 +0000
Manifest this update:     Thu 18 Dec 2025 23:51:16 +0000
Manifest next update:     Thu 25 Dec 2025 23:51:16 +0000
Files and hashes:         1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: bsoilzjaTpBb8tbQRRglLpK5lC9nWj5oEFfcM7QB9uw=)
                          2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
                          rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 991 (0x3df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
        Validity
            Not Before: Dec 18 23:51:16 2025 GMT
            Not After : Dec 25 23:51:16 2025 GMT
        Subject: CN=69449374-7424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:ba:db:21:12:65:0c:a8:75:cb:eb:34:b9:
                    1e:97:ca:79:75:bb:0a:aa:09:8d:36:97:a7:45:5f:
                    5d:85:ae:15:c3:6a:80:f0:c5:1f:1f:58:9c:5b:1a:
                    4f:7d:ee:c9:c8:c8:94:e3:16:6c:de:4c:6e:09:de:
                    93:a9:20:2f:b0:5f:22:f0:24:cb:18:b3:0d:fa:4e:
                    26:41:88:18:d6:51:24:04:e3:cc:c1:e9:b2:1b:4b:
                    1f:04:b7:24:b3:8b:b4:3e:36:5c:45:2e:ea:c1:80:
                    ae:de:b6:09:44:14:b1:ec:52:6f:32:ce:aa:25:57:
                    ca:dc:60:bd:8a:f4:73:a5:e9:5a:05:9c:6b:d6:58:
                    0e:cd:62:2a:65:5e:2d:c5:03:1f:9e:c8:75:71:47:
                    4b:4c:03:62:0d:7c:86:9e:d3:8b:f8:5a:7f:c8:d9:
                    a7:02:4f:98:12:df:cb:39:3c:d0:af:95:56:f0:d6:
                    40:d2:ab:d6:a6:e6:63:bd:73:c9:e5:72:c1:92:5f:
                    af:4c:61:c1:03:a3:af:b9:2b:30:89:9a:c1:21:a8:
                    b4:03:d2:7d:7f:34:cf:2a:3f:0b:28:0c:bf:8a:59:
                    0b:b5:31:bb:43:27:40:e9:3d:e4:af:8f:83:1d:3a:
                    5c:26:f5:36:16:3b:42:f1:51:19:6b:84:a0:11:a3:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5B:45:77:5F:8E:CE:69:C8:1C:40:0A:09:94:10:C7:72:EB:29:7C
            X509v3 Authority Key Identifier:
                keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:91:b3:e4:7e:fa:7c:02:83:fd:39:4c:a0:81:23:a9:29:59:
         68:b9:df:71:b1:54:c0:4c:f4:40:fc:4a:03:07:f0:16:e6:ff:
         4d:15:47:37:f1:de:94:10:76:64:af:41:17:51:ec:0e:81:cb:
         e0:b1:69:66:45:d5:15:ee:93:5f:83:9b:0c:e4:9c:a6:4e:3c:
         fb:95:c5:c4:58:4e:78:e5:94:43:e9:72:f0:bb:3c:ab:47:2f:
         55:3f:f8:4a:81:e1:79:b2:9e:c3:29:a1:a4:1a:2c:91:62:8b:
         f5:1d:c8:69:2d:6f:45:d0:fb:d0:f0:73:24:56:bd:e4:e2:95:
         56:4e:9e:30:cb:f3:16:fc:a8:43:84:be:95:d5:d8:8e:f8:d6:
         33:75:36:f8:28:a4:02:8f:78:43:00:35:0e:62:32:10:eb:c1:
         03:55:ba:62:5f:86:00:c7:ef:39:1b:fb:5a:a8:70:2c:af:d7:
         ed:9a:7d:86:7c:ef:b2:d5:6f:47:cb:21:cc:4b:5f:20:11:ee:
         49:16:dd:47:ba:90:2b:48:88:4b:18:d3:69:18:cb:bc:39:92:
         f5:dc:88:52:33:ea:36:35:21:f9:2c:c3:49:ce:4f:a1:91:05:
         b4:3e:b2:41:6b:c9:54:e4:e1:3e:d5:94:5e:30:9b:5b:85:e2:
         e0:52:42:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:29 2025 by rpki-client