This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
File:                     g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json)
Hash identifier:          FCZwLjLTebpqZbQ45OeOeUSOYujJ9UAULcf3VK+3Gk0=
Subject key identifier:   23:F6:AB:6A:5B:68:58:7B:3C:61:7D:24:BD:86:A5:A0:E9:65:BE:2D
Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
Certificate issuer:       /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
Manifest number:          C0
Signing time:             Mon 29 Dec 2025 05:08:40 +0000
Manifest this update:     Mon 29 Dec 2025 05:08:39 +0000
Manifest next update:     Mon 05 Jan 2026 05:08:39 +0000
Files and hashes:         1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: 2/3E9DqjWXUhnTQNcVkUh5m8VM3He6D84jSf+MDhTmg=)
                          2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: zf4VXC00w+/l84Z7TgltHAME/FckYYEPpSyVri8Ai2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
                          rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 05:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
        Validity
            Not Before: Dec 29 05:08:39 2025 GMT
            Not After : Jan  5 05:08:39 2026 GMT
        Subject: CN=69520cd8-a4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:19:79:34:1e:6d:5a:ea:d6:a0:b4:0a:0d:
                    da:8b:bd:f8:bd:ae:af:7d:c8:f4:0b:16:7d:ad:2f:
                    7c:f8:35:ae:45:4a:ff:ef:84:f9:e8:93:9d:65:46:
                    83:d5:e8:f2:eb:1e:71:75:52:d1:0f:34:17:88:4f:
                    47:be:c1:d1:cf:c0:59:c5:c6:be:88:88:d8:59:27:
                    7a:cc:d1:c2:94:03:e4:f0:5e:75:bc:62:4a:b3:da:
                    60:cc:a7:fc:0c:09:79:65:45:f4:04:49:2e:8d:ef:
                    e1:ae:bc:81:5e:c2:b2:73:4f:c6:7b:48:03:e8:64:
                    87:81:31:3b:02:35:44:22:d4:a9:8d:d0:56:ee:90:
                    b8:2f:87:64:aa:1f:ae:2f:4d:4a:c8:d1:df:e0:ba:
                    e5:ec:e9:25:64:3f:b8:d5:df:aa:97:7d:65:82:48:
                    69:8b:ab:a2:e9:86:ec:e1:6e:83:76:d7:64:74:f5:
                    fe:20:4d:a2:8e:1e:2b:25:51:03:d8:20:13:b4:01:
                    17:d6:90:12:4c:c4:98:a9:08:a7:1f:81:99:25:e4:
                    be:a0:2b:05:e3:c6:a2:48:31:a6:12:42:58:80:16:
                    aa:93:4f:52:66:3f:d2:1f:58:be:a8:ab:d3:5b:a9:
                    7e:b5:4f:3a:bb:ec:42:8e:ac:53:3f:5f:c9:60:c1:
                    e1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F6:AB:6A:5B:68:58:7B:3C:61:7D:24:BD:86:A5:A0:E9:65:BE:2D
            X509v3 Authority Key Identifier:
                keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:aa:ea:68:a0:21:83:38:47:11:ef:30:2e:cb:bb:d7:6f:d9:
         2f:3d:67:79:ad:76:b7:93:9d:fa:d6:71:39:ec:f6:01:88:54:
         f1:e1:9b:85:78:26:28:6a:c0:fa:6b:4e:5c:d0:0a:c5:7b:7e:
         df:fa:d6:6e:20:de:a4:b8:22:4f:d0:de:a0:90:e6:7f:33:13:
         cd:b0:54:d7:98:7a:0a:61:ac:6d:ac:01:4b:ea:e4:60:54:10:
         fa:78:33:32:5a:98:35:64:8b:5b:90:86:c5:be:f8:38:26:6f:
         61:50:96:46:4d:a5:bf:98:16:96:99:a1:19:12:f1:d9:44:92:
         03:e4:fa:37:fc:6e:9b:4d:75:e2:c5:4e:8b:f0:09:a1:23:76:
         fb:78:99:27:cb:ef:55:d5:61:f1:41:ae:22:28:e9:58:9a:ea:
         df:19:e8:42:cf:b3:60:83:9d:03:6d:73:43:3f:92:d3:10:f6:
         ad:99:18:0c:29:0f:71:11:bc:de:27:1a:b8:c5:8f:92:43:14:
         44:39:a7:f4:17:60:84:f7:7b:f9:70:de:a5:a5:00:cf:03:88:
         f7:e3:e4:c0:a0:77:4f:54:a5:d9:34:e2:31:bb:69:86:15:12:
         f8:95:e5:5e:f9:82:42:33:1e:96:9a:f7:87:1e:6a:e8:01:61:
         c7:2f:6f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 18:45:00 2025 by rpki-client