This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
File:                     q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft (raw, json)
Hash identifier:          sfsyrxaqPXRK350dCEwtcM63buCqKLSlNd+5zc/hQn0=
Subject key identifier:   C9:86:96:11:E1:6D:1A:1A:0B:D8:70:3F:64:EF:91:1E:3E:82:B1:5D
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Certificate issuer:       /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial:       05AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
Manifest number:          05A4
Signing time:             Thu 18 Dec 2025 22:29:59 +0000
Manifest this update:     Thu 18 Dec 2025 22:29:58 +0000
Manifest next update:     Thu 25 Dec 2025 22:29:58 +0000
Files and hashes:         1: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl (hash: xGkn1XGg9Jw+0/lP232ExzUddnTED4CrnWgKKrT2AgQ=)
                          2: 012EAE068C1411EDA66E4F28C4F9AE02.roa (hash: bvK3RLeaCONliQ5wzuPxM2m0myPmTbQv9PJcnbReiQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
                          rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C5C8, serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
        Validity
            Not Before: Dec 18 22:29:58 2025 GMT
            Not After : Dec 25 22:29:58 2025 GMT
        Subject: CN=69448067-a3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:35:89:ab:6a:da:c1:6f:c3:c7:2d:63:a8:
                    3a:01:f5:89:d0:6a:95:f6:ae:fe:f2:2b:6a:cc:02:
                    c2:fb:17:c9:8f:1d:32:65:de:72:45:4c:e1:6a:55:
                    bb:39:82:b8:e6:4a:e9:0b:0f:bb:21:d9:d0:6a:8c:
                    a9:35:fe:3d:93:ad:65:aa:c6:3c:ff:de:10:12:78:
                    e9:48:5b:2d:47:1f:7e:98:c2:b6:2a:f8:27:f4:e5:
                    74:6d:b5:2a:b8:0d:0d:35:98:4d:0c:51:53:79:24:
                    cc:0b:9d:d0:5e:a9:52:97:ff:d4:18:f5:db:a7:b8:
                    a3:28:53:bc:dd:91:8f:a5:a8:51:f8:0f:5d:3f:79:
                    b8:e1:3b:2e:72:72:02:25:54:87:f2:8a:9d:db:e8:
                    12:a0:35:2c:9d:78:20:f4:31:8a:0f:86:19:1c:fd:
                    cf:f4:1c:a2:ec:41:1d:32:3d:08:58:b5:00:32:93:
                    b3:a7:3e:91:84:91:2f:43:a5:94:3b:85:28:8c:85:
                    c8:e5:62:88:a3:87:91:fb:5e:9f:70:51:e3:8b:c9:
                    17:9a:f4:e8:41:ad:41:64:e4:32:68:2d:b5:35:f2:
                    12:ca:d6:db:9f:8e:f9:a4:65:95:ce:31:10:ac:14:
                    49:dd:55:93:70:ec:16:30:af:76:00:95:06:21:b5:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:86:96:11:E1:6D:1A:1A:0B:D8:70:3F:64:EF:91:1E:3E:82:B1:5D
            X509v3 Authority Key Identifier:
                keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2c:ba:f2:c1:8f:2c:0c:2a:b9:9e:3e:9c:6e:a3:cc:3d:56:
         19:8e:60:ec:bb:71:8e:da:eb:3e:a1:97:c3:ad:f5:d0:9a:ff:
         2f:4c:ee:f2:3b:11:ac:cf:e5:6a:10:fb:0b:0b:94:33:5f:d1:
         15:b3:9a:16:df:ca:ba:de:7d:a2:5f:46:f0:7f:55:c2:3d:76:
         06:b5:f4:6f:f6:3d:e2:4f:08:fd:ba:4a:03:2c:0a:95:74:73:
         d6:41:24:11:56:e7:06:e3:e7:6e:43:41:9c:08:f9:9a:99:73:
         db:2f:11:30:a9:c0:16:5d:66:20:a7:d1:7d:da:eb:39:9d:0b:
         e4:86:f8:11:50:11:4f:0e:b9:ff:0e:d3:ac:bd:bf:24:a0:7c:
         79:4d:cc:4d:f0:a5:c3:af:f1:2f:79:35:87:52:e4:ee:1d:47:
         06:ea:9a:b0:76:94:f4:93:c2:ba:11:77:25:e5:1b:c0:63:de:
         d4:38:23:4e:30:24:d7:1a:c0:ec:96:8b:32:a0:4c:52:26:0b:
         0c:f3:d6:90:16:a3:ad:15:ad:34:d6:cb:06:b0:81:a2:8b:0a:
         25:cf:7e:9f:23:35:e3:25:73:c3:3e:a4:59:c2:47:d7:37:dd:
         0b:bc:49:70:46:2b:b9:49:15:1c:42:8c:62:3d:b6:37:cb:9f:
         4c:a8:00:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:37 2025 by rpki-client