This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
File:                     4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft (raw, json)
Hash identifier:          uwXh7Qaq0NYDOraVucvSFU9TgR6UKq5ksKUwFyVqGoc=
Subject key identifier:   5D:E2:83:48:AF:8F:37:A9:04:76:AD:B5:EB:B4:9E:0B:0E:EB:C8:A5
Authority key identifier: E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E
Certificate issuer:       /CN=A9190059/serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
Manifest number:          0D
Signing time:             Fri 19 Dec 2025 06:56:49 +0000
Manifest this update:     Fri 19 Dec 2025 06:56:49 +0000
Manifest next update:     Fri 26 Dec 2025 06:56:49 +0000
Files and hashes:         1: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl (hash: 70LDsJM2nTgcKSMuS3cHyZFU1isq+ieTcqrh6tKzIEY=)
                          2: 0DA28718CE5E11F084703925C4F9AE02.roa (hash: 8U8EBiVLGcGZamqQu9ebR7wEndmlf6Ty8cVKrFdTa4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl
                          rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190059, serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
        Validity
            Not Before: Dec 19 06:56:49 2025 GMT
            Not After : Dec 26 06:56:49 2025 GMT
        Subject: CN=6944f731-e4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:55:8b:6f:eb:0d:a4:72:c2:4e:8a:d8:e9:
                    dd:38:51:57:14:a5:68:b7:c4:b2:d5:8a:40:bf:80:
                    26:c5:2a:1c:59:84:94:a9:8b:ad:a7:96:18:39:7c:
                    12:b3:81:94:9a:0d:55:02:ee:5d:f7:6f:e5:06:51:
                    d5:cb:15:05:01:64:9a:fd:1b:5a:ea:d3:82:61:f1:
                    ab:84:a7:1a:55:d9:e4:12:71:63:55:44:82:5e:52:
                    c5:b5:38:ba:85:94:18:72:93:4f:1f:ac:a3:81:69:
                    a7:16:9f:79:4a:7d:62:e2:09:a0:e2:c6:f1:1f:fd:
                    ff:11:81:db:67:e4:43:f6:46:ae:58:53:7e:ff:5f:
                    41:6b:fe:25:27:7f:35:44:13:f9:36:08:3f:c0:65:
                    90:3a:f6:b1:42:20:65:06:4f:c9:bb:d5:bd:7c:dc:
                    f4:92:9f:4a:8c:f9:50:5b:00:df:09:92:07:82:28:
                    b2:9c:39:3d:5f:af:09:d0:9d:27:d6:3f:31:fa:09:
                    7e:16:07:0b:c5:cc:1c:76:47:e3:a6:a3:72:8f:3a:
                    67:b0:12:a4:ba:8b:35:bf:f8:cd:63:9b:38:5c:6c:
                    78:5d:5e:8e:99:f9:88:33:15:30:7d:f7:32:bb:ed:
                    e2:9a:01:ec:02:f9:68:c3:c8:ee:25:10:88:81:f9:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E2:83:48:AF:8F:37:A9:04:76:AD:B5:EB:B4:9E:0B:0E:EB:C8:A5
            X509v3 Authority Key Identifier:
                keyid:E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:76:5d:0e:72:d7:76:5a:8b:46:75:ee:f9:20:9f:ae:e9:9c:
         37:ae:23:f6:95:54:56:79:3c:da:76:e6:5c:6e:56:32:e3:3d:
         f1:85:f5:0f:b4:04:c5:54:af:20:82:3b:9a:a5:a7:6d:cb:ef:
         0c:50:87:13:38:4a:ac:f0:df:9c:77:58:4a:c0:10:6a:8d:ec:
         06:48:2e:b7:7c:eb:7c:e2:c1:78:e9:7e:00:25:eb:0b:10:61:
         1d:54:73:11:30:48:2b:b6:fd:d9:ee:8c:db:45:ff:e5:2b:d3:
         e0:71:d2:19:32:63:82:c0:78:fd:49:3e:2c:ff:de:5c:39:93:
         6a:3c:c2:14:81:15:a4:c7:5e:c0:3f:a5:8c:35:c2:89:df:52:
         d2:05:9c:39:42:78:20:e5:54:a6:f1:16:5b:26:50:1d:30:ca:
         4c:09:58:d6:16:cb:21:ac:b4:74:ac:34:3c:5d:98:ad:43:82:
         13:22:cd:66:66:80:27:05:8c:16:77:57:0e:a0:ce:e9:5d:f7:
         14:81:53:3a:71:93:52:dd:9b:61:8b:61:43:b3:c6:d5:4f:20:
         e5:8c:83:5d:56:87:38:84:b6:23:09:ef:f5:42:0e:47:e1:65:
         cf:f2:cf:fe:b0:8e:c0:0b:05:e3:0c:86:35:cb:c7:44:60:7e:
         99:ba:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:58 2025 by rpki-client