This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
File:                     MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json)
Hash identifier:          GydxP5Rmck8oRCj0IV/l0LsAxV+Nb75RzrC1ect0zmU=
Subject key identifier:   F4:E9:A9:F0:33:16:01:AE:8F:E5:FC:83:D8:E6:22:00:62:40:84:BD
Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
Certificate issuer:       /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Certificate serial:       04F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
Manifest number:          04EE
Signing time:             Sun 28 Dec 2025 22:52:37 +0000
Manifest this update:     Sun 28 Dec 2025 22:52:37 +0000
Manifest next update:     Sun 04 Jan 2026 22:52:37 +0000
Files and hashes:         1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: v7SgD4OLeLzVG6oBd7UmKX9KEcUfT1AUCpwjcjp1l5g=)
                          2: CF272560413111ECB71E086AC4F9AE02.roa (hash: 9Err5N47iBStiiEq7wvtNEepSJzcavlaCIsiDNB7cfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
                          rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 22:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
        Validity
            Not Before: Dec 28 22:52:37 2025 GMT
            Not After : Jan  4 22:52:37 2026 GMT
        Subject: CN=6951b4b5-d71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:a1:8d:b0:8c:f5:ff:6d:de:69:d9:db:89:
                    44:00:8d:8c:76:b4:ed:51:71:2d:11:1f:43:3d:8f:
                    51:f7:c5:db:5a:48:5d:d0:9e:6e:62:dc:e9:aa:75:
                    13:c6:42:e7:0c:b1:c0:02:63:76:c1:4a:a8:b5:d9:
                    40:3b:7d:d9:16:e4:89:cb:f0:70:55:d9:dd:dd:6d:
                    17:f1:bd:ab:f0:2f:7e:76:0c:18:0e:e1:9b:1d:f6:
                    ae:68:e8:0a:4f:49:68:e1:2a:d4:d8:aa:59:a8:86:
                    c1:39:aa:4c:35:7a:97:c2:3c:d2:fa:21:03:ff:2b:
                    4f:dd:70:12:5b:9a:6f:56:a3:29:42:71:84:49:01:
                    62:25:f3:c9:38:ef:fa:2e:17:28:07:8b:52:92:78:
                    93:2f:b3:7f:f6:f1:42:5d:4f:b2:b2:6b:b5:66:d1:
                    58:6c:9e:4b:1b:e7:ac:20:c1:37:c0:67:ce:2b:c5:
                    40:51:0e:27:51:e6:27:98:54:04:ad:7f:e2:ff:c9:
                    36:cf:fe:20:cd:6d:8b:a3:13:61:d6:35:35:4f:fe:
                    49:e3:47:14:f5:56:d9:bb:4c:0d:f6:d5:15:0d:ef:
                    f2:cc:54:6f:69:1e:42:89:d6:40:22:3f:d8:51:21:
                    70:e6:20:53:cc:56:36:02:cc:3d:a3:d2:b9:be:51:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E9:A9:F0:33:16:01:AE:8F:E5:FC:83:D8:E6:22:00:62:40:84:BD
            X509v3 Authority Key Identifier:
                keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:8b:4d:30:7b:aa:a4:9a:74:4f:32:3b:90:2d:c8:19:77:
         29:7f:52:a7:ae:7a:ee:86:b7:1a:2a:b7:78:ff:a7:6d:52:16:
         17:19:ea:17:08:c0:ff:20:db:a9:b9:3a:e7:d5:48:7b:f0:ec:
         b2:e1:b0:ab:c9:49:3b:ef:e5:71:e9:4d:4a:1f:e0:82:d6:ef:
         d6:a5:15:d2:db:42:02:cb:aa:f8:c8:f0:70:94:0d:62:5b:9b:
         73:1d:79:cc:30:ef:d3:e1:b3:09:68:c2:e9:58:74:23:f3:f9:
         26:fd:36:af:8e:91:3d:17:ba:15:ac:7e:0c:48:ae:80:83:49:
         2f:d9:d2:0e:2b:64:a6:5a:3c:c4:04:31:b4:24:60:af:20:0a:
         eb:a3:eb:40:7f:f5:be:d2:09:cd:f6:e8:84:6b:0d:07:48:a4:
         08:67:ab:2d:ab:27:8d:04:be:f4:81:65:23:7e:1b:b2:fa:39:
         c7:41:f5:b3:d1:c8:98:49:b2:04:da:e3:1b:74:1d:63:0a:10:
         2b:7e:c9:de:16:50:87:c9:e5:c5:f2:62:ab:57:6b:a3:48:80:
         6d:35:79:3a:48:86:fd:e6:a1:93:79:bb:a5:a6:57:2a:d5:d4:
         b6:82:35:94:3c:96:16:62:36:49:4a:0d:2e:01:07:16:bb:8d:
         e5:35:14:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 04:43:56 2025 by rpki-client