This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
File:                     556bUhJjfjPKXcthdpCc4ZYhumQ.mft (raw, json)
Hash identifier:          v0Bv7IlON+pZTsEihK/VnauK8agRwjksg4JGwHeOgnI=
Subject key identifier:   0F:CF:5F:39:07:C8:94:ED:9D:22:8B:2E:9E:61:F6:F0:65:12:67:48
Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
Certificate issuer:       /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Certificate serial:       04C1
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
Manifest number:          04BA
Signing time:             Sat 20 Dec 2025 16:44:34 +0000
Manifest this update:     Sat 20 Dec 2025 16:44:33 +0000
Manifest next update:     Sat 27 Dec 2025 16:44:33 +0000
Files and hashes:         1: 556bUhJjfjPKXcthdpCc4ZYhumQ.crl (hash: MWs6lbPTCnndr9VoejMykoLiWcRUVhGKI6l2pSdIYgo=)
                          2: B7E86B40595311EC9ECF510BC4F9AE02.roa (hash: Lnyzv8UILVvSxBwFCz0H7Yvcdy+f/I6Ub3qLIXVIRQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
        Validity
            Not Before: Dec 20 16:44:33 2025 GMT
            Not After : Dec 27 16:44:33 2025 GMT
        Subject: CN=6946d271-08c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:7c:3c:91:c9:ce:ad:ed:39:9e:98:8d:99:
                    b8:49:c5:51:19:53:ec:c1:f2:c1:41:30:45:67:7a:
                    87:c3:3f:1e:a5:36:1c:cc:44:2e:c5:3a:ac:e3:dd:
                    28:4d:1e:c6:8f:6c:a2:15:cb:06:01:6d:20:4b:55:
                    45:52:4c:2a:25:ae:56:1b:69:bf:37:12:ed:43:17:
                    26:48:18:5d:c1:36:df:09:e7:8a:a1:bf:18:f7:a4:
                    65:dd:9e:84:88:f9:4f:18:3d:9a:90:c2:83:97:83:
                    ca:90:e3:82:d8:fb:99:b7:51:5e:5d:f7:dc:62:75:
                    80:41:a1:57:5e:5c:94:ad:18:38:f4:f5:7a:c8:93:
                    d4:17:3b:34:5a:ae:83:e8:43:35:1c:f0:e5:ed:78:
                    b1:84:75:a3:a2:29:04:a9:98:67:18:ef:5a:43:70:
                    00:8a:cd:df:86:7d:47:3d:ac:85:e5:81:6f:be:b4:
                    a4:9b:a0:69:92:46:58:94:fc:f0:5f:54:dd:d0:fa:
                    71:96:0e:a5:b7:e5:a2:48:14:4d:09:5d:da:11:d0:
                    c9:05:cb:e5:8c:4f:3d:2e:00:f0:a3:02:c0:b7:8a:
                    45:d3:44:99:c1:87:09:53:12:2e:77:98:5c:c5:49:
                    1d:ac:47:1e:b9:94:b0:e0:b3:b9:dd:9b:16:56:8b:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CF:5F:39:07:C8:94:ED:9D:22:8B:2E:9E:61:F6:F0:65:12:67:48
            X509v3 Authority Key Identifier:
                keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:bc:93:2c:62:69:00:0b:0d:2d:ce:da:a6:b2:34:a4:89:e7:
         6a:83:ba:40:81:df:a0:8d:0d:18:17:9a:04:38:78:e4:79:24:
         73:b1:8b:2b:af:ca:9d:cd:df:5d:fc:62:a5:5b:14:da:40:f5:
         09:56:c8:8f:71:e9:af:df:48:ba:23:b9:98:4e:93:1f:46:8c:
         20:13:fa:3b:c3:cd:43:ec:f1:f6:f0:26:7c:7f:e1:a0:64:f7:
         74:16:5e:60:ce:b5:c2:b4:98:f4:7d:d2:e7:1e:08:fe:c2:41:
         d6:8d:9b:87:ca:3f:dd:3e:e8:c6:19:41:aa:e4:62:2b:f4:62:
         d7:89:28:3c:be:2e:55:e2:c5:d7:bd:35:52:d6:5d:f1:9f:46:
         09:23:bb:e5:66:3c:a0:ba:c8:2b:8d:0c:d1:a7:9c:3c:68:fa:
         16:cd:2c:45:79:fc:6e:4f:cf:bc:d0:63:39:16:13:ba:37:e5:
         33:3b:74:00:39:ce:cd:ac:dd:2d:af:59:8e:1c:1e:95:68:a6:
         0f:28:89:66:de:e2:7d:0e:a9:cc:86:1f:81:2c:ee:3e:0f:d0:
         f8:ad:8e:0c:41:a4:3e:35:73:d7:b5:5d:2f:49:38:14:bd:c8:
         02:75:f7:3c:35:3c:6f:95:95:06:15:12:cd:90:74:4b:3a:ae:
         45:8e:2b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:24:57 2025 by rpki-client