This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File:                     t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier:          SNkbVdMhRFY1Of9G/2YkyGuyJrqtn3avJs94yTAABNI=
Subject key identifier:   CE:43:2E:EC:2D:9E:C6:B7:44:68:60:F3:2E:91:0D:21:FA:70:9F:51
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer:       /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial:       0817
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number:          0804
Signing time:             Tue 30 Dec 2025 20:27:04 +0000
Manifest this update:     Tue 30 Dec 2025 20:27:03 +0000
Manifest next update:     Tue 06 Jan 2026 20:27:03 +0000
Files and hashes:         1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: SOA2Lg12rEv/9hmBXamVC2Ew/2RIw1VnYv9ZfMiPFg4=)
                          2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: tLbfqsiqbU5f5RIfXdeZj0H0Fi86hjwtE1k3SMfEBD0=)
                          3: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: tkd8GU4TJwZRxQo7fPIxlQckyw3LFTCGlrBbg1Zjf+g=)
                          4: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: /j+vq5djnc7hZrEiUy4WmMk+wFiISuWLXCgiYcfhmKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
                          rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 20:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
        Validity
            Not Before: Dec 30 20:27:03 2025 GMT
            Not After : Jan  6 20:27:03 2026 GMT
        Subject: CN=69543598-0cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:52:97:29:93:e6:33:9a:a6:1c:11:f7:85:
                    d4:bb:67:29:a3:2d:69:85:d2:d4:bc:11:2d:b6:a9:
                    d5:42:ae:eb:07:ca:d2:de:f8:fb:1c:43:0a:f9:23:
                    db:e9:af:fc:b1:4d:ef:d1:4b:91:2c:43:e1:62:21:
                    2a:22:93:fb:b0:25:f8:51:2c:ef:5c:9e:1e:4c:fa:
                    ec:83:67:5f:bf:f5:67:5f:7f:da:d3:21:4b:9f:b2:
                    c3:0d:cb:4f:30:41:3b:af:ac:1d:46:2b:c0:a2:b1:
                    3a:63:8b:30:87:55:6e:c6:87:bd:3e:31:fb:69:6b:
                    22:0f:87:5c:d7:c8:b1:17:82:b9:5b:9b:ec:7b:e8:
                    66:6f:5e:2b:aa:c0:14:1a:65:52:f5:9e:4e:02:86:
                    4b:14:94:9f:99:87:b9:5f:bd:49:f6:f9:e1:77:4b:
                    47:6a:25:bd:7b:28:fb:8e:91:4f:61:df:2d:94:74:
                    92:0b:c9:fb:f5:6a:83:5a:f1:0a:3b:52:c0:14:4c:
                    05:23:5a:1f:6e:24:de:1c:d8:d2:81:88:17:91:9e:
                    74:f0:5b:74:51:ea:e7:b9:a2:33:bc:f5:12:c1:64:
                    4a:d3:83:c4:50:37:6d:78:a1:45:9a:43:c3:be:a4:
                    77:bd:57:40:9a:c7:77:1e:d8:4b:19:56:64:8b:be:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:43:2E:EC:2D:9E:C6:B7:44:68:60:F3:2E:91:0D:21:FA:70:9F:51
            X509v3 Authority Key Identifier:
                keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ff:42:11:ce:d9:c3:09:2f:f0:93:b6:44:93:4e:8c:9b:9b:
         72:ae:22:9d:4c:6a:a2:d8:aa:11:aa:ff:31:c8:6b:f2:d8:a9:
         38:2f:ed:ad:2b:62:8d:2a:20:71:7b:d0:14:62:42:52:b0:f2:
         89:4a:39:7a:5d:4b:c2:18:50:b6:4d:51:c8:b4:7f:9d:ff:12:
         3e:58:ee:8e:8f:62:c0:f7:0e:e1:e9:d3:dd:40:25:a4:d2:30:
         4c:31:45:cd:50:b5:29:7a:3e:8f:97:55:30:08:f3:c5:36:77:
         5e:cb:2a:d1:a0:11:c1:ba:6f:8f:e6:03:fc:19:93:39:81:e1:
         81:23:23:51:1a:b6:60:9f:60:be:87:15:b5:7c:df:fa:da:0d:
         61:fa:92:55:28:35:15:2c:95:60:76:d6:68:ca:49:54:eb:53:
         b3:82:44:e1:2a:cc:dc:8a:aa:d8:4c:13:fb:56:14:2d:f1:7f:
         a3:de:07:7f:71:36:c6:74:e5:c3:d3:1a:e8:8c:33:2c:81:57:
         ae:37:58:92:39:de:2c:f3:9d:f2:92:26:aa:45:fc:e3:b0:13:
         e0:7c:87:0b:0b:83:ff:15:5c:c7:4b:8f:00:53:d1:63:c6:b8:
         4b:6a:9f:f1:c5:a7:7e:6e:af:8a:21:ee:38:c8:d5:4b:53:7d:
         a2:cd:fd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:02:57 2025 by rpki-client