This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
File:                     d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json)
Hash identifier:          0UYsPVetg3Z4q3CXEzCUtIMyuRy6a11cgTKnpY4VybI=
Subject key identifier:   0C:B4:05:83:86:DA:B3:B1:87:EB:B2:A9:D2:F4:DB:9B:78:EA:90:82
Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
Certificate issuer:       /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
Certificate serial:       351C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
Manifest number:          34FD
Signing time:             Sat 20 Dec 2025 14:23:49 +0000
Manifest this update:     Sat 20 Dec 2025 14:23:48 +0000
Manifest next update:     Sat 27 Dec 2025 14:23:48 +0000
Files and hashes:         1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: Ij0hcse1kIdxjvZr1VcJelXB5lYb0Mu09XpuEB/4kYQ=)
                          2: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: NVBa+rlRQ5H1NEvktI31o0guFs4FS06Nk3OMy3vLg74=)
                          3: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: BCeU9uO3b/ub2zjygM6mgzVMfSicIdTTaBeS71Jzvv4=)
                          4: C28E34620A2011EC8B517885C4F9AE02.roa (hash: 0amdvpZS8kvZkflvgG1al3XfPNPeR60F7dyh2uQujHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl
                          rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13596 (0x351c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
        Validity
            Not Before: Dec 20 14:23:48 2025 GMT
            Not After : Dec 27 14:23:48 2025 GMT
        Subject: CN=6946b174-ca31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:1d:7a:ea:f4:5e:23:61:8e:dd:af:ef:a4:
                    ff:6c:77:70:77:42:34:a5:cf:5c:a7:87:5f:88:75:
                    24:59:0d:fb:f8:f1:2a:45:69:a1:29:d1:a5:e6:36:
                    1f:94:dc:40:1e:8e:4c:ca:bb:52:42:ba:b9:b6:3f:
                    80:95:96:31:8a:84:fe:02:19:7e:6c:09:31:e6:0b:
                    d1:b1:3a:cd:ee:f7:6b:dc:9b:52:43:1e:c3:63:ac:
                    1a:b5:3e:10:77:63:06:a4:bc:25:02:a7:49:f0:00:
                    26:4c:26:33:63:f1:e0:9f:ed:95:26:e3:34:05:41:
                    d1:cc:76:53:27:fa:fa:e9:89:d3:51:f8:51:fe:2f:
                    75:d6:3b:e1:c3:69:59:ae:7b:a7:3d:51:ae:ec:3d:
                    91:e8:a3:1d:66:89:5a:b0:07:a4:9b:8e:08:21:e5:
                    e8:99:f8:f8:09:9c:9f:07:96:00:74:5e:b1:c7:cf:
                    4d:58:b0:79:88:ec:82:2b:d9:d5:d8:70:af:cf:00:
                    f9:de:a9:07:94:e9:14:51:d4:92:2b:6e:1e:45:cd:
                    a0:9a:ff:0e:a7:d8:a9:d6:fc:5e:bf:e0:5b:09:31:
                    57:61:06:67:e4:84:0f:3a:3f:82:d4:ac:46:04:1f:
                    08:8e:98:76:af:50:b2:c8:27:b4:8b:32:a5:45:f1:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B4:05:83:86:DA:B3:B1:87:EB:B2:A9:D2:F4:DB:9B:78:EA:90:82
            X509v3 Authority Key Identifier:
                keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4a:49:88:2c:3f:88:02:3a:70:ca:e6:8f:39:b5:ef:72:9d:
         80:31:20:b9:62:a5:06:6b:fa:6b:dc:76:c6:60:45:69:d9:36:
         12:fd:b5:28:db:0c:24:94:ca:b1:be:63:dd:4e:1c:34:31:b6:
         57:8c:24:10:af:6b:95:dc:47:46:69:54:86:95:87:dd:19:8b:
         98:ec:53:69:a8:6f:5f:87:33:7e:40:49:b2:fd:ab:98:70:a8:
         1a:ff:33:1f:b1:02:02:24:c3:c0:0a:f8:2e:d4:6b:e2:37:c7:
         46:b9:a7:2c:91:72:c6:fb:b3:57:51:f4:1d:c2:d7:86:d0:59:
         88:73:bc:fd:48:e0:34:26:db:c3:35:74:18:dd:23:e6:31:d2:
         63:b1:60:e4:7a:72:2b:f3:93:8b:67:9b:11:88:b5:6e:ea:f0:
         8a:4b:fd:1f:9c:05:ef:fc:36:9b:81:ee:b8:00:6b:42:3e:47:
         d4:41:38:59:8d:66:5b:3c:ff:0b:39:92:c4:8d:4a:28:9a:48:
         aa:f8:e9:0d:ad:4b:ec:8b:94:fd:03:21:7f:95:e4:90:2f:99:
         7d:42:d6:7f:42:08:46:b7:14:5b:89:a1:dd:9b:b7:00:64:b6:
         e7:84:48:85:26:b6:2b:d3:90:b3:78:73:ee:fd:34:4e:56:a2:
         de:14:4a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:27:44 2025 by rpki-client