This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
File:                     4-snntAeg57yRYBuBFH8FVAJJqI.mft (raw, json)
Hash identifier:          klBtseEYB++2J09JCF0sC6Z7Vd5NMGD6zpPQatrT9rE=
Subject key identifier:   42:8D:54:7B:FE:AE:4F:44:CA:9E:76:DD:EB:9B:9A:A2:FC:2B:05:79
Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2
Certificate issuer:       /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
Certificate serial:       081C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
Manifest number:          0811
Signing time:             Thu 18 Dec 2025 20:29:23 +0000
Manifest this update:     Thu 18 Dec 2025 20:29:23 +0000
Manifest next update:     Thu 25 Dec 2025 20:29:23 +0000
Files and hashes:         1: 4-snntAeg57yRYBuBFH8FVAJJqI.crl (hash: /sqp+MSXKpgSvaWirpSsGHNDdlSRWfuaXwi4OaP/p4I=)
                          2: EBD94A14049A11EBB73A8663C4F9AE02.roa (hash: ZknxYLcseYgQHA8GKWCkWbIGR6Obm6R2RGgZoA7El3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl
                          rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076 (0x81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C53, serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
        Validity
            Not Before: Dec 18 20:29:23 2025 GMT
            Not After : Dec 25 20:29:23 2025 GMT
        Subject: CN=69446423-fce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:74:b1:89:e7:62:cd:bc:0d:bf:13:9d:74:e6:
                    2d:3c:f9:f2:a8:81:ba:bc:ab:ed:58:9e:39:fa:ac:
                    d7:c4:08:96:67:98:e7:8f:f6:eb:24:c8:07:f8:b2:
                    22:8d:19:83:a2:71:a3:29:a7:0f:81:9b:37:92:ae:
                    47:53:3b:f7:24:73:e3:48:3e:56:31:ba:4d:da:55:
                    41:89:7d:4c:b9:e3:a9:77:ba:2f:a8:4e:ff:40:22:
                    e2:35:85:76:8a:a9:c1:ff:7d:de:fb:01:5c:43:3a:
                    38:8c:19:c2:db:b3:77:fa:49:ed:ad:8a:bb:b3:9f:
                    ed:58:00:ed:81:5a:b8:f7:17:72:3b:13:96:d6:79:
                    83:a3:07:e0:c3:62:30:aa:46:c0:8d:9c:5c:02:1b:
                    08:54:27:99:96:d3:c6:d6:fe:3b:06:c1:08:2c:00:
                    2c:50:11:da:fc:f9:08:59:7d:56:0a:45:b4:98:10:
                    61:a7:f7:4f:20:23:73:37:f7:cd:f8:12:15:f8:dc:
                    57:ca:03:9b:68:7a:d6:81:71:8f:fd:9f:4c:58:2e:
                    b9:87:1e:94:62:d4:71:0f:c9:3a:eb:d5:55:ba:71:
                    4a:d0:54:8c:cc:76:10:9d:c5:85:a7:84:17:62:e4:
                    c4:98:63:4c:db:45:c1:3a:24:a3:c4:5e:48:24:2d:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8D:54:7B:FE:AE:4F:44:CA:9E:76:DD:EB:9B:9A:A2:FC:2B:05:79
            X509v3 Authority Key Identifier:
                keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:51:c5:03:41:2a:5c:fd:11:56:5c:2c:4e:a2:ad:2a:33:7a:
         7f:28:90:ab:6d:91:6b:9b:f5:b6:18:7e:9b:88:be:fa:05:98:
         e0:79:f4:e8:ce:59:f6:9f:80:56:4f:cb:a2:6f:cf:1b:b1:30:
         ef:87:76:52:6e:67:f4:47:bc:50:27:26:14:b5:d0:7a:d0:3b:
         db:93:30:9b:43:bb:d4:ee:79:b4:c2:7f:9f:2d:37:1b:32:5d:
         1d:94:68:94:a6:0b:d0:48:e2:09:11:e8:e1:97:e8:04:57:02:
         d7:66:b3:20:ca:04:b0:d5:bd:9d:06:d5:b4:87:5b:00:2c:f4:
         c0:84:93:d1:2b:64:2a:64:49:c2:38:2f:72:fd:2c:62:02:ae:
         d4:1a:4e:48:47:75:da:17:01:0e:fa:22:35:a7:1e:63:fe:5c:
         d4:ef:e8:fa:21:b2:6d:d6:f8:ae:48:9e:86:cd:0b:8b:23:12:
         4a:db:f7:a9:7f:79:a9:2b:7c:3c:73:9b:b3:8b:4f:cb:49:89:
         b3:32:a6:7a:14:98:32:de:91:5a:00:2c:94:ae:3f:24:95:12:
         c6:0a:04:92:04:c1:54:b3:9c:33:01:09:d7:1f:d6:ea:26:05:
         8d:05:ce:b1:d1:92:48:30:5d:8c:02:d6:5c:ea:c9:77:80:49:
         4b:8f:1c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:27 2025 by rpki-client