This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
File:                     c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json)
Hash identifier:          63u61CZPpJn5fmGd4T6y3l/VouCkHL6WFCg6ybm7H8I=
Subject key identifier:   3C:8C:0E:82:E8:A7:C4:5D:B8:C6:51:B0:5E:41:3A:C4:C3:2A:87:E4
Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
Certificate issuer:       /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Certificate serial:       248D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
Manifest number:          47B4
Signing time:             Thu 18 Dec 2025 15:43:02 +0000
Manifest this update:     Thu 18 Dec 2025 15:43:02 +0000
Manifest next update:     Thu 25 Dec 2025 15:43:02 +0000
Files and hashes:         1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: CD/j+26Blz13Ff4x5Nn6G1rtOuHhYiB+EbnwDNIA+Qo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9357 (0x248d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
        Validity
            Not Before: Dec 18 15:43:02 2025 GMT
            Not After : Dec 25 15:43:02 2025 GMT
        Subject: CN=69442106-5461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:e6:f8:9f:af:9e:26:d5:16:c5:0e:dd:03:
                    df:0c:fb:b1:a0:4d:15:d9:b4:26:99:af:74:aa:20:
                    d4:fe:bb:8c:71:c7:85:09:c7:3a:9d:cc:7d:ef:5d:
                    b5:f9:6c:89:47:d3:b6:0e:76:db:5e:fb:ba:a0:5e:
                    fd:5d:31:2a:77:ac:0f:2f:9f:be:66:15:01:f1:3c:
                    2f:7f:2c:2c:d1:a5:6a:9f:d8:0c:de:fa:22:28:d0:
                    5a:c1:5a:e2:a4:61:2c:3d:05:4e:34:07:d4:d1:13:
                    8a:4e:1d:81:60:1f:f5:4c:e8:8b:27:e6:97:a4:a4:
                    2b:67:51:dd:a4:7a:47:8f:74:4e:c0:b3:ee:50:97:
                    e9:9b:c9:4d:a4:de:81:2b:70:8d:d3:b3:10:5d:ca:
                    a7:98:77:b8:c7:13:a4:10:97:ee:89:4a:86:32:a7:
                    d5:36:09:06:60:ba:f1:bd:cc:d4:09:cd:e4:b4:ad:
                    0f:07:0c:86:57:d9:bb:1e:72:1f:eb:9d:b5:b8:02:
                    2a:ed:ba:08:9e:70:2b:49:97:88:6b:a8:fb:66:90:
                    0c:0e:4d:7b:fd:ca:8d:8c:83:e3:b4:b0:48:8b:d7:
                    b5:b2:21:c3:c0:af:ae:a6:92:13:88:ee:92:f6:80:
                    60:da:79:82:77:30:e5:ce:63:30:c1:27:46:f4:f7:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8C:0E:82:E8:A7:C4:5D:B8:C6:51:B0:5E:41:3A:C4:C3:2A:87:E4
            X509v3 Authority Key Identifier:
                keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4f:a1:2e:87:4d:b8:9f:ac:98:d5:fc:04:8c:82:b2:92:0e:
         f4:6d:8e:33:6e:38:e7:e2:87:97:88:ba:e0:91:69:c9:f5:86:
         d9:a9:47:8e:7a:1c:dd:4d:53:17:fd:03:4a:52:a8:ca:98:58:
         e0:ff:57:e0:4c:59:0e:a9:85:0a:a3:6b:61:44:b5:05:91:3c:
         2e:3d:0f:75:d1:b5:39:d9:4a:93:be:80:5f:c4:23:3d:55:82:
         cf:61:c6:cb:9a:47:13:75:9d:a1:44:76:5c:3e:c3:9e:a7:0c:
         e8:0c:52:04:af:7f:33:1e:8b:a5:8f:5b:d9:b9:65:d3:b1:81:
         2a:d3:27:ee:be:6d:fb:c7:eb:b1:ff:29:e4:ac:c5:f6:f9:7a:
         b0:2c:39:32:81:26:01:55:74:cc:bb:b3:04:e6:a2:dc:66:a9:
         69:6f:af:9b:84:29:4f:ce:67:dd:10:1e:78:37:54:ae:15:be:
         33:c3:e6:a5:17:e9:61:95:c8:bc:6a:56:f4:50:cc:e5:a5:de:
         1f:db:f3:51:3b:52:27:a0:af:7b:1d:bb:82:9c:02:77:f4:4f:
         b4:4d:da:42:57:a3:8f:9f:54:12:ca:0b:1e:02:9d:c3:b6:dd:
         44:d7:a2:06:d5:19:01:7d:4b:00:8b:a1:0e:d8:19:a9:8f:02:
         98:20:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:17:56 2025 by rpki-client