This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          HYKPzHmPTpqZVXcm3NB8NxM3v7VBe8T1DhOyiU1cT9o=
Subject key identifier:   E8:7C:0E:15:F8:BC:A3:04:10:39:1F:E3:40:3A:9A:60:D0:6A:04:62
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       086C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          081D
Signing time:             Sat 20 Dec 2025 20:31:25 +0000
Manifest this update:     Sat 20 Dec 2025 20:31:25 +0000
Manifest next update:     Sat 27 Dec 2025 20:31:25 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: GwZaL5zbCm4yf95nRhQcKP2rInG7C19+zdkwb2E4FCk=)
                          2: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: jmaQJtuQ6vSq6YYc8AsEnJn997H4f/GRY+0oxDMtloE=)
                          3: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: dVyRa6uQinj6rgpm/KJU/KE97sLzC0gECUdWL7tkdrs=)
                          4: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: RhTeRHpmCccyQhXwsz/bPbzoRbw66rFE3vQDJJkIS6I=)
                          5: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: TFKRxnOklHqBqHXkm8eeXU3NFE2mAwrypGYRlqO2PKA=)
                          6: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: rDpjDMpANY5UP6fw4xa4nyyZLU0t3Hrc+biZaf2hOUQ=)
                          7: 0989F3EE120911EB83107638C4F9AE02.roa (hash: DUQq8P61M4M6+etTKG7c0xOZ7LZFpErrHGfiypMoOQs=)
                          8: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: uEpcGMfb+CGF0z9h3Ele0SfHW0qliwyiiR2UENjBIPQ=)
                          9: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: RWYwT5yolPmZnCIMSVF9rkeuAXuXhvKasppBIkRvvpg=)
                          10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: VkWJzJFrrUcjfw7Whrx8quFhXrqF53pxpjDYVlqErEw=)
                          11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: 5xWWm5B7YxaTci+cj4GRnwpowZUui6TAGk8vPkARCxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156 (0x86c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Dec 20 20:31:25 2025 GMT
            Not After : Dec 27 20:31:25 2025 GMT
        Subject: CN=6947079d-907d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:e0:23:b9:c5:c1:ed:ad:cb:f7:91:fd:56:
                    d9:b2:bf:7b:4a:27:53:e0:84:07:99:cb:47:7d:8a:
                    20:ee:70:12:0c:99:f9:3d:4f:e6:5d:5c:df:7a:c3:
                    63:a6:9a:99:9a:33:7b:24:ac:40:2c:59:b9:e0:80:
                    1a:1b:3d:6d:69:e3:10:d6:f8:11:e4:de:69:77:ab:
                    8d:99:8f:ff:b3:a7:d3:20:bf:45:b1:bf:f9:0b:f8:
                    67:bc:0e:5d:2c:f1:09:00:69:69:97:fa:d7:16:26:
                    d6:51:03:d2:80:cd:5a:0c:28:fe:cb:ca:3b:f1:51:
                    9c:8e:71:7d:3d:30:99:b0:58:71:7f:d1:8b:cc:23:
                    c6:f6:6c:ba:ab:ca:5a:f1:ee:18:06:db:14:98:7f:
                    d5:e5:df:71:dc:1c:61:e6:c2:ed:8b:40:fa:91:4f:
                    a1:07:a0:ec:cd:54:62:e9:66:3f:69:9e:f3:04:fc:
                    b7:95:6d:95:e7:2a:7f:a2:cd:89:2f:63:74:66:06:
                    67:80:3e:68:2f:06:58:b7:3a:46:ff:6e:40:39:2a:
                    68:11:11:2e:da:28:9d:8c:70:8a:47:1a:c7:b6:df:
                    36:0a:cd:99:a0:08:42:c6:93:af:62:69:d2:5b:65:
                    54:55:cf:1f:1c:10:0e:9f:f4:bd:43:c6:08:61:6b:
                    19:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7C:0E:15:F8:BC:A3:04:10:39:1F:E3:40:3A:9A:60:D0:6A:04:62
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:dc:4d:43:45:2d:52:4d:27:b0:f7:ae:da:55:a6:aa:c3:65:
         d9:d0:f6:10:f0:5b:c9:e0:23:d2:d3:2b:67:cf:c6:c5:c7:bc:
         e4:f6:85:9b:a5:e8:5c:f4:3c:b2:d6:c8:80:9a:ed:54:64:03:
         e8:3a:5e:d3:76:cc:28:25:5f:1d:66:99:cd:3b:45:06:42:6d:
         97:bf:28:ea:a5:6a:a0:d5:83:e6:65:58:df:fd:44:ce:9c:e4:
         e1:c0:fe:1a:e0:43:2d:58:61:db:64:4f:75:89:ce:84:48:a4:
         2f:94:63:20:78:21:43:f8:62:f0:c7:64:a9:64:61:fd:44:19:
         c3:d7:e1:15:cd:ea:52:69:d8:83:f8:de:42:f5:18:86:70:8a:
         c7:dd:3b:7d:24:5c:2f:36:49:3b:c0:5c:e0:40:95:da:27:67:
         1d:60:3b:2f:d3:b0:cd:53:05:ea:23:1b:ef:a8:ca:29:76:7e:
         9f:5c:b2:43:2f:50:c8:92:31:51:d8:fb:f6:92:cc:92:d4:f7:
         39:f4:ee:95:bb:16:f6:d0:69:e6:5f:e1:5d:d1:af:49:a4:f3:
         5c:e3:06:83:7d:1d:fb:b8:78:d5:37:43:a7:5e:38:bc:be:bd:
         3f:21:35:6b:93:a9:70:87:8b:32:25:5f:3e:aa:23:6d:28:18:
         42:91:a5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:44:57 2025 by rpki-client