This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File:                     B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier:          RujqZ8EqHLchCS0Dw9GvFOSYaNfezkqj4aure4aWm4Q=
Subject key identifier:   27:ED:69:0F:F7:3B:C0:7F:0E:2D:8E:6F:D2:31:62:C0:27:E7:CE:11
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer:       /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial:       1EA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number:          1E85
Signing time:             Mon 22 Dec 2025 15:52:25 +0000
Manifest this update:     Mon 22 Dec 2025 15:52:25 +0000
Manifest next update:     Mon 29 Dec 2025 15:52:25 +0000
Files and hashes:         1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: m1edUGiXXdnk9qYDzEShg5lhX+oxQICyIC4hC/KLqtk=)
                          2: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: XAUpnIWVoo2gP76XF78PGBVOZx+0l56I4zT3vqwFcwU=)
                          3: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 4P/xIWjkOZt+s6V/SN3xcWLg6ZfxIlwRFodBInoaJSg=)
                          4: BD314CEA619711EE81211277C4F9AE02.roa (hash: 16s8rqQL7ZS3OY13WYasSB/OdPD3K/KWoSmSDxk1MUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 15:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7847 (0x1ea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
        Validity
            Not Before: Dec 22 15:52:25 2025 GMT
            Not After : Dec 29 15:52:25 2025 GMT
        Subject: CN=69496939-2c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:cb:50:d8:51:91:2e:bb:93:87:94:29:ed:
                    de:20:a6:fc:89:19:1b:79:05:8c:11:41:1e:7a:bb:
                    34:33:90:58:49:d1:5e:76:32:bb:de:fe:8e:1b:71:
                    6f:e5:38:ac:e8:ec:1a:03:ce:37:92:30:94:38:1a:
                    ae:84:13:ba:5c:e2:dd:4c:6f:fb:a8:38:9d:fa:da:
                    5a:51:6d:9b:30:bc:b5:49:5a:92:f3:7c:ba:1c:aa:
                    b8:8b:65:20:8d:c9:05:ec:16:b5:d0:19:7a:de:a2:
                    60:cc:58:2a:ee:ea:c2:a5:86:31:21:6e:51:ca:9c:
                    5c:c2:4c:55:9b:87:a5:99:83:a8:17:a0:cd:22:90:
                    20:12:35:e2:ea:53:e0:df:9a:ef:0b:cc:a0:31:73:
                    1e:54:3b:33:22:1c:2f:f0:e7:c1:e9:cb:a1:a7:96:
                    de:d6:24:98:49:38:35:d7:4b:2b:83:6a:84:3c:a2:
                    ce:37:07:2a:ea:60:da:bc:59:c9:7b:d2:ce:cb:49:
                    9a:d7:2a:7e:a5:f5:4a:ab:cd:66:12:aa:14:8f:18:
                    7e:de:7c:07:6e:08:c5:65:14:bb:83:95:08:50:44:
                    29:69:03:b1:9e:05:0f:2f:26:86:51:e2:28:93:5b:
                    e3:b4:4e:dd:99:09:33:45:5b:9c:f4:4a:0b:91:55:
                    9f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:ED:69:0F:F7:3B:C0:7F:0E:2D:8E:6F:D2:31:62:C0:27:E7:CE:11
            X509v3 Authority Key Identifier:
                keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5a:60:5a:13:4b:c1:d1:2d:f4:84:10:c1:47:6f:32:37:5f:
         a2:a5:3b:e8:14:cf:d2:c9:b8:21:c5:ec:5b:ea:41:af:26:a9:
         6f:ba:ce:35:6a:9e:ef:4c:9b:74:cb:e9:7e:1e:f0:ef:26:b6:
         90:51:5b:77:8a:52:b3:46:e0:f3:58:12:b4:1e:75:0a:b4:2a:
         b3:53:45:60:4b:ad:7e:33:3d:ba:13:02:40:ff:6f:65:0f:1d:
         41:12:bb:37:56:e8:cb:d3:3f:24:83:a3:e3:91:e6:c5:c2:49:
         9c:4c:45:a4:e1:14:f5:ef:30:0e:d8:dc:e3:f6:8d:60:1d:2c:
         19:55:33:3c:7e:d4:0d:c8:14:fd:10:e2:fa:34:12:f6:b8:90:
         6c:02:9b:cf:45:c2:29:3c:66:99:10:c5:e9:07:09:f6:6a:8d:
         6d:b5:7d:af:95:1a:b3:e1:e4:ba:2f:68:af:b4:48:a2:a1:68:
         9a:7f:ef:ef:68:38:ba:37:23:06:c1:42:fd:dc:82:af:ab:47:
         45:52:27:46:20:8a:33:96:c5:f0:f2:16:d1:f9:ee:a3:54:27:
         6a:84:93:1a:64:51:50:47:fa:0f:8a:bf:02:45:b3:09:bf:ec:
         46:77:b5:9f:3c:86:fb:3e:70:b4:55:4c:7d:57:4b:d2:bc:9a:
         3e:76:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:22 2025 by rpki-client