This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft
File:                     E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft (raw, json)
Hash identifier:          g9ItyhbFtR71yg3E2r60hRdnVRm9L2KWuxmfPBtn1Ow=
Subject key identifier:   F3:DC:02:FE:6C:7B:3F:62:64:C2:19:D8:B1:B3:FF:30:6E:65:84:57
Authority key identifier: E4:A2:D2:F4:E4:87:25:65:FB:EB:0E:AA:00:02:F7:EB:05:9E:5C:1C
Certificate issuer:       /CN=A918C2870001/serialNumber=E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C
Certificate serial:       51A5860F01BF6C5B01C48B93C20E1F98049C7EEF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft
Manifest number:          08
Signing time:             Fri 19 Dec 2025 14:48:11 +0000
Manifest this update:     Fri 19 Dec 2025 14:43:11 +0000
Manifest next update:     Sat 20 Dec 2025 14:52:11 +0000
Files and hashes:         1: E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl (hash: 0lNBBl7G04PZIRr0y7RWgjzpau1x+LG2McxBgs6Jk4o=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl
                          rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 14:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a5:86:0f:01:bf:6c:5b:01:c4:8b:93:c2:0e:1f:98:04:9c:7e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2870001, serialNumber=E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C
        Validity
            Not Before: Dec 19 14:43:11 2025 GMT
            Not After : Dec 20 14:52:11 2025 GMT
        Subject: CN=F3DC02FE6C7B3F6264C219D8B1B3FF306E658457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:51:08:7f:35:0c:08:c8:67:8d:13:10:4f:60:
                    b4:ae:05:83:0d:fc:07:97:43:ed:ed:9b:ca:71:8e:
                    68:42:86:00:e7:36:82:25:93:2a:1f:11:32:6a:b1:
                    20:5a:fd:29:06:63:20:68:b8:63:3e:3f:e0:0e:55:
                    fa:a1:fe:da:f3:75:70:63:e0:5c:dd:db:2a:e3:66:
                    e0:f8:23:09:fc:3e:4c:cb:60:1b:27:87:19:a1:41:
                    48:ea:3d:05:53:d1:22:2c:53:b4:80:82:fe:17:c7:
                    17:3c:68:94:07:13:8c:49:dc:4c:b0:05:63:32:fb:
                    94:fe:0b:58:ed:30:e5:14:f7:92:8c:c2:db:a2:6e:
                    ec:63:ee:e6:1f:fb:6d:b4:f8:a0:c0:dc:63:66:f1:
                    35:6e:a7:7a:1f:8f:1e:c2:54:73:80:c5:bc:70:8d:
                    3a:55:c6:3b:02:8e:bb:c3:ec:8d:42:3e:46:d9:bc:
                    62:96:c8:04:ea:a1:ab:05:9b:1b:ef:f6:62:03:7b:
                    3c:24:4a:8c:7f:9d:85:93:fe:9e:ea:bc:86:e0:b9:
                    be:70:d8:44:2e:7f:1a:03:e9:65:90:b6:35:13:c0:
                    93:d6:e8:0e:ff:62:f5:c3:b8:88:4e:2e:20:48:55:
                    28:1b:ac:19:16:19:a4:07:c4:1f:06:32:79:c0:fe:
                    bf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DC:02:FE:6C:7B:3F:62:64:C2:19:D8:B1:B3:FF:30:6E:65:84:57
            X509v3 Authority Key Identifier:
                keyid:E4:A2:D2:F4:E4:87:25:65:FB:EB:0E:AA:00:02:F7:EB:05:9E:5C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ad:7d:a5:16:04:8a:09:bb:80:fc:81:37:89:67:90:44:39:
         1a:4f:d5:6a:60:5f:84:bf:8c:50:de:12:0a:53:fc:1a:52:18:
         db:c0:f0:6c:19:bf:f1:a8:14:d3:5e:a6:3c:c1:f9:7d:fc:4b:
         ce:c9:24:ba:81:37:d3:04:ff:79:b3:e1:15:7b:c7:60:93:d0:
         29:35:3b:11:1e:8d:c0:64:f8:52:f2:7c:6d:d7:69:99:3e:cf:
         c9:19:ee:24:b3:a1:c4:85:c4:e7:e3:86:f8:77:fe:97:e7:a9:
         6e:7e:ff:ae:e0:a5:d0:9e:43:21:a7:47:26:8a:a6:09:8b:a2:
         1a:5b:5e:ec:d8:a5:8f:28:2b:fe:14:c0:6e:64:cc:66:6a:e5:
         24:aa:ed:bf:b1:1f:c2:a2:43:4e:ce:47:86:ca:a6:97:f8:a3:
         d2:e9:a4:d3:2f:58:06:df:d6:c2:c3:07:4e:43:9d:b5:2e:1d:
         df:e3:78:d4:64:19:2f:4a:d4:0a:71:50:2b:8f:54:f5:b6:46:
         ce:2c:ae:82:4d:c1:1c:c1:85:ca:12:9b:e2:e8:cd:6b:a2:56:
         1e:8d:d8:39:c8:0a:b2:18:28:75:a3:b1:03:55:c9:56:f6:9a:
         c6:6f:5d:d6:30:0c:23:f0:89:d5:39:b8:70:a1:b1:6a:27:02:
         e9:49:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:41:59 2025 by rpki-client