This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File:                     4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier:          pmaGP4ZT45DW6mtln0PjcvAhhS0KOdbGCbQIVL+WqgA=
Subject key identifier:   D5:FA:1D:BD:64:12:EB:FB:4A:5A:13:FC:89:B5:E4:72:32:FE:9C:F9
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       1DBFFC3998A5D6CC31E504D4CCC4380C6C3D810E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number:          037D
Signing time:             Sun 21 Dec 2025 16:38:18 +0000
Manifest this update:     Sun 21 Dec 2025 16:33:18 +0000
Manifest next update:     Mon 22 Dec 2025 18:50:18 +0000
Files and hashes:         1: 4B1987D5160068092602529871C93EA320045A75.crl (hash: 7Tm/9gAETeYCskA066aIhrzAj0u65lr19Ub2TlYKsW0=)
                          2: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=)
                          3: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: h2bSnnI9a+kGlKn3GxEShW8TmFpFzCWMgYRzWIvLc4c=)
                          4: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 18:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bf:fc:39:98:a5:d6:cc:31:e5:04:d4:cc:c4:38:0c:6c:3d:81:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Dec 21 16:33:18 2025 GMT
            Not After : Dec 22 18:50:18 2025 GMT
        Subject: CN=D5FA1DBD6412EBFB4A5A13FC89B5E47232FE9CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:db:1b:9d:51:4f:33:87:8e:95:e9:62:64:
                    20:30:95:2f:67:f5:f0:6a:b0:2c:1c:eb:38:1c:cc:
                    cc:08:e8:01:d3:62:00:7c:dd:1b:e0:9e:10:83:8c:
                    55:f2:48:75:08:ba:69:fa:0f:d4:f9:0a:33:3c:4b:
                    e4:ab:b4:4d:13:58:bf:33:a6:22:32:b2:f3:db:f9:
                    57:e6:3f:cc:39:6a:bd:45:f9:8b:bc:e4:30:c0:64:
                    59:42:0b:8d:64:ae:75:62:e1:0c:a2:e3:23:3f:b6:
                    5e:cb:b5:02:18:17:43:17:95:6d:e1:92:10:78:ce:
                    99:96:9e:6a:d9:7c:d0:da:0a:c5:fe:4a:2a:76:e6:
                    4b:e0:70:3a:32:c3:2c:f4:fc:87:a5:87:f3:ac:74:
                    ac:6f:4a:71:3a:08:c9:8b:5a:e2:d9:d7:f1:9c:dd:
                    51:4e:96:05:67:a5:e4:97:cf:a5:15:4a:f3:44:2b:
                    2f:28:2f:c0:1b:38:ce:71:50:61:6f:54:b4:60:0a:
                    06:1b:18:c1:9f:1f:ec:e7:64:cb:83:1d:49:07:26:
                    f2:e7:9b:81:b7:fc:82:2c:54:3d:72:40:7d:d8:3f:
                    ad:53:21:a6:3b:f8:1a:ca:8d:6a:a3:61:c5:c9:c4:
                    b3:27:a4:b8:a1:67:6b:89:68:20:2d:d6:8e:83:1e:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FA:1D:BD:64:12:EB:FB:4A:5A:13:FC:89:B5:E4:72:32:FE:9C:F9
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:75:a9:52:b2:77:6d:9b:76:0d:75:2e:ff:6b:73:4c:fe:27:
         c3:c5:6c:cb:02:e0:a7:9c:ce:0f:b9:c3:a2:31:88:37:f6:e4:
         40:7e:81:6f:4f:ff:0e:30:0f:09:cd:d7:7c:28:89:f4:eb:d6:
         cd:79:2a:4f:79:68:82:ed:a2:4b:39:cd:5f:ea:da:83:79:3e:
         cc:e7:5f:31:0f:da:4d:6e:76:26:a7:79:6c:9e:c3:56:4a:97:
         79:53:99:f3:3a:32:5c:d0:a9:a5:e6:af:81:8c:56:05:1d:23:
         fd:90:4c:a1:78:7f:6d:f4:66:e5:cf:c3:40:76:7f:08:ba:1b:
         5c:0e:5d:e1:4a:7c:bb:77:66:d1:d8:60:ba:ed:96:a7:be:70:
         e3:44:ee:56:c8:00:39:48:0c:cf:be:41:f9:bf:a6:26:bf:c3:
         52:dd:4b:64:1c:59:bf:5e:79:47:ed:b5:b7:55:f3:fc:3e:8c:
         ee:66:73:8c:d9:ed:46:26:14:3e:cd:9f:58:94:8b:f4:da:c0:
         c7:04:98:25:f4:30:37:60:ed:e5:93:ed:41:18:20:4b:fb:e2:
         c1:82:f3:73:31:b6:bd:eb:9c:a6:d0:0d:49:a6:27:c0:e4:a1:
         81:a3:62:5f:14:50:36:5c:d7:fb:3e:09:5c:01:7f:5f:41:68:
         b0:af:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:43:56 2025 by rpki-client