This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
File:                     4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft (raw, json)
Hash identifier:          4QdNPtt3W1o9Ss8wRNxtK4zs0EjodJ7VWfc1oL7j59g=
Subject key identifier:   26:C5:EE:94:7C:0B:20:B6:E5:29:F4:EE:6E:0E:C8:FD:19:35:BA:BB
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Certificate issuer:       /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial:       03E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
Manifest number:          03D1
Signing time:             Mon 08 Dec 2025 23:04:00 +0000
Manifest this update:     Mon 08 Dec 2025 23:03:59 +0000
Manifest next update:     Mon 15 Dec 2025 23:03:59 +0000
Files and hashes:         1: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl (hash: PQXhny+2Cd45AAeTri2PBY+y6wP8wYECZEW+pqcxjyo=)
                          2: 9D5E76267A5B11EFAB107D22C4F9AE02.roa (hash: 9HTI4YsG+MVKk2SPKB83AXiFVagV7EoMAnUgolUkaKs=)
                          3: AF8F74D07A5B11EFAD45A522C4F9AE02.roa (hash: oZf6EaGqkiYgycEdcpRUWL54DKGgCS87nNNS1RZh6OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 23:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DEF, serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
        Validity
            Not Before: Dec  8 23:03:59 2025 GMT
            Not After : Dec 15 23:03:59 2025 GMT
        Subject: CN=69375960-e843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:64:39:10:2b:08:44:86:15:bb:be:aa:b9:
                    14:ed:94:85:24:1d:78:d6:62:e0:a4:ab:fc:34:95:
                    f8:a7:00:48:7f:ef:58:84:69:87:6c:46:4d:a3:e4:
                    cf:33:a0:19:dc:c4:4f:74:43:d0:2c:5a:79:4c:04:
                    da:18:06:d2:88:61:d2:c0:9f:4c:4b:62:60:72:11:
                    aa:d8:6f:c5:b5:a6:f1:3a:63:28:f4:51:34:0f:44:
                    b5:ce:60:2b:55:a9:5c:96:5d:fa:bd:cf:40:b8:b6:
                    0b:a7:61:13:f6:32:ad:ad:55:78:72:de:6a:dd:9a:
                    0b:54:10:ef:c5:41:0b:08:a2:59:f5:0a:56:6e:b1:
                    c2:d6:a9:7b:e4:41:d5:b2:ed:5e:2a:b3:e6:59:77:
                    3b:a4:b6:21:63:91:45:04:15:0a:ee:9f:bb:39:5c:
                    c0:f0:28:72:58:a1:96:a5:0c:a5:08:82:3b:77:5d:
                    38:ca:6b:c6:c6:67:7e:af:f8:ba:26:d4:26:4d:a5:
                    68:ee:9d:a5:53:e1:9f:e4:11:5c:de:e2:7e:e7:40:
                    f6:52:9a:fc:e2:60:3b:2a:53:cf:2b:34:4d:d5:43:
                    41:56:2f:06:2c:0b:f9:02:dd:57:24:d5:3c:29:a5:
                    65:0a:f1:40:46:6e:48:3b:5e:aa:fb:57:b3:57:e6:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C5:EE:94:7C:0B:20:B6:E5:29:F4:EE:6E:0E:C8:FD:19:35:BA:BB
            X509v3 Authority Key Identifier:
                keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:27:43:dc:7e:c7:13:b7:3f:c3:d8:79:f3:05:2f:c2:9c:56:
         9c:b8:dd:63:21:3a:61:67:98:fa:06:b7:ea:2e:c5:77:b2:64:
         3b:d2:da:8b:32:09:b2:bf:11:2c:7f:97:02:34:75:a2:c6:62:
         a6:df:a2:2b:6b:fe:41:b5:70:dc:39:98:c1:9b:a3:42:09:c4:
         28:17:ba:0a:3e:aa:5f:bd:ad:29:22:62:e4:8c:91:8a:70:6b:
         ee:64:c7:3a:40:21:81:c0:63:29:de:ba:ef:dc:d2:76:b7:5e:
         ff:f3:58:26:de:ce:f8:86:37:b9:18:e4:2b:7c:5d:8e:6f:c4:
         e5:12:fe:15:b5:13:83:75:09:d3:15:70:36:a8:49:b9:2c:06:
         aa:78:1d:cb:48:68:f9:78:d3:71:79:ea:01:4f:eb:10:0a:66:
         14:9f:e0:98:cb:42:8b:ab:57:3e:1c:7b:80:5b:37:fb:7b:7c:
         d7:21:7f:de:14:c3:c1:0d:15:34:3e:07:31:31:28:e3:06:c4:
         11:52:1b:e7:8e:d0:59:e8:71:c2:6f:b8:b0:7a:29:10:35:fb:
         6c:d1:2e:83:26:d8:1c:2d:38:d6:37:a2:d2:c2:d6:5f:2c:81:
         17:9c:d9:43:53:d5:3f:e2:d1:dc:84:d7:6b:1c:78:49:3b:c7:
         e5:55:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 13:32:35 2025 by rpki-client