This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
File:                     XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft (raw, json)
Hash identifier:          yUmp01zYQ7iGoXkojNL9H0upMzLQW5JrlwGJYb30iRM=
Subject key identifier:   13:BF:1B:59:F1:6A:A3:7D:FD:E6:8D:5C:F9:5F:4C:A9:37:64:E0:B3
Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48
Certificate issuer:       /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
Manifest number:          4F
Signing time:             Fri 05 Dec 2025 05:07:40 +0000
Manifest this update:     Fri 05 Dec 2025 05:07:39 +0000
Manifest next update:     Fri 12 Dec 2025 05:07:39 +0000
Files and hashes:         1: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl (hash: 5iZYAiOIH/pfU4fMtRtcfhC3x+EWlK8+odi1xja6gM0=)
                          2: BD71164A59A211F09EC86C38C4F9AE02.roa (hash: LzVxtpFkoDUrbmBrIAWx2A82oGmfgpKdIsb6/8/yXfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl
                          rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
        Validity
            Not Before: Dec  5 05:07:39 2025 GMT
            Not After : Dec 12 05:07:39 2025 GMT
        Subject: CN=6932689b-5b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:2e:1b:95:1e:3e:72:3f:da:9c:90:46:b6:
                    23:b2:b8:ba:c4:87:9f:3f:7b:e4:75:e7:8b:27:44:
                    e8:00:b9:9e:5e:91:53:a3:a3:23:00:c8:cd:6d:70:
                    75:43:be:2d:6c:a4:00:e2:f2:1a:9c:58:2c:8d:b2:
                    24:95:12:8b:6f:f6:04:6e:58:aa:5f:2b:93:55:95:
                    4d:e6:f9:67:96:f6:89:17:a1:9e:ed:1e:bf:7c:04:
                    7e:f4:f5:5e:1f:32:a6:5a:1f:89:19:00:b6:08:44:
                    06:a7:c6:a8:04:dc:ac:18:75:0f:70:6d:26:a9:18:
                    23:f9:33:b0:93:c6:a8:dd:4f:79:b1:84:16:9f:26:
                    ba:2f:f0:e0:04:a4:37:c8:11:c6:60:e0:dd:93:e8:
                    40:78:00:b2:89:b7:24:93:8c:96:45:55:76:df:60:
                    09:a2:73:bc:a9:a5:c4:a7:80:39:86:a7:10:84:2b:
                    6c:c7:53:b0:db:42:67:51:4e:ac:56:ec:d0:81:8b:
                    cd:34:f1:f3:89:04:c8:4f:35:ab:e8:1c:69:3e:9d:
                    c4:37:e3:de:7a:f9:60:0d:08:09:05:1d:17:56:41:
                    e8:21:d9:01:11:e0:50:8d:b2:82:f2:64:c1:be:a7:
                    51:02:f8:ea:2c:e0:54:71:f7:c1:7e:42:e7:08:1d:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BF:1B:59:F1:6A:A3:7D:FD:E6:8D:5C:F9:5F:4C:A9:37:64:E0:B3
            X509v3 Authority Key Identifier:
                keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:71:40:f9:c6:5e:85:76:36:75:9b:b0:6a:98:82:ba:84:84:
         98:d7:c3:1a:41:09:f6:57:18:88:55:be:81:a3:e0:16:84:f3:
         df:73:fa:8e:b8:f0:93:80:6b:d7:fc:19:b3:6a:3b:db:15:61:
         e7:b2:e9:af:94:54:41:de:21:2c:d0:d2:96:ad:92:36:02:36:
         01:6a:92:7f:56:f6:81:25:86:e0:da:d8:53:25:be:43:9b:94:
         44:ad:d2:c6:d2:bb:f1:31:29:3c:ba:0f:de:93:28:74:8b:d2:
         ee:14:aa:21:56:e0:46:a5:f3:83:f5:6f:5b:af:b5:ca:78:3f:
         97:f6:30:8d:69:6e:61:35:e1:dd:b5:56:ec:7d:9e:12:48:c3:
         e9:7a:21:4c:11:68:4f:c0:5f:cc:f0:2c:ef:6a:f5:d9:c3:40:
         89:bb:62:26:37:fd:d1:ab:fd:e5:09:52:d1:e0:bd:42:dd:b3:
         8a:98:91:af:21:e9:57:3f:31:32:a7:94:dd:f0:7d:28:75:e4:
         0e:3d:0a:62:f3:ad:0b:e9:b0:4a:69:c0:9d:84:53:7e:00:fb:
         96:3c:9f:0e:c8:e6:15:8f:11:9e:34:60:8a:76:04:75:17:d1:
         be:35:85:1c:d7:02:15:18:a7:83:d2:4c:11:b7:9e:e6:6f:35:
         5c:a2:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:33 2025 by rpki-client