This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
File:                     R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft (raw, json)
Hash identifier:          yayow4FeqmBZLLVCqCIlFqyfzY0rlcipJU2Jywk+bUU=
Subject key identifier:   34:A0:84:FF:BC:89:49:FE:2A:85:3C:C4:C4:8F:4B:26:98:2D:A4:C4
Authority key identifier: 47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE
Certificate issuer:       /CN=A911F753/serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
Manifest number:          55
Signing time:             Fri 05 Dec 2025 04:03:17 +0000
Manifest this update:     Fri 05 Dec 2025 04:03:17 +0000
Manifest next update:     Fri 12 Dec 2025 04:03:17 +0000
Files and hashes:         1: R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl (hash: FVpTX+OjHbnYpEFa++ckRS3hdBiZMwxOKJDIZ5aTD7o=)
                          2: 5E34D78AB13A11F08347B23DC4F9AE02.roa (hash: 7VC7xLhtQRTwz/061p8yDCut4qIajVNwZJuM4A7Qe+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl
                          rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F753, serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
        Validity
            Not Before: Dec  5 04:03:17 2025 GMT
            Not After : Dec 12 04:03:17 2025 GMT
        Subject: CN=69325985-d936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:0d:52:a9:64:8b:b1:09:cf:cf:d0:85:70:
                    ff:a0:de:a5:b8:bd:42:8c:79:44:a5:71:06:58:14:
                    f6:b5:dc:dc:1a:ed:51:d6:41:16:97:f3:11:55:f7:
                    17:24:4c:87:46:d7:2f:0e:9c:6a:b2:e5:92:5a:da:
                    04:6c:4d:40:be:44:3f:ba:3f:61:ea:cd:6f:e2:5f:
                    0c:56:dd:dc:f2:a8:d4:e7:f3:d2:1a:e1:cd:d9:3f:
                    da:20:8e:8a:31:72:3b:5a:6d:9c:4f:f6:c4:8b:47:
                    59:fe:c7:62:c4:4d:a5:56:d9:6f:0f:09:68:f1:2f:
                    97:b2:eb:64:d1:72:ba:3b:fc:82:23:67:dd:4b:a6:
                    a1:4a:a1:19:92:5a:88:bc:dc:0e:a0:a0:96:61:f1:
                    74:03:e2:69:27:c8:8c:15:2f:3c:f8:83:ae:59:c9:
                    46:3d:03:d0:4d:ba:21:3f:89:f4:84:59:cb:52:db:
                    f9:de:db:e9:2e:6a:98:ca:ac:15:24:97:af:6a:6b:
                    bd:dd:d7:b6:d7:72:24:e8:cc:fe:bb:26:86:80:d8:
                    90:a9:52:7d:17:d8:f1:1b:cd:58:4a:99:ee:ca:ab:
                    a5:44:b3:19:32:91:a4:c6:5c:23:2c:6c:c2:f9:87:
                    54:d6:cb:71:e2:bb:7b:17:b1:0a:48:f6:05:af:a8:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A0:84:FF:BC:89:49:FE:2A:85:3C:C4:C4:8F:4B:26:98:2D:A4:C4
            X509v3 Authority Key Identifier:
                keyid:47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:7f:bb:2c:9b:50:bd:36:6b:9a:44:b4:cf:ce:a1:9a:30:7e:
         6c:6e:86:72:41:b8:15:99:3e:86:34:8e:a8:be:8a:6d:8b:64:
         fb:fc:49:f0:43:99:73:a0:65:ef:07:7b:3b:0f:e1:b6:95:98:
         23:4c:ef:6e:8c:f3:20:dd:b8:53:95:6e:6e:b6:96:e4:5b:1e:
         91:c0:fb:21:28:bb:aa:22:f4:08:e0:06:09:81:76:d7:5e:d9:
         37:ec:aa:48:df:96:64:e9:6d:d4:84:a4:bf:39:71:c4:fc:70:
         b3:48:0f:1f:fc:a2:7b:eb:f7:9f:05:78:a5:1e:9d:50:15:24:
         bb:ff:9a:d3:42:9d:45:7f:b2:66:02:35:e5:95:43:81:16:d7:
         a9:34:6d:24:09:e4:6d:20:32:d6:9f:5a:dc:3f:12:d9:28:19:
         4d:64:fb:64:a5:a3:8f:0e:1c:22:56:a3:b0:3e:d5:08:04:4f:
         27:6d:e7:34:80:3d:fb:34:37:cd:6c:87:01:83:eb:e3:de:b0:
         e1:16:22:38:be:8b:e4:5a:f0:51:8d:d9:8d:e4:cd:9d:e0:47:
         54:3f:3d:83:63:d1:f2:5c:92:83:68:11:bd:fc:49:b4:d4:c1:
         ba:5b:ec:a0:1c:51:78:60:c3:2b:ab:7e:01:d8:06:c5:2a:68:
         fe:35:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:07 2025 by rpki-client