This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
File:                     xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json)
Hash identifier:          Ufg7wr0bguWUt71BMzCHWNbjr3nM1I84qNbb0wQcyK0=
Subject key identifier:   7F:02:B0:63:EC:AF:6E:1E:DE:02:84:A5:54:5C:94:C0:41:33:6B:A6
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7DE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
Manifest number:          4891
Signing time:             Thu 04 Dec 2025 16:37:06 +0000
Manifest this update:     Thu 04 Dec 2025 16:37:05 +0000
Manifest next update:     Thu 11 Dec 2025 16:37:05 +0000
Files and hashes:         1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: JKQvtCYpVQP/IYcHHpKTvCmD1AFv57d3oJTsbhDc0Z0=)
                          2: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: gt0aztJNpVc6KyHHIu4zVZe5pduw/IDthduLAxbDEGo=)
                          3: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: D+6z2UE89EEz0CJ5FsX6HX4bJl6z6qhGqxMwgCKoLK8=)
                          4: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: vQkkHhe44jmvD4H+y1zHy/eVtFXiwqeEyiEpP2p2y/4=)
                          5: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: +X9cqy5nzsM4rL9d9VoTaGOa9uOReDyvmQJrwlCmxzo=)
                          6: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: RUuXRFdsOwvKWwq9m+sHFH3M/ghjA85wtgfcZdC1dGw=)
                          7: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: iaZWlKC0BRK6sTPEnHrhdlX9WtoZdkozdrPT67pGJDY=)
                          8: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: L+xwzjXtQzYgvG+vHsmiVYE6Ewfl0oVoDgfwzY5pwN8=)
                          9: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: YJSyg7QmXDp0BYbgvJF4Ri7C1eahVBb5r1mM5QY6K6M=)
                          10: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: sO+0Vdvls9ZYR5Dlw5L5vQENPT3Y8xAMCjDslvaGngI=)
                          11: 638483FACB0911F0AF79E43DC4F9AE02.roa (hash: pIZq+mgsQzLzCQRGUuLSGhuDwtg0YRuP5PHB+QGFpf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
                          rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32224 (0x7de0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Dec  4 16:37:05 2025 GMT
            Not After : Dec 11 16:37:05 2025 GMT
        Subject: CN=6931b8b1-f4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:ec:99:2b:93:ce:62:f2:fd:20:e7:20:12:
                    a1:01:d3:fa:00:05:42:08:49:b8:31:01:7a:54:c4:
                    37:04:7a:70:b3:8d:35:ec:69:b9:73:93:bf:a5:4b:
                    31:c8:7b:a3:ff:ec:2f:53:b8:fa:9c:11:28:88:5c:
                    83:77:28:a2:e8:89:08:e1:a1:d8:64:ac:03:40:0b:
                    80:c6:4b:c0:7a:14:e0:81:56:88:8f:c6:a9:8f:ca:
                    2d:80:13:88:60:61:41:19:fb:13:ad:03:ab:66:2f:
                    93:cc:8f:34:22:70:a5:39:cd:31:55:76:71:54:78:
                    a6:f1:6e:c8:6b:6b:2b:0c:b1:76:46:a2:af:a4:99:
                    8d:d6:9d:ab:60:18:62:a5:aa:b6:d0:ac:e7:a9:e4:
                    79:98:65:fd:c6:ab:bb:92:9a:b2:e9:b4:cf:bd:e7:
                    74:6b:28:63:fa:82:26:d0:fd:44:72:5b:e0:62:05:
                    dd:1a:d2:98:a6:19:3c:65:f5:16:01:f7:f1:a7:af:
                    41:5b:ad:07:b0:60:5d:02:88:ea:b1:e8:ef:b4:59:
                    ae:83:3c:93:dd:4d:28:3c:88:ed:26:03:34:b5:73:
                    de:32:dc:5d:24:c0:f4:6b:e0:44:b4:43:fb:68:9b:
                    39:3e:d9:7f:e4:8c:53:3b:d2:0e:a9:c1:87:bb:bd:
                    47:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:02:B0:63:EC:AF:6E:1E:DE:02:84:A5:54:5C:94:C0:41:33:6B:A6
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:a9:00:ec:24:5e:11:a2:f4:00:49:d2:bd:32:8c:0c:82:
         3d:bd:65:da:32:b4:f3:ab:58:21:9c:bf:68:2f:99:ed:16:0d:
         5c:6b:7a:5c:d7:56:bb:46:77:5f:ef:dd:2a:e4:7c:b1:40:ec:
         46:b8:72:ae:d0:35:ff:38:ef:35:1d:db:de:79:4a:47:7e:67:
         36:4e:96:f3:3c:f0:4e:5d:84:aa:1f:7a:6e:30:c5:59:2d:62:
         d3:4e:10:99:6c:4b:00:b0:71:d6:e1:45:81:29:8d:2b:75:21:
         73:af:a5:79:bb:11:8e:e2:46:04:4c:36:1c:9b:83:6d:3e:b3:
         52:a4:5a:68:64:e7:6a:41:3f:3f:dd:75:c1:98:15:af:51:e9:
         ed:ac:99:d6:f8:04:60:76:88:1c:4c:67:5e:29:a9:20:e7:d6:
         e2:38:00:02:cb:d8:2c:da:3e:6c:59:74:b3:ff:22:23:31:c1:
         ec:59:b1:9f:41:b5:ba:d6:81:9f:8d:5b:de:b0:df:de:93:0e:
         d9:c8:e1:15:34:c7:53:52:27:9d:fc:51:9b:67:4a:03:6b:d2:
         06:0b:f2:38:e9:fa:17:e7:66:46:ac:3a:f0:b6:0a:a2:7f:4d:
         bc:69:81:6e:c9:10:ed:ca:16:fa:8c:58:8f:32:ee:1c:48:f7:
         74:56:d4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:18:52 2025 by rpki-client