This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File:                     T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier:          0GC1lZt8G8VcwxUV6i4yeDvFxyuTx5eoX2lAAfI+hxc=
Subject key identifier:   BE:1D:A3:AC:F7:EF:E9:06:6F:DD:07:22:F3:FB:19:E3:0D:EA:0D:09
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer:       /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number:          0165
Signing time:             Fri 05 Dec 2025 02:07:24 +0000
Manifest this update:     Fri 05 Dec 2025 02:07:23 +0000
Manifest next update:     Fri 12 Dec 2025 02:07:23 +0000
Files and hashes:         1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: jz+Cj9drh7F6wAxpaXyX3UaeJUx9zbs66wx/8R0VLB8=)
                          2: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: yeuOidXSk24zKJ3fs5QRV6AIbEvRNYhviKgrMlbwKF0=)
                          3: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: RAjyk/fK8qUwEx1/AGy4sz8Z8uX3xfNXLzvmKTaNnbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
        Validity
            Not Before: Dec  5 02:07:23 2025 GMT
            Not After : Dec 12 02:07:23 2025 GMT
        Subject: CN=69323e5b-7b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:e0:6a:75:05:36:92:f9:3a:34:73:cc:98:
                    78:a4:7e:f3:54:be:11:09:fc:68:09:87:8c:b5:ff:
                    94:57:04:ed:aa:09:1f:61:90:9c:ff:4a:de:0a:08:
                    c2:12:1e:34:10:4c:ea:38:92:97:e1:b4:7d:cb:da:
                    30:e9:bf:ef:42:21:93:db:1e:26:0c:e5:ac:07:67:
                    65:a5:98:05:e5:af:d8:16:05:9a:cc:66:8b:44:1d:
                    c5:60:96:07:c9:db:6c:ec:b8:1d:2b:6a:1a:7e:6c:
                    60:86:ed:c8:b2:b1:0d:61:f6:8f:7a:b3:c3:fe:f0:
                    2f:06:fe:3f:97:e8:67:9c:54:d8:75:30:bf:17:32:
                    cb:f7:d1:94:4a:23:f3:d7:88:06:03:0e:09:6a:12:
                    ba:ca:20:fb:0e:ad:c9:de:b7:66:c0:62:72:cf:35:
                    ef:b4:d0:6a:07:15:6e:a1:d5:c8:5e:10:10:85:9a:
                    a8:7b:27:ec:62:a4:b3:86:3a:be:e0:1e:34:73:54:
                    1c:c5:13:b6:0a:a5:1c:37:df:5d:79:3b:23:c2:a3:
                    66:14:4c:53:c7:27:0a:72:24:19:70:8e:25:dd:d7:
                    97:9b:2c:75:25:86:45:5f:4f:06:84:23:56:d4:af:
                    5a:4b:3e:8e:23:ab:54:bd:d8:f7:96:64:ed:cc:5d:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1D:A3:AC:F7:EF:E9:06:6F:DD:07:22:F3:FB:19:E3:0D:EA:0D:09
            X509v3 Authority Key Identifier:
                keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4c:c6:ab:6e:e7:24:9d:5f:7d:69:af:d1:57:1d:04:9b:e2:
         7a:18:16:c0:3a:fb:65:0e:c5:a8:69:63:9b:8e:bd:a3:28:0d:
         ff:ac:24:63:10:e2:07:84:cd:fc:4e:42:20:5f:45:9e:00:46:
         90:57:bf:67:7b:b3:d8:4a:6b:55:ea:a0:5e:81:37:b2:0a:9b:
         85:ba:51:b2:a6:7a:87:50:80:3f:0f:bc:6e:9b:1e:e4:db:f9:
         ec:3d:a6:8e:cd:01:e7:42:ff:6e:bf:28:6f:60:1f:1a:6c:b8:
         7c:0f:f8:5f:00:58:8b:64:35:dd:10:a6:be:d6:01:e5:03:37:
         b4:40:41:cf:47:36:ab:0d:70:a3:36:0e:99:df:c9:88:ae:33:
         3f:cf:62:5c:ef:ae:7a:bd:ee:25:fb:90:ba:82:57:1f:86:77:
         e9:a0:8c:2a:82:4e:f8:54:42:1d:d5:1d:10:3f:3c:7d:bf:fa:
         a5:85:61:45:31:16:1e:d8:e4:0a:7d:cc:7e:40:0b:dc:b1:51:
         9d:37:ea:b9:52:66:82:f9:57:60:d3:95:2e:05:8f:22:6a:fb:
         4d:89:18:7b:c8:5d:c3:b1:09:42:54:99:4e:19:6a:2e:cd:06:
         40:be:ee:e9:67:48:23:e4:92:f4:07:14:0a:9e:0d:02:ca:4c:
         65:04:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:22:19 2025 by rpki-client