This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
File:                     R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json)
Hash identifier:          plJP7jhYRF34Uktp9+8DaMURo7mL7E4XkCdP8ohIL8Y=
Subject key identifier:   2D:79:CC:87:A8:8B:70:DF:26:28:5B:21:48:7A:0B:60:36:74:D0:AC
Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85
Certificate issuer:       /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
Manifest number:          D2
Signing time:             Fri 05 Dec 2025 03:43:40 +0000
Manifest this update:     Fri 05 Dec 2025 03:43:40 +0000
Manifest next update:     Fri 12 Dec 2025 03:43:40 +0000
Files and hashes:         1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: AsoMexVV4MB1UvfpJnon2S9+f3xYlb2oJ+0ds2xx6xY=)
                          2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: X0a7N8BetaJpt9FlsdkHj3TgLJmVFX/78zUcVbqMhpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl
                          rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91427E2, serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485
        Validity
            Not Before: Dec  5 03:43:40 2025 GMT
            Not After : Dec 12 03:43:40 2025 GMT
        Subject: CN=693254ec-76c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:48:45:ce:23:45:8b:2c:2a:a7:62:79:c7:
                    e7:e1:0f:56:e0:72:a5:71:fc:dd:b0:d2:6d:05:07:
                    85:df:2e:19:d8:76:6a:83:56:4a:b4:bc:4f:9c:8c:
                    d7:41:b9:65:1f:f1:1b:a8:a1:ac:f8:a5:31:8d:c4:
                    a8:09:5c:ce:a8:d0:76:f7:ca:73:d4:79:b2:9a:7a:
                    62:31:ee:92:f3:08:1f:dc:b8:0c:8a:bc:68:31:38:
                    45:c4:aa:d6:26:73:25:49:f7:5f:9a:4c:13:60:96:
                    f9:a8:c3:19:b8:10:bd:e5:75:70:6d:34:fd:f5:6e:
                    fe:93:c1:7c:37:cb:2e:e3:17:dd:91:51:6c:df:f5:
                    e9:a4:88:d4:da:bd:73:87:43:b7:1d:d7:a4:b3:d4:
                    08:e4:4b:c0:e8:2e:a8:8e:79:22:d0:a4:a9:39:88:
                    e1:4f:9a:49:3f:8b:27:92:bc:91:5d:16:77:71:7b:
                    52:58:82:2e:6f:bd:78:45:4d:b0:41:0a:7a:8e:ff:
                    b3:d4:26:a0:ff:57:1e:2c:35:94:e4:1d:0f:0d:9e:
                    4e:31:9c:50:89:cb:37:0e:32:c1:3d:33:50:87:15:
                    a7:b0:c5:9f:02:48:33:40:21:80:cc:a2:07:c1:d2:
                    1a:6e:8d:3c:6f:aa:07:58:4c:32:03:e8:7c:f8:48:
                    cd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:79:CC:87:A8:8B:70:DF:26:28:5B:21:48:7A:0B:60:36:74:D0:AC
            X509v3 Authority Key Identifier:
                keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:bc:85:15:0c:09:78:e9:2d:e9:72:23:c3:38:07:bc:20:
         05:a1:0a:b8:c6:b1:95:c1:31:bc:e0:da:df:17:12:d1:13:94:
         67:5d:b0:be:2a:f2:ac:5e:b0:bd:53:c1:10:1a:b0:ac:5c:24:
         96:9b:bb:d8:10:f6:b5:aa:06:c0:65:d3:9c:33:2e:91:ff:13:
         66:5c:9c:3d:a9:ae:e4:b8:5a:df:6d:bc:03:b9:77:f4:f3:fe:
         c6:57:92:af:48:a6:eb:62:d4:3f:09:04:f5:f0:82:03:e2:66:
         cf:3c:2b:53:e8:8c:fa:ce:12:df:31:05:d7:14:02:ea:b3:a0:
         d4:23:be:43:7b:c3:98:81:69:5e:e6:84:06:36:e3:6f:77:91:
         fa:bd:68:f6:3c:f4:74:70:23:ef:7b:8c:27:4d:30:87:b9:23:
         2c:b6:6d:c0:ab:11:79:55:67:91:b9:4b:04:e7:4f:25:9f:a6:
         a8:50:3a:3d:e2:73:be:0f:7d:d7:c7:e4:f9:5d:8f:88:e4:08:
         db:04:bd:5e:0d:c0:a0:21:5f:2f:e8:06:c3:b0:f2:44:7e:e3:
         ff:82:40:39:88:1d:af:a8:09:49:94:36:2d:41:c1:6b:3a:c9:
         68:39:bc:2b:19:90:36:e5:77:c2:3f:5d:bc:11:dd:0e:89:3b:
         c1:e4:df:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI3RTIxMTAvBgNVBAUTKDQ3OEI0OTBFOTM5REREREYyMUFDQUM3OENCOTMxOThB
N0I4MTQ0ODUwHhcNMjUxMjA1MDM0MzQwWhcNMjUxMjEyMDM0MzQwWjAYMRYwFAYD
VQQDEw02OTMyNTRlYy03NmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwLtIRc4jRYssKqdiecfn4Q9W4HKlcfzdsNJtBQeF3y4Z2HZqg1ZKtLxPnIzX
QbllH/EbqKGs+KUxjcSoCVzOqNB298pz1HmymnpiMe6S8wgf3LgMirxoMThFxKrW
JnMlSfdfmkwTYJb5qMMZuBC95XVwbTT99W7+k8F8N8su4xfdkVFs3/XppIjU2r1z
h0O3Hdeks9QI5EvA6C6ojnki0KSpOYjhT5pJP4snkryRXRZ3cXtSWIIub714RU2w
QQp6jv+z1Cag/1ceLDWU5B0PDZ5OMZxQics3DjLBPTNQhxWnsMWfAkgzQCGAzKIH
wdIabo08b6oHWEwyA+h8+EjN/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC15zIeo
i3DfJihbIUh6C2A2dNCsMB8GA1UdIwQYMBaAFEeLSQ6Tnd3fIayseMuTGYp7gUSF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83ODNERkJDNDkz
NTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNkOGhyS3g0eTVNWmludUJS
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I0dEpEcE9kM2Q4aHJLeDR5NU1aaW51QlJJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjdFMi83ODNERkJDNDkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNk
OGhyS3g0eTVNWmludUJSSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHu7yFFQwJeOkt6XIjwzgHvCAFoQq4xrGVwTG84NrfFxLRE5RnXbC+
KvKsXrC9U8EQGrCsXCSWm7vYEPa1qgbAZdOcMy6R/xNmXJw9qa7kuFrfbbwDuXf0
8/7GV5KvSKbrYtQ/CQT18IID4mbPPCtT6Iz6zhLfMQXXFALqs6DUI75De8OYgWle
5oQGNuNvd5H6vWj2PPR0cCPve4wnTTCHuSMstm3AqxF5VWeRuUsE508ln6aoUDo9
4nO+D33Xx+T5XY+I5AjbBL1eDcCgIV8v6AbDsPJEfuP/gkA5iB2vqAlJlDYtQcFr
OsloObwrGZA25XfCP128Ed0OiTvB5N/+
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:54 2025 by rpki-client