This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
File:                     f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json)
Hash identifier:          mbWqxAf58aRRFl8kvn1k+y/DboP1TffLLX1Q+VWOfLc=
Subject key identifier:   22:76:6E:08:6E:AC:89:E4:31:1E:44:23:EE:73:18:89:83:80:71:D4
Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53
Certificate issuer:       /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
Manifest number:          E9
Signing time:             Fri 05 Dec 2025 03:29:40 +0000
Manifest this update:     Fri 05 Dec 2025 03:29:39 +0000
Manifest next update:     Fri 12 Dec 2025 03:29:39 +0000
Files and hashes:         1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: oAENfraSkQ9qZ1ymFgkN9eYNGfOuAf5eeOUChES9BS0=)
                          2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: AW0AjmB1MBpf81Bbaj4obKJm9vXagVv8vcAISz8uehk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl
                          rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
        Validity
            Not Before: Dec  5 03:29:39 2025 GMT
            Not After : Dec 12 03:29:39 2025 GMT
        Subject: CN=693251a4-13e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:b3:45:67:e8:59:11:5c:92:5b:be:66:bc:
                    f5:49:f7:7a:c5:f0:b0:a3:16:2f:0c:13:60:c2:68:
                    94:7a:a6:5a:aa:54:22:ca:cb:65:22:f4:33:aa:00:
                    be:2c:55:2e:a3:75:7c:45:d2:2f:70:8c:31:1a:66:
                    f5:88:1c:f6:e5:06:63:db:93:80:4c:66:4c:12:71:
                    d1:c5:fa:59:60:d1:24:7b:87:85:e3:48:72:48:24:
                    98:45:ad:ba:f1:d0:e0:48:38:d0:3a:c9:f6:56:39:
                    0a:31:18:9a:05:6c:6a:19:46:97:a8:a1:25:bf:97:
                    e3:c0:a8:7e:8b:da:a4:48:38:55:f0:33:cd:08:a0:
                    8e:df:c8:4d:5c:f5:a8:23:b9:b8:47:a1:0d:b9:27:
                    6b:c8:e9:2d:05:9f:9e:70:c6:5f:f1:6b:ed:2b:45:
                    c8:0c:84:db:2a:8b:83:2b:20:45:4e:d6:e2:1f:86:
                    20:07:93:77:43:26:0c:ed:10:c6:a2:72:c6:9a:8a:
                    09:07:be:3f:d3:db:71:79:72:6c:e0:4f:ec:d3:ac:
                    09:df:f8:7d:b8:7d:6f:01:1c:a1:b6:5d:1f:12:fe:
                    19:4d:ec:b2:b4:9c:63:f1:22:20:63:07:d5:3c:75:
                    45:35:35:bb:ee:d6:75:12:2f:a3:f8:c4:ce:98:87:
                    01:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:76:6E:08:6E:AC:89:E4:31:1E:44:23:EE:73:18:89:83:80:71:D4
            X509v3 Authority Key Identifier:
                keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:93:8d:e7:c1:8d:d6:50:a2:b7:00:ff:e1:a3:1b:cd:92:af:
         c2:e1:96:2e:46:a5:4a:e6:e6:0b:77:23:50:17:ab:01:e3:f4:
         97:77:b6:da:68:3d:3b:7e:97:3f:a3:ab:05:e5:aa:1d:9c:fc:
         e4:f8:bf:9f:00:1f:c2:19:68:41:21:6e:2a:e2:da:13:82:8d:
         78:17:7b:02:fb:31:49:3f:a2:3b:4c:80:46:ec:2f:e2:c9:75:
         e8:4f:e4:fd:1b:b1:2f:a9:1d:67:fa:1b:9d:0e:39:67:6d:0f:
         a8:dc:2c:94:75:50:fa:1d:e7:d0:4e:ae:98:6e:2c:65:34:53:
         f2:20:11:21:59:e6:98:f4:ff:98:52:32:b5:ba:a9:2f:6c:1c:
         59:ae:0a:cb:63:a1:dc:f1:49:16:af:a1:f6:4e:94:b5:33:70:
         97:3c:e2:b1:cc:03:48:a4:81:64:42:58:12:2e:fc:fc:47:c9:
         b8:af:26:ff:d5:f3:c1:59:c8:54:49:78:81:45:40:fd:d6:51:
         e0:b5:a0:68:d0:dd:9c:c7:74:31:30:03:d3:2a:83:61:7d:b3:
         a7:31:bd:05:56:15:3c:2b:e9:7e:8d:ff:bf:7e:a4:ae:b7:74:
         f3:e2:54:67:89:84:c2:3a:ed:27:72:2e:1b:3b:bc:4c:92:cd:
         a1:76:8b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:45 2025 by rpki-client