This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File:                     4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier:          +SFyD6lc3b2rj7DJ9VUrSCGAxmPrAtWNDTwWSPHv8KE=
Subject key identifier:   24:30:34:A9:3A:E4:BE:5F:69:47:82:CB:9D:8C:42:C9:5F:38:11:83
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer:       /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number:          EB
Signing time:             Fri 05 Dec 2025 03:29:57 +0000
Manifest this update:     Fri 05 Dec 2025 03:29:57 +0000
Manifest next update:     Fri 12 Dec 2025 03:29:57 +0000
Files and hashes:         1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: V1hIgBEMk487VtCytNVW1MJTGL/4u6+VCVowdLHTXlY=)
                          2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: WBiQbxmKfw0D0XJ4l3vBPQQR/fNPllSnLo2npN/9Q8w=)
                          3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: /deQI9TcHTHxlvzCNYanJbYW7e/aSJZiDaf6RgvHT6g=)
                          4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: VfnSvDUvHKrYhNHc7vXNPSVppqVaI6SmYJprBmoGKlM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
                          rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
        Validity
            Not Before: Dec  5 03:29:57 2025 GMT
            Not After : Dec 12 03:29:57 2025 GMT
        Subject: CN=693251b5-94b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c2:fb:a7:12:ba:7f:7f:f3:ef:74:77:98:66:
                    23:0e:2e:97:93:05:1a:f2:f7:34:0d:3d:7c:af:bf:
                    89:ce:a6:9e:08:b0:68:57:09:1c:b4:f5:cb:a7:a2:
                    ba:b0:27:0c:a8:32:d4:73:2c:48:8f:38:4b:05:89:
                    bc:24:4b:92:ae:d7:46:48:0e:d1:9a:34:a6:85:3a:
                    85:b5:3a:c4:c7:86:06:cb:74:0f:c4:56:21:10:46:
                    0d:4f:ca:ec:8e:bf:ce:ef:0f:ba:95:bd:3d:2d:b6:
                    7a:5d:c9:36:ea:57:55:0b:fa:f0:c3:84:43:b0:94:
                    0e:e0:af:40:21:a1:20:18:e3:12:27:f9:cb:c1:1e:
                    74:20:7f:c4:58:ea:df:97:2b:36:62:64:42:b2:ac:
                    74:08:42:83:59:4d:05:15:43:62:20:86:c0:02:00:
                    85:f3:71:98:c4:9f:93:1d:7c:06:f9:91:4f:dd:66:
                    08:a0:e4:38:6c:85:f3:34:ba:bd:65:00:dd:d7:4d:
                    95:47:11:ee:fa:aa:93:26:26:a4:52:cc:17:b1:17:
                    ca:08:17:8b:da:f4:65:54:79:81:52:c9:97:e6:c7:
                    20:a3:a0:97:b5:e2:2c:91:58:43:c2:22:42:6e:37:
                    57:ba:af:e4:16:c0:a4:88:2b:b9:e2:13:78:36:d3:
                    db:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:30:34:A9:3A:E4:BE:5F:69:47:82:CB:9D:8C:42:C9:5F:38:11:83
            X509v3 Authority Key Identifier:
                keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:23:ab:2d:e5:06:ab:28:cb:31:c7:df:2d:e8:6e:24:cd:ed:
         ef:18:c1:ae:83:7b:66:c3:12:af:55:cc:04:74:b4:ce:32:c4:
         d5:07:fa:ae:9b:d5:a1:7b:33:91:a8:f9:b6:ac:22:42:27:22:
         83:83:4d:26:7e:7e:80:dc:b9:f9:cf:12:23:5b:e0:06:ec:63:
         7b:6e:b9:d7:04:6a:fd:36:bd:35:cd:63:58:02:11:da:f3:ce:
         30:30:71:e3:34:ce:a6:9c:ad:6c:0c:cd:78:ef:eb:a3:b4:ec:
         86:e9:51:08:d1:92:47:99:95:bc:04:61:cb:75:9d:9e:85:46:
         99:be:a8:77:6c:01:ba:a4:f7:eb:83:1e:e7:d0:58:f6:fc:9d:
         f3:ed:73:b3:80:75:da:f7:5d:24:88:cd:66:42:4c:a3:22:14:
         c4:0e:b7:a9:5b:fe:8b:bd:a7:46:83:fb:29:fb:af:0f:1c:4f:
         26:bf:d5:8d:f0:9b:7b:2b:82:31:a0:8d:39:22:ff:7e:77:b5:
         15:55:51:64:d4:7e:1c:61:7e:85:e1:fd:5d:81:d8:f0:b5:cd:
         41:b6:af:d4:c6:fe:ed:d4:66:36:f7:0e:bd:58:b7:67:4f:fc:
         58:5f:11:fa:e0:d9:bc:a1:92:78:ca:79:bc:f9:a1:c3:15:5a:
         57:b7:24:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:10:01 2025 by rpki-client