This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
File:                     4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json)
Hash identifier:          4y0RDR/hl4RZ4X1xXSDSrWUBkueWmNjUHS4GTniwnu0=
Subject key identifier:   9F:75:11:6E:74:A9:1D:79:1D:8F:25:B5:58:C4:67:61:B5:E6:7C:58
Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92
Certificate issuer:       /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
Manifest number:          EE
Signing time:             Fri 05 Dec 2025 03:23:25 +0000
Manifest this update:     Fri 05 Dec 2025 03:23:25 +0000
Manifest next update:     Fri 12 Dec 2025 03:23:25 +0000
Files and hashes:         1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: 5TK3Y2ac5VnEXGkFbv/aRF8bmk8ogNFz/TclO0s7VyI=)
                          2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 8GXDB+pZReiVHRhHIXWVIQQroHdHPp2tY80GMG2ZCJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
        Validity
            Not Before: Dec  5 03:23:25 2025 GMT
            Not After : Dec 12 03:23:25 2025 GMT
        Subject: CN=6932502d-7428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:74:a9:6f:b8:53:d1:48:2e:5e:45:08:6e:
                    1d:f5:81:ee:30:46:7c:c1:43:92:79:5e:06:b1:72:
                    fb:8c:47:53:b4:55:71:ba:9e:50:71:1b:d9:8b:c4:
                    ed:91:be:10:97:53:a7:7a:f5:a3:31:a8:4b:89:4e:
                    b5:5e:fc:19:2d:79:69:94:9e:2e:a4:81:75:e7:55:
                    77:41:06:fb:b3:d4:59:17:e4:36:ad:f3:e8:ec:0f:
                    6e:e5:b6:6c:f4:3a:e4:06:fd:a5:40:ca:54:3f:1e:
                    e1:fb:e4:da:55:cf:f3:bc:39:60:b2:e9:2d:fb:db:
                    75:8a:9e:06:0d:38:67:ab:72:c3:85:21:16:65:ef:
                    5b:22:c9:5c:3d:44:48:73:13:81:da:14:8f:a8:9c:
                    43:a6:aa:bc:66:35:fa:ce:0f:dd:72:85:27:e7:4d:
                    06:16:e6:26:af:5e:29:d4:6c:53:b6:58:18:99:e6:
                    95:f3:14:2b:de:e2:a7:de:5f:64:30:03:20:2c:f2:
                    9e:43:5e:23:5e:6e:00:c6:72:36:2f:a7:35:60:fa:
                    6c:d5:04:70:4f:df:c6:8c:84:01:d6:38:ea:0d:cb:
                    61:f7:60:7f:db:4c:bd:95:38:59:22:fb:31:23:ae:
                    a3:1a:ab:13:a3:4d:21:c3:48:b4:5b:a2:e0:6e:f0:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:75:11:6E:74:A9:1D:79:1D:8F:25:B5:58:C4:67:61:B5:E6:7C:58
            X509v3 Authority Key Identifier:
                keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:88:2d:6b:5a:79:48:5b:7e:00:33:f4:b4:c0:de:3e:75:dd:
         78:1b:1e:75:4a:5f:da:5f:29:1d:50:fd:f9:2b:17:12:3c:b0:
         3c:46:e1:6c:ec:15:fb:05:a6:6e:d7:c3:47:07:cc:2d:5d:e6:
         92:4f:ba:dc:01:61:ca:d2:57:c5:ab:65:9f:0b:f6:ab:d3:62:
         3e:89:ce:fa:bb:9b:7a:28:05:c4:df:39:59:c7:9b:32:12:3d:
         1f:cf:4a:dd:02:ea:db:15:99:e3:2e:9d:92:4b:87:ac:2f:0c:
         5f:39:79:b5:f0:75:5b:be:25:5e:47:51:5c:29:f4:46:96:6a:
         d2:99:26:68:13:96:32:fb:ee:ef:90:33:6e:dc:d7:da:88:be:
         3d:b1:a8:8b:2f:bd:2c:54:2d:35:2e:9b:9f:0a:a5:4f:a0:67:
         ef:27:d3:ce:51:59:aa:0f:a2:c9:1c:e1:74:bd:b7:57:7a:9e:
         9c:39:2f:73:89:13:8e:43:34:48:74:6c:f2:2c:9c:85:af:28:
         ea:0b:69:5a:d2:8a:b2:53:55:a6:44:f0:6d:09:4e:e7:cd:28:
         68:35:53:a4:ef:5d:b2:f6:06:0c:00:ff:0d:61:9b:c4:75:d0:
         b4:4a:a2:12:f9:5d:2a:ac:a9:fd:78:b6:61:3e:3f:89:7b:1e:
         eb:25:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:41:50 2025 by rpki-client