This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
File:                     q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft (raw, json)
Hash identifier:          tEc6AGAF2sCfA5IluvPcMPJa1ac3T/DlnUICGp04pp4=
Subject key identifier:   5F:5A:85:12:C7:E2:AA:83:EE:4A:62:5C:28:E7:62:9C:FB:32:E1:69
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Certificate issuer:       /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial:       05A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
Manifest number:          059D
Signing time:             Thu 04 Dec 2025 21:50:22 +0000
Manifest this update:     Thu 04 Dec 2025 21:50:22 +0000
Manifest next update:     Thu 11 Dec 2025 21:50:22 +0000
Files and hashes:         1: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl (hash: Vc2b5AGFqxrciBEO8kFHxxJN7m2jUMCOiSMuId/qWNY=)
                          2: 012EAE068C1411EDA66E4F28C4F9AE02.roa (hash: bvK3RLeaCONliQ5wzuPxM2m0myPmTbQv9PJcnbReiQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
                          rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445 (0x5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C5C8, serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
        Validity
            Not Before: Dec  4 21:50:22 2025 GMT
            Not After : Dec 11 21:50:22 2025 GMT
        Subject: CN=6932021e-b39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:40:43:30:4b:86:d2:0c:c7:a1:26:3b:b9:
                    7b:55:3f:a8:eb:12:77:d4:50:e0:73:c7:d0:7a:3d:
                    33:ab:7d:be:b6:09:0d:ac:18:fb:7e:ee:fd:97:f6:
                    30:10:d3:c0:22:0b:d8:c9:00:aa:d8:f4:ec:5a:ab:
                    24:94:69:e1:60:15:3f:6c:c4:72:bb:2d:08:bc:56:
                    e0:cb:f8:94:3b:23:4f:6b:21:87:06:98:7d:08:16:
                    fa:1f:bd:8e:3d:ef:34:be:d5:99:b4:2c:27:bc:2d:
                    a6:a9:90:39:bb:bd:7a:4a:4c:c2:45:26:f1:86:3d:
                    b6:ec:08:92:74:03:a8:dd:1c:ab:a2:5c:60:8a:50:
                    2b:64:7c:cd:83:07:12:a7:13:b2:03:64:9e:e7:69:
                    6a:be:6c:5a:a6:18:28:68:a3:c8:93:a3:0a:40:a1:
                    19:78:38:4e:d4:ea:e0:6b:61:ce:49:b7:15:34:82:
                    f5:82:9c:cd:20:14:9d:13:93:41:40:dd:42:7c:a5:
                    77:9e:f2:29:12:31:fd:e5:4d:21:15:bc:d4:07:cc:
                    a5:da:ed:55:19:db:d4:63:b0:d2:e1:06:14:4b:78:
                    d4:f3:8d:ee:92:e8:e5:86:49:93:9f:5d:1f:3a:37:
                    76:11:1d:e4:e8:ea:4b:02:21:1e:38:a4:86:f6:2d:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5A:85:12:C7:E2:AA:83:EE:4A:62:5C:28:E7:62:9C:FB:32:E1:69
            X509v3 Authority Key Identifier:
                keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fb:33:7d:74:07:23:6c:dd:d8:f2:6f:a5:c8:a3:53:b5:2e:
         66:3e:50:c1:e1:80:74:3f:5c:7a:83:cd:7a:1a:52:f8:ae:08:
         e0:1a:bb:97:84:4d:6e:3d:09:8d:7e:fb:da:c6:a2:34:5b:fb:
         47:12:6c:74:ee:04:a0:d0:ec:1a:a9:d7:fd:47:ca:05:08:1a:
         07:c8:7c:83:1e:f2:ac:f4:3f:43:f2:7a:18:74:67:f2:b2:27:
         8f:b8:45:80:1f:6f:76:ac:ab:98:13:b4:f1:d2:50:82:47:5a:
         b2:c7:76:8b:86:be:69:80:df:c0:c9:55:cb:d9:76:55:2d:f4:
         63:2c:cb:f6:c8:64:b5:cc:29:e7:e5:d6:1c:64:94:41:cc:ab:
         ed:60:ff:f1:79:d9:6d:5c:3c:b3:16:08:ee:3a:e6:62:7d:9f:
         b6:f0:0e:80:f0:2a:0b:b4:95:3c:ac:c1:8f:f6:85:38:d5:2d:
         c5:75:38:d5:d5:58:0f:c4:09:60:2d:3a:87:cf:01:f5:2e:45:
         12:9c:35:0c:ff:2e:fe:df:57:c7:8d:48:83:53:9f:c4:87:81:
         7b:17:c6:0f:9c:7f:47:96:bc:c2:37:76:42:ca:f4:8a:ca:92:
         c5:c5:86:c9:0e:0b:53:ce:21:d6:b7:24:bb:9a:51:45:f2:71:
         a5:d4:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:29:54 2025 by rpki-client