This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
File:                     4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json)
Hash identifier:          g0FKAURW6gOESuhjrk7726tLygMgdtF7GMz14XNiBd0=
Subject key identifier:   AB:E5:71:4C:EA:76:12:24:E4:12:BD:2D:F3:45:E3:49:F0:27:35:18
Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
Certificate issuer:       /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Certificate serial:       0218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
Manifest number:          0212
Signing time:             Fri 05 Dec 2025 00:40:52 +0000
Manifest this update:     Fri 05 Dec 2025 00:40:51 +0000
Manifest next update:     Fri 12 Dec 2025 00:40:51 +0000
Files and hashes:         1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: 4H2qYWj5NaBs+/lUHrIqlhwrBBuLreygUBgwfmrg3X0=)
                          2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: n/fmihpIZHCDL4WsFIyfm08swyisrTSxqfnG6noJQQ4=)
                          3: A4D24AE4C8A811F0B2500664C4F9AE02.roa (hash: 0LFTbWkvVQUDg8CWQLwjqmVzSTpNTSNnsxwRjNHTH2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
                          rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
        Validity
            Not Before: Dec  5 00:40:51 2025 GMT
            Not After : Dec 12 00:40:51 2025 GMT
        Subject: CN=69322a13-dbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:e5:70:53:75:25:d7:be:7f:5e:46:86:c4:
                    e0:d0:5f:6e:22:8a:f0:46:4e:79:e5:8c:b4:3d:32:
                    8c:00:42:a4:c6:fd:1e:b2:98:eb:40:ad:f7:9b:c0:
                    fa:01:c4:80:94:ca:11:a6:ac:ac:1a:d8:fc:e9:63:
                    fc:3c:f4:16:a6:51:72:50:18:47:95:d2:27:65:28:
                    f7:a2:81:75:f5:79:17:1c:42:99:88:c7:55:e9:1e:
                    74:82:b0:42:06:49:0a:9a:bd:b3:a9:7e:2b:41:c1:
                    b8:74:35:26:52:41:6b:89:bc:d0:f5:f8:e7:ce:0a:
                    96:63:79:bb:c3:60:b2:b1:70:9f:6b:cc:60:c8:24:
                    5f:55:2e:36:90:2a:14:19:03:e7:cc:e6:74:db:2b:
                    e3:25:66:72:29:e4:56:3c:90:f9:2b:b0:c4:c1:2b:
                    5a:3b:e9:1f:12:08:d8:27:2b:d3:fe:c6:b3:7e:c7:
                    e8:9a:39:3c:f6:0d:47:b0:ab:3c:cd:44:f5:7e:20:
                    30:d2:c1:a5:e5:31:fa:6e:c5:45:36:7f:c1:bf:2a:
                    09:b3:21:01:aa:b2:f7:b1:70:89:ab:bc:b0:a6:74:
                    c0:4e:2c:f1:88:fc:ce:a0:54:f9:f9:de:1c:f0:1a:
                    35:ba:c8:59:09:89:f4:c0:88:30:9c:4d:dd:aa:5a:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E5:71:4C:EA:76:12:24:E4:12:BD:2D:F3:45:E3:49:F0:27:35:18
            X509v3 Authority Key Identifier:
                keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:72:1c:6c:90:d0:4c:cf:02:a0:8f:9b:09:e2:21:03:6f:
         81:d5:51:55:dc:cb:ca:cb:2e:2b:bc:c9:00:12:61:17:c9:57:
         2a:df:38:82:f8:09:0a:c5:44:29:1f:f3:01:94:28:73:da:db:
         80:bb:b2:ba:f9:d7:c2:4c:29:8a:06:25:b2:7d:77:9b:b8:a0:
         99:00:c7:05:1d:de:ab:9f:7c:b9:1a:a9:19:78:48:13:52:68:
         f2:af:b8:d4:a1:e3:2f:c0:e1:47:c8:ab:25:26:23:a9:c9:27:
         c5:05:85:ce:26:04:63:3f:24:d9:dd:e2:46:91:0c:14:4f:19:
         da:b0:6e:dd:f2:7b:83:20:15:8c:34:1a:4e:f7:d4:13:17:50:
         28:31:74:85:64:13:e4:40:75:ff:59:56:44:be:0f:ad:e7:e6:
         ab:1f:1e:f1:e7:57:e0:ad:2a:52:24:23:d5:bc:b3:c6:99:0f:
         fe:81:8f:39:d0:2c:e8:05:62:3a:a2:90:a2:97:57:5e:68:5a:
         44:1e:dc:db:c0:fa:38:5f:65:f4:dc:34:76:31:e1:f7:8e:45:
         90:42:fb:f2:8f:dc:d6:23:55:2d:87:aa:52:02:a5:9c:c7:58:
         0c:fd:35:02:79:4d:60:c4:70:87:ba:4a:d8:dc:20:6f:8a:85:
         c2:f9:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:34 2025 by rpki-client