This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
File:                     MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json)
Hash identifier:          v8+KxSSzTDKFdCsGt4UAtXeYfpS+KC56z8OCMLxWNBw=
Subject key identifier:   FC:C7:E5:5C:36:44:E5:61:FD:DB:A6:66:BE:58:1C:14:B8:E8:58:69
Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
Certificate issuer:       /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Certificate serial:       04E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
Manifest number:          04E2
Signing time:             Thu 04 Dec 2025 22:19:26 +0000
Manifest this update:     Thu 04 Dec 2025 22:19:26 +0000
Manifest next update:     Thu 11 Dec 2025 22:19:26 +0000
Files and hashes:         1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: HdTShhSySchld8afPVm7l1FAbhrP/2uMnnYsTGhtOQg=)
                          2: CF272560413111ECB71E086AC4F9AE02.roa (hash: 9Err5N47iBStiiEq7wvtNEepSJzcavlaCIsiDNB7cfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
                          rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
        Validity
            Not Before: Dec  4 22:19:26 2025 GMT
            Not After : Dec 11 22:19:26 2025 GMT
        Subject: CN=693208ee-8eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:1a:a8:75:76:02:ad:b7:70:fe:c0:8b:a5:
                    c7:26:c2:a4:b3:c3:67:b9:0c:48:4f:b3:c7:10:f5:
                    61:1f:e8:27:59:77:6a:d0:5b:f5:23:3d:89:ae:d3:
                    13:ad:ae:60:d5:0f:32:16:74:ed:bf:af:a1:a2:da:
                    0c:e5:22:09:bf:54:18:91:02:54:04:07:f7:83:32:
                    4c:b5:8f:1d:85:44:0f:cc:9d:3a:3a:e4:9e:21:ff:
                    a0:0c:99:34:5d:6c:46:8d:70:6c:59:bb:62:9c:02:
                    d3:0e:6e:84:bf:1c:66:8b:45:07:ab:c5:e0:9a:44:
                    3b:f3:f0:9f:ab:4a:b8:b4:6b:05:de:eb:f0:d2:bd:
                    20:25:ba:26:6f:45:92:2e:5f:50:74:8a:8e:51:38:
                    c9:5e:17:f1:71:32:88:00:02:7b:a7:a4:f7:fc:5d:
                    e2:4a:fb:f3:97:c3:21:40:54:27:c0:fb:9d:48:19:
                    c1:79:1c:69:ee:f2:27:6e:82:90:9c:9d:f0:59:62:
                    c5:64:00:69:56:1b:fd:c2:e1:d7:6f:88:24:cd:ab:
                    1f:bf:25:13:40:2c:33:47:50:bc:a9:60:e3:37:dc:
                    82:74:7d:4e:0f:b6:2d:66:59:81:54:1b:7e:cb:7c:
                    a4:27:8c:eb:d1:75:c7:7c:37:03:af:6d:5c:f0:e8:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C7:E5:5C:36:44:E5:61:FD:DB:A6:66:BE:58:1C:14:B8:E8:58:69
            X509v3 Authority Key Identifier:
                keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:1c:f2:94:d7:37:d6:97:79:75:ea:48:20:8c:ec:03:c1:10:
         f3:c9:d9:d4:87:22:fc:70:a4:7e:ac:ea:fb:91:64:be:5c:9f:
         99:87:f1:c7:09:64:9b:2b:a5:40:26:f6:cc:bd:1d:1a:60:d7:
         b8:5b:5f:33:46:f5:17:e3:ca:17:fe:ca:48:81:53:46:9a:7c:
         af:23:6a:e2:24:ad:ef:07:35:a1:c1:92:44:39:9c:a1:90:d2:
         bd:cd:d1:9a:ed:86:56:c1:9a:53:9c:3e:67:0f:f7:50:a0:65:
         32:c7:c7:4e:05:a9:66:bc:bb:6b:95:f2:ac:02:2e:ab:e2:5f:
         29:6d:46:57:76:6a:43:4d:80:d2:34:7f:04:90:85:40:68:c2:
         07:10:c3:52:f2:63:7b:1f:bf:42:9a:c6:37:14:47:82:ab:09:
         14:26:79:46:16:44:2c:4f:f6:f6:b3:a4:f1:f2:a5:62:b9:20:
         d0:1d:cc:d2:ed:b5:35:ab:73:83:04:88:4f:91:70:7c:1c:dd:
         da:a3:32:79:bd:57:2f:d0:7b:e2:94:d0:0a:36:e4:d2:c5:ef:
         e4:5d:93:b4:02:9b:4f:57:2d:7a:8e:04:a1:d9:85:74:11:52:
         9c:a9:61:b8:ff:aa:8d:cc:e2:4c:24:67:d7:d2:00:a0:76:50:
         9e:96:79:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:03 2025 by rpki-client