This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
File:                     p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json)
Hash identifier:          7YV8M3c1yNM5weimwC2oe4EVzH6cj/NJPLm54cj54Ps=
Subject key identifier:   DA:01:96:20:9F:83:85:93:29:F7:4E:A8:C8:1C:80:FF:C3:44:84:62
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Certificate issuer:       /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial:       0A32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
Manifest number:          0A24
Signing time:             Thu 04 Dec 2025 19:02:22 +0000
Manifest this update:     Thu 04 Dec 2025 19:02:22 +0000
Manifest next update:     Thu 11 Dec 2025 19:02:22 +0000
Files and hashes:         1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: LHtJZM3YiHWKMFk1nQZv3uY5OHXtqwtnQjZbm18DEmk=)
                          2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: PugK/HlSlwCNhEasOZjO6B/uomD7VotHJLA2wV6jZrM=)
                          3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: hvomTHOFg3fOu5UVv4a+8zSBR7jdgf3xO/+H6ZJICO8=)
                          4: 305312F67CA011F098F1673CC4F9AE02.roa (hash: wVxD4Ia4NFpgdZDCkPWfFk89K3NA8UH13kaAx87O4u8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2610 (0xa32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
        Validity
            Not Before: Dec  4 19:02:22 2025 GMT
            Not After : Dec 11 19:02:22 2025 GMT
        Subject: CN=6931dabe-f247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:05:5b:8a:d6:a9:65:5c:81:a4:ea:19:c9:
                    61:ff:ac:d7:df:2a:54:5c:7c:bf:15:91:d3:c9:a0:
                    e9:09:c5:6b:07:1f:7a:d7:4f:ac:09:75:17:a3:16:
                    97:c5:76:fe:34:5d:4b:e3:1c:05:5c:21:be:12:16:
                    74:9e:8c:36:8d:05:49:2b:bd:91:af:23:1a:6d:63:
                    e7:74:09:97:f4:77:06:fc:1d:c1:a2:2d:79:68:32:
                    ea:e6:b8:23:de:b2:16:20:02:6d:3f:59:a0:fe:f6:
                    a8:a7:86:8a:58:df:30:30:b1:3d:06:a9:5b:7d:c9:
                    d1:08:ed:c6:1c:a8:86:3e:2b:f6:de:33:0b:df:20:
                    94:ce:4e:88:00:7d:65:b5:fb:b2:7b:be:75:8c:d3:
                    b0:cc:94:fd:38:24:6a:03:34:10:cc:91:a3:d8:52:
                    eb:b7:d2:8c:79:36:10:d9:26:28:5c:8c:66:0f:a5:
                    cf:bd:46:53:27:f1:19:c1:81:ce:d4:ab:2b:0f:53:
                    6b:51:c4:9f:8c:c1:11:3e:0a:b7:07:70:44:04:77:
                    fa:50:d2:f4:b5:ee:68:df:6f:12:36:a5:db:12:2f:
                    e0:70:60:d7:c7:24:96:d9:4c:40:10:ed:fb:53:c7:
                    2c:d1:fc:ae:c5:07:18:d4:67:1a:fe:95:96:93:58:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:01:96:20:9F:83:85:93:29:F7:4E:A8:C8:1C:80:FF:C3:44:84:62
            X509v3 Authority Key Identifier:
                keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ed:a3:a3:a9:57:55:2f:89:24:90:c1:a9:24:45:2a:fe:cc:
         2d:f1:39:7e:9c:20:e0:67:52:a5:76:54:c5:21:0d:d9:1e:65:
         23:8e:23:83:0b:6b:bb:e1:ee:0e:5e:6f:7d:d7:76:ff:94:8a:
         c1:02:f6:06:e4:30:9e:33:a4:3e:c7:d7:08:c9:14:b0:fe:8f:
         62:0b:28:f8:5a:8a:8a:50:f5:56:05:d8:a7:6e:04:ae:54:bb:
         19:b6:f5:2f:d5:af:40:d0:20:52:53:9b:3e:6d:9f:28:ae:ac:
         37:d1:84:1e:f7:38:91:76:d5:98:b3:11:b8:c6:29:fb:e1:d4:
         d0:1e:67:79:8c:0d:19:91:af:c4:13:5e:4d:68:1b:d9:49:20:
         ac:a9:8c:95:6f:74:d7:95:73:95:35:f2:d6:8f:33:fb:1c:e6:
         90:7a:c3:38:85:82:ff:af:03:8a:84:ee:6d:0c:a2:1e:e1:a6:
         4a:33:7e:3e:b2:f6:66:75:7e:ba:ae:39:8f:28:80:16:14:90:
         4e:88:df:e2:6e:cb:2b:51:cd:65:16:ba:df:ef:d5:9c:68:11:
         c2:90:69:7f:dd:58:6c:6e:95:81:64:d2:98:0d:ea:00:27:fe:
         7e:d4:e0:a7:39:26:45:30:8b:76:eb:62:3f:01:b0:5f:58:6b:
         b2:61:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:30:56 2025 by rpki-client