This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          /P+8N3HCEnFPq+VBkv37dXejuEMMyOW6StnTCACblNw=
Subject key identifier:   61:35:80:AE:84:2D:51:45:7E:4C:C8:1F:A2:EE:B4:E6:2A:DA:3F:43
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       0859
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          0814
Signing time:             Sat 06 Dec 2025 20:13:42 +0000
Manifest this update:     Sat 06 Dec 2025 20:13:41 +0000
Manifest next update:     Sat 13 Dec 2025 20:13:41 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: o7leiqRbdDGpV2EcyPJjqxjMhoh1xwoqqLxK1Mtmv2U=)
                          2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=)
                          3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI=)
                          4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: KYrgpq+j2JdiosQSHACv2bRMY5BVzOvfLnyNf5narws=)
                          5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=)
                          6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: ZN83zETo/fGZjHplsgi4LIPj/1+Cv9tK+RMfhDQAvcM=)
                          7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: MIyFaAMcoVX+JijHyNBp9lzEprzyQwwRu4V9wwVXios=)
                          8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: CoOgUqT0FD59n+BELVSjes/s0qoXYfrPfM4+T31Fkoo=)
                          9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: Ej4Olhx/k6YWemdl2TV8Frzo1JOOuwGbcCqfJq8lBxg=)
                          10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: UjevdaGjYYh/fLHbv94Vi82GRHni+SflrmcRbP8Ltsg=)
                          11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: BJy4+HNv8kQ6Lc2CH7nff6rHz79DtOyFMzKFxBbxH6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2137 (0x859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Dec  6 20:13:41 2025 GMT
            Not After : Dec 13 20:13:41 2025 GMT
        Subject: CN=69348e75-6c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:b0:2e:29:a0:94:03:dd:58:dc:96:3c:5b:
                    2a:3e:20:43:75:96:2e:e2:54:68:63:5a:3d:bd:b0:
                    4b:1f:86:a1:3f:8c:05:ed:3b:f7:15:f2:bc:d1:49:
                    5c:9d:9d:3f:a4:75:f2:b6:aa:c5:4c:73:dd:11:0d:
                    2a:47:71:f0:c6:61:fd:fa:fe:dd:28:d6:61:3b:2a:
                    f7:7e:71:3c:0d:d8:82:5f:b4:fd:ad:63:0c:cb:da:
                    db:3f:23:f8:15:64:33:a6:38:61:d2:50:7e:25:e8:
                    88:a1:64:c1:05:5f:c7:72:cb:5c:66:03:1a:00:32:
                    76:dc:69:c1:e4:c6:82:a7:ff:9d:74:43:1c:5d:24:
                    c5:b5:cd:41:d9:e9:9c:39:94:64:92:69:cb:63:3b:
                    ac:4f:cd:1b:d4:b8:74:bb:6e:4c:41:7d:b2:79:81:
                    8b:60:56:66:fd:fd:e9:97:96:ef:dc:14:9d:0c:1a:
                    71:7b:83:b3:c4:d5:69:8f:e8:df:df:17:d0:ad:8a:
                    a1:23:c6:70:5d:66:a6:c2:2e:c9:08:ae:47:03:4e:
                    16:47:1b:1b:13:6a:ca:36:e8:b6:e2:45:a8:2b:ae:
                    e7:f1:d5:a8:19:a2:1b:2d:e1:c6:0d:38:1a:22:56:
                    24:d7:18:10:aa:98:4d:93:e5:10:38:49:31:85:57:
                    4e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:35:80:AE:84:2D:51:45:7E:4C:C8:1F:A2:EE:B4:E6:2A:DA:3F:43
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:68:69:08:a2:4a:0b:23:b1:0b:ba:ac:e0:6b:c9:7e:cb:c5:
         d4:b9:42:da:2d:28:aa:83:7f:8e:e3:a0:cd:e4:34:39:a6:1a:
         c6:9b:69:61:ed:50:7c:83:7d:f3:c1:ae:e0:3e:aa:14:e3:24:
         8d:f1:cc:50:11:ec:41:c9:37:af:50:9e:df:16:94:f0:9a:fc:
         70:cb:46:3c:26:84:4e:4a:49:6f:37:2f:ce:65:9e:13:ef:26:
         69:d4:9e:c0:5a:76:d3:91:88:55:f2:9d:24:4f:10:62:56:83:
         9d:69:de:cc:ae:33:db:d3:2d:e3:ac:99:c2:4a:97:72:63:09:
         aa:f4:60:a3:f1:df:b7:13:24:e7:15:6d:9b:a5:16:05:e0:74:
         96:01:8a:1a:c4:e6:fa:35:df:13:20:ad:15:8a:8d:50:61:2c:
         63:4b:9c:99:22:db:d0:10:38:99:92:2b:b8:e5:cb:6b:6d:b2:
         da:50:3f:04:3e:4f:80:96:58:23:f2:eb:c7:79:bf:0c:21:47:
         4c:31:ed:c3:97:9d:ca:51:c0:57:84:14:55:00:92:4e:be:37:
         b5:9b:a1:57:fb:48:87:d4:24:db:63:dc:dc:62:f2:8c:d2:24:
         48:e5:2e:66:9e:9e:97:36:18:76:81:5d:62:ab:8c:b5:b6:fe:
         5f:71:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:25:53 2025 by rpki-client