This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
File:                     4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json)
Hash identifier:          MWTCyKoq0Olc8CG9XID9mpS2M4h/DI5LwYzEY8e5y4I=
Subject key identifier:   B5:90:50:67:80:2D:D7:48:AC:F6:83:D9:CC:D6:B8:AB:1E:E8:19:7D
Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66
Certificate issuer:       /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
Manifest number:          0227
Signing time:             Fri 05 Dec 2025 00:23:44 +0000
Manifest this update:     Fri 05 Dec 2025 00:23:44 +0000
Manifest next update:     Fri 12 Dec 2025 00:23:44 +0000
Files and hashes:         1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: ekh1rT+O/IqRU2vB9DEEVHFFd//tQW4vxUdll1JeMxU=)
                          2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: FG8mZ0xSMI661bwpz8jXY8dYE+DuRrKVmBGsSUwXpCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl
                          rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
        Validity
            Not Before: Dec  5 00:23:44 2025 GMT
            Not After : Dec 12 00:23:44 2025 GMT
        Subject: CN=69322610-5328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:f5:fd:e8:18:10:b5:ea:45:8f:63:57:9c:
                    df:ca:65:32:a8:9e:03:99:3e:8b:8e:93:10:3d:b4:
                    8a:ed:2c:65:ab:f1:6e:23:01:04:a3:22:4d:29:b2:
                    f6:b3:d4:87:99:fb:92:1f:bb:34:a8:75:3d:3d:46:
                    c7:ec:26:eb:3a:f7:2f:8e:8b:b5:e5:5e:11:31:61:
                    d4:bc:8a:78:b3:ea:d4:16:a2:01:77:87:11:42:59:
                    f7:3a:94:19:ea:14:32:6e:3c:51:27:0f:1c:24:68:
                    69:1b:87:26:3e:3c:71:bf:fa:a4:d2:66:78:88:fc:
                    a3:b6:62:96:18:84:46:12:0d:fb:ef:93:a3:16:cf:
                    09:3a:97:c7:c5:d6:a4:d1:2c:10:ef:24:a6:20:b6:
                    7a:4d:2a:ba:97:93:7b:6e:e1:7a:b3:29:ee:1f:3c:
                    e3:0f:ee:a6:6e:24:23:57:39:45:cb:da:e1:a1:c8:
                    67:48:22:73:78:e0:54:2a:b0:cf:0a:23:09:06:14:
                    dd:e1:20:bb:65:94:74:89:34:20:9a:44:60:52:aa:
                    d7:81:5c:c3:fe:84:2a:d7:b5:75:4e:d4:5e:bf:77:
                    67:b8:9f:d2:b5:eb:36:e0:d0:2c:27:39:e8:53:a6:
                    56:62:67:33:12:a0:2b:44:0a:3a:18:6d:ba:ad:ac:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:90:50:67:80:2D:D7:48:AC:F6:83:D9:CC:D6:B8:AB:1E:E8:19:7D
            X509v3 Authority Key Identifier:
                keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:69:e7:33:29:8f:75:58:54:ef:19:45:b0:da:ca:b4:b4:a7:
         d1:d5:1f:0a:ee:34:88:d1:34:7a:9d:bb:c7:9d:92:71:96:50:
         04:da:83:0a:91:de:27:00:36:34:36:4a:25:81:86:24:69:a5:
         99:fb:e2:84:b7:16:fd:5d:fa:a9:95:3c:cd:1e:0d:b0:8b:5a:
         4a:a2:a9:ca:e8:e9:ac:ff:2d:6c:5f:83:15:b3:63:4f:47:97:
         fb:bb:77:fb:e8:79:d7:f4:0e:34:21:96:34:7b:f7:e1:aa:37:
         cd:44:0a:a4:e0:34:2e:c9:51:c0:8a:2b:69:a6:f1:fb:33:5f:
         13:36:ea:e7:f0:76:b0:cf:87:c3:95:7e:75:df:6d:8f:6b:46:
         c8:b0:e1:d7:2e:c7:76:81:1e:f2:24:2f:41:71:2c:f3:bd:9c:
         8f:44:31:93:d3:83:a2:de:9d:ef:6d:d3:25:4e:fa:6f:bf:cb:
         10:50:7f:94:c8:58:91:8f:bf:43:58:4d:6b:a7:85:f7:de:96:
         64:b2:3b:5c:6a:00:58:7d:df:b6:56:70:b2:8a:ee:fd:42:84:
         03:41:8e:48:af:fc:c5:23:61:49:74:a1:71:c4:ab:84:82:eb:
         db:7e:92:44:46:5e:e2:0a:db:e3:40:95:05:b3:21:ce:cf:a1:
         fb:5c:ae:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDAwNzcxMTAvBgNVBAUTKEUzRjdDRUY2RTdBNTY5RTQ2QjJEOTAzOTMyMkI2OTc1
NTMxQzI1NjYwHhcNMjUxMjA1MDAyMzQ0WhcNMjUxMjEyMDAyMzQ0WjAYMRYwFAYD
VQQDEw02OTMyMjYxMC01MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvqP1/egYELXqRY9jV5zfymUyqJ4DmT6LjpMQPbSK7Sxlq/FuIwEEoyJNKbL2
s9SHmfuSH7s0qHU9PUbH7CbrOvcvjou15V4RMWHUvIp4s+rUFqIBd4cRQln3OpQZ
6hQybjxRJw8cJGhpG4cmPjxxv/qk0mZ4iPyjtmKWGIRGEg3775OjFs8JOpfHxdak
0SwQ7ySmILZ6TSq6l5N7buF6synuHzzjD+6mbiQjVzlFy9rhochnSCJzeOBUKrDP
CiMJBhTd4SC7ZZR0iTQgmkRgUqrXgVzD/oQq17V1TtRev3dnuJ/Stes24NAsJzno
U6ZWYmczEqArRAo6GG26raxHsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWQUGeA
LddIrPaD2czWuKse6Bl9MB8GA1UdIwQYMBaAFOP3zvbnpWnkay2QOTIraXVTHCVm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA3Ny81MDZBRTIzMDgx
MDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFlUnJMWkE1TWl0cGRWTWNK
V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRfZk85dWVsYWVSckxaQTVNaXRwZFZNY0pXWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDA3Ny81MDZBRTIzMDgxMDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFl
UnJMWkE1TWl0cGRWTWNKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHaeczKY91WFTvGUWw2sq0tKfR1R8K7jSI0TR6nbvHnZJxllAE2oMK
kd4nADY0NkolgYYkaaWZ++KEtxb9XfqplTzNHg2wi1pKoqnK6Oms/y1sX4MVs2NP
R5f7u3f76HnX9A40IZY0e/fhqjfNRAqk4DQuyVHAiitppvH7M18TNurn8Hawz4fD
lX51322Pa0bIsOHXLsd2gR7yJC9BcSzzvZyPRDGT04Oi3p3vbdMlTvpvv8sQUH+U
yFiRj79DWE1rp4X33pZksjtcagBYfd+2VnCyiu79QoQDQY5Ir/zFI2FJdKFxxKuE
guvbfpJERl7iCtvjQJUFsyHOz6H7XK4t
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:12 2025 by rpki-client