This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
File:                     4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json)
Hash identifier:          41DF/lC4yRj+ibginazwm0QzYoJgRyBuUoi8ti6cw+8=
Subject key identifier:   F3:36:42:CD:D5:2B:5E:07:F5:C4:63:AA:9F:45:0C:0E:50:82:2E:FE
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Certificate issuer:       /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
Manifest number:          01B9
Signing time:             Fri 05 Dec 2025 01:21:35 +0000
Manifest this update:     Fri 05 Dec 2025 01:21:34 +0000
Manifest next update:     Fri 12 Dec 2025 01:21:34 +0000
Files and hashes:         1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: ntEJ7oYU5kyZSmW/UDGSJuTpKLrkKYEPHBntYApG+20=)
                          2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=)
                          3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
                          rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
        Validity
            Not Before: Dec  5 01:21:34 2025 GMT
            Not After : Dec 12 01:21:34 2025 GMT
        Subject: CN=6932339f-4608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:fc:42:2b:ae:7c:04:3f:61:47:cb:89:3a:
                    2a:ae:73:dd:5d:89:b6:4b:e6:4c:3f:5b:62:0d:53:
                    7f:1c:be:be:cc:a6:cb:7f:0a:e6:be:60:12:3b:9c:
                    0c:6c:cf:3d:47:9e:f9:31:a2:12:a1:7a:6d:7f:88:
                    96:57:4d:1e:c0:cf:ce:85:42:c8:ac:22:8d:80:c9:
                    eb:ad:0b:c1:b7:b5:f2:f6:70:8a:62:79:7c:c2:b1:
                    cc:61:41:79:b4:b6:c2:0e:62:ca:c3:67:2b:4e:83:
                    08:de:90:66:30:32:bd:e7:7b:81:a9:70:a9:62:07:
                    41:32:37:12:0e:94:47:6c:39:89:90:eb:f7:48:95:
                    83:cc:a7:bb:67:7d:28:52:ae:ed:95:54:97:fb:99:
                    cd:db:fa:83:2d:f6:79:a0:56:ee:77:43:88:aa:f2:
                    cf:17:6a:7f:1b:a7:fa:4a:ce:0c:26:c3:0b:aa:68:
                    e4:f1:74:5a:20:80:a3:b3:ec:f9:16:dd:62:c8:6e:
                    d5:98:e9:a3:1d:bc:c6:d8:7b:72:3a:9a:a5:95:8f:
                    76:43:55:1f:02:d7:bf:94:ef:da:a8:b2:2f:9b:5a:
                    fe:af:83:3d:3b:02:6c:11:79:aa:43:79:d6:0f:a2:
                    08:44:59:5c:c4:93:d5:16:3c:c4:d1:57:90:c7:f9:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:36:42:CD:D5:2B:5E:07:F5:C4:63:AA:9F:45:0C:0E:50:82:2E:FE
            X509v3 Authority Key Identifier:
                keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:51:e5:9d:94:77:be:84:16:82:1f:a0:e4:11:1f:96:a1:3b:
         ce:a9:f2:91:c1:00:ba:a8:0b:b6:20:35:0c:f5:9d:2e:5b:12:
         27:6b:95:12:47:02:22:69:9f:1c:c9:5d:17:3a:87:cb:c0:b2:
         9a:0b:66:e8:a4:d9:1f:89:3c:25:19:49:03:7d:d1:19:32:02:
         2a:b3:75:dc:50:84:77:ee:cc:ed:1c:3b:47:3f:f5:7c:bd:ac:
         36:2b:2a:e6:d5:25:99:4d:5b:79:25:d4:92:f5:d8:1d:07:22:
         21:89:8f:60:04:e9:b9:5f:6f:f9:3e:a9:58:e1:6a:9e:68:60:
         c0:49:0c:04:5e:66:5d:30:b1:e8:a1:70:cf:d1:b2:5c:12:f7:
         67:d4:2c:e2:e0:6b:32:db:31:8a:73:3b:63:46:5d:b0:eb:04:
         4b:86:9b:d3:10:b5:b7:78:72:85:ad:58:cb:31:c7:11:86:9b:
         65:bb:f6:88:49:85:32:e8:d1:70:e7:81:3d:58:d3:e6:45:32:
         58:c3:66:0e:f2:1d:44:80:a5:32:9f:40:e5:6f:68:4d:27:66:
         b8:37:f2:5d:38:42:0d:bf:d2:6d:a2:fc:97:a0:51:06:81:be:
         a6:d0:79:a8:11:97:f6:92:9c:5c:f5:41:96:92:22:a4:91:ce:
         19:5c:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:02 2025 by rpki-client