This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File:                     4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier:          /ArO6VumEy9D17RepuenET5sQ8H6vWY8LzBPEeRYCIo=
Subject key identifier:   EE:77:87:8C:92:1E:18:AE:ED:A8:91:A0:24:CE:D9:B2:F7:67:DC:EB
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer:       /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial:       050E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number:          0505
Signing time:             Sat 06 Dec 2025 22:25:27 +0000
Manifest this update:     Sat 06 Dec 2025 22:25:26 +0000
Manifest next update:     Sat 13 Dec 2025 22:25:26 +0000
Files and hashes:         1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: Hx+WdIxNPv+y8TZd41/irK/M6eZEXbNydwaaEQHZotc=)
                          2: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: nB1Fc0QMLbcF1uaFMm0p596y3EBZJfglMzsBOCS68V4=)
                          3: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: twWAVRWCyGBu4AJbenJKIlIqQ97WQNS4qNYxUhMYIRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1294 (0x50e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
        Validity
            Not Before: Dec  6 22:25:26 2025 GMT
            Not After : Dec 13 22:25:26 2025 GMT
        Subject: CN=6934ad57-7f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:45:a9:4a:7c:72:0c:df:d2:4f:bb:c3:54:
                    24:17:49:b1:5b:50:84:07:55:9e:78:82:64:59:4a:
                    fd:02:c3:fc:f4:c5:ba:e4:0b:6e:a8:dc:e4:cc:ad:
                    35:d9:e0:0f:ad:d9:d8:8b:c3:72:73:fe:28:8a:8c:
                    90:ca:a8:e8:5b:68:1b:73:e8:8d:66:bb:2b:ea:d8:
                    8a:d8:73:7f:1b:84:08:77:13:18:8a:43:f7:c1:fe:
                    c8:85:3b:b2:4d:51:c9:53:77:96:e5:81:dd:ca:2a:
                    3e:91:23:95:ce:73:fe:43:20:62:e1:32:a8:95:a4:
                    15:f7:dc:cb:79:14:e4:c1:d3:4e:65:01:54:22:ef:
                    05:4d:54:a2:10:a9:0a:df:1a:ba:5e:cf:85:42:92:
                    c1:a9:55:90:ee:58:e9:fe:b6:16:23:74:5b:3e:4b:
                    33:3c:f6:7b:54:36:84:d6:a6:7f:b9:a4:ff:a0:10:
                    dc:ef:0a:44:60:35:a5:f4:73:38:65:ca:a6:63:bc:
                    e6:e2:f8:7d:c4:d4:9b:96:2e:da:0f:a2:1e:b5:23:
                    21:89:1e:1b:ce:1f:32:13:7e:20:fe:32:78:20:c7:
                    6d:fc:cc:fa:ac:c4:9b:90:10:ce:55:f0:ea:cb:4c:
                    9f:e9:f9:2c:49:ac:50:71:bc:30:97:48:14:ff:9a:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:77:87:8C:92:1E:18:AE:ED:A8:91:A0:24:CE:D9:B2:F7:67:DC:EB
            X509v3 Authority Key Identifier:
                keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:6d:c8:32:eb:eb:62:c4:09:be:74:a5:7d:6b:d9:1f:17:01:
         33:1d:9d:11:c6:26:57:6f:20:e3:bb:6f:d4:21:94:6d:de:33:
         5b:85:7e:bd:37:38:3f:37:3d:1d:96:b5:4a:44:90:eb:0b:21:
         85:34:56:41:52:3d:dc:8e:6d:a3:77:8a:85:6f:32:8c:84:e5:
         1e:ae:7e:c6:13:ef:7c:76:6c:dd:17:f4:d9:f3:c0:ea:34:b2:
         18:a3:fd:3a:b6:e9:09:34:89:42:fe:a8:b8:87:bc:3d:d0:51:
         7a:72:08:dd:24:14:b5:1a:ef:69:4e:2a:79:15:9e:2d:3a:a0:
         6b:ff:cf:40:a4:eb:84:cf:78:22:5d:c0:55:c2:b6:62:b3:a5:
         23:0a:ac:4d:ea:da:9e:d7:16:4d:98:48:50:2b:44:03:34:f7:
         43:33:c8:f9:82:e0:84:b4:11:58:dc:bb:30:b1:c4:f5:e8:5d:
         42:a7:f9:c8:f9:f2:c2:84:e0:15:e6:5b:a7:1e:ea:d2:6d:f1:
         54:25:f0:0f:df:9e:8d:dc:a4:0c:d2:d0:94:f0:da:7b:f9:4a:
         53:bb:e1:21:fe:6e:6c:44:e8:35:7c:3d:91:a9:05:0b:a5:73:
         dc:34:6d:04:4a:fd:9c:e6:c1:d3:ad:b3:3f:b5:e9:9e:20:3e:
         c9:ac:39:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:12:42 2025 by rpki-client