This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
File:                     -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json)
Hash identifier:          xzH3Ubqdrun9hWRhseB6oABWxg+YDGimj27skad8dOY=
Subject key identifier:   4E:F4:C2:4F:2F:57:8D:91:EF:0D:43:4A:F6:0F:35:96:4B:95:11:79
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Certificate issuer:       /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
Manifest number:          01C4
Signing time:             Fri 05 Dec 2025 01:19:37 +0000
Manifest this update:     Fri 05 Dec 2025 01:19:36 +0000
Manifest next update:     Fri 12 Dec 2025 01:19:36 +0000
Files and hashes:         1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: BPDqhfrr+o2vVQAquyDM+bM3wStMsn0Pboa0PJiiiQ0=)
                          2: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: uENUjiP+2EB12uAPnRJ5SygdKhfwJZNgp1BeowbLRj4=)
                          3: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: JgtSSjMUVF5aYkq/I11EUTsQN2v/Rr6UwtvaYKzNVvk=)
                          4: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: XBdp98NfSrH2eLdNGkQsz15bbs9O8Colh/0iTNrP6Zs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
                          rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
        Validity
            Not Before: Dec  5 01:19:36 2025 GMT
            Not After : Dec 12 01:19:36 2025 GMT
        Subject: CN=69323328-1223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:24:0c:9e:0a:64:b6:c8:b8:7a:a6:a4:a7:
                    39:2e:60:56:8f:d4:db:44:c5:8e:ea:e9:af:c5:e3:
                    83:03:56:d3:b1:05:5f:e8:bd:5c:bb:4b:75:36:0f:
                    83:98:d9:d0:1d:0f:55:79:c0:d2:b2:a8:9b:f7:3b:
                    c1:01:93:36:a7:71:32:0e:56:53:88:54:16:b6:93:
                    21:39:72:19:b0:d6:2d:a9:e9:09:23:50:e9:c7:42:
                    16:cb:68:da:b0:a2:7b:4f:f2:47:16:87:b9:04:60:
                    d7:5a:a6:3d:b4:e4:da:73:54:26:06:75:0f:5f:93:
                    dc:5a:18:c7:0b:31:48:5f:29:5b:2d:43:6c:7e:68:
                    44:7f:51:c6:c9:86:39:6a:e8:bf:37:4d:ad:5f:1b:
                    24:a5:2d:2e:c2:75:39:84:77:e3:8d:03:fb:f4:25:
                    aa:ce:20:68:e6:dd:d5:26:da:03:9a:e9:12:db:87:
                    85:eb:67:3c:ff:73:41:7b:2c:d2:ce:97:65:fb:2f:
                    21:88:a2:9d:e3:8c:bb:e5:26:41:da:92:16:e7:c0:
                    23:49:d4:52:fb:56:c2:2c:28:85:1d:d0:e3:37:3e:
                    4a:32:35:d7:ce:45:ff:6b:4d:ed:9b:86:3a:f7:6f:
                    d8:1f:82:fb:24:a6:ff:14:cd:3d:12:80:73:8a:75:
                    80:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F4:C2:4F:2F:57:8D:91:EF:0D:43:4A:F6:0F:35:96:4B:95:11:79
            X509v3 Authority Key Identifier:
                keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:07:33:9d:d0:7e:21:f4:f8:be:fd:c1:4e:b8:42:73:18:
         b9:e3:d8:32:0b:2b:b4:c5:ab:ac:f7:2b:86:57:f1:2f:e3:fb:
         78:b1:31:be:17:51:4d:48:c3:ae:ac:d1:5c:f8:c9:32:3c:b3:
         02:51:95:d7:7c:21:96:f6:26:78:1b:ae:84:4b:14:b0:d0:85:
         c1:f9:96:5d:eb:39:37:14:01:e1:e3:7b:a5:ef:e6:b0:7c:b5:
         6e:b6:3d:fc:b0:dc:35:32:23:f8:db:34:94:c5:73:a7:e6:de:
         77:98:11:89:0e:54:34:01:a8:fc:72:ce:61:dd:67:b6:a4:12:
         56:8c:f4:38:70:00:60:02:2e:d9:ff:00:bf:62:0e:24:c6:7f:
         11:d3:e7:26:15:86:7d:3a:0c:e1:a4:b5:76:52:c0:fb:14:a6:
         07:1b:36:9b:fe:aa:70:b9:4b:10:68:7f:ad:45:96:31:25:38:
         bf:64:a2:08:7b:25:c1:79:ae:2a:e7:e3:9b:5b:40:2d:91:7c:
         c8:0d:95:49:f6:24:05:5f:09:12:23:4f:63:89:30:b7:44:bb:
         f2:a2:96:1c:45:88:89:86:63:23:28:7c:3b:ea:94:75:75:3c:
         9b:4a:9c:bf:f2:7a:28:a4:ac:ec:93:7b:1c:8b:26:52:53:1f:
         53:66:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:26:00 2025 by rpki-client