This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
File:                     4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json)
Hash identifier:          09XkSxSSQkUIa8cOeKdNvt3e99MbR9LloBtVYRpdFFM=
Subject key identifier:   48:FF:0B:13:5A:D9:51:85:07:1D:7D:FD:B6:7C:AC:A4:97:9E:A8:82
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Certificate issuer:       /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
Manifest number:          019F
Signing time:             Fri 05 Dec 2025 01:40:23 +0000
Manifest this update:     Fri 05 Dec 2025 01:40:23 +0000
Manifest next update:     Fri 12 Dec 2025 01:40:23 +0000
Files and hashes:         1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: nmDoerL2RG4MsmH6dvfPMfs0h52yfxRlWNJLJaW5N+U=)
                          2: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: coTbLMChMtsb+9hU9/oYsNe+RoCOnIHIavvRJNUhB3k=)
                          3: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: SLEJBl6iI7A9mQ/gCP8wQV/FveWhHBwcWU7BMm4+pLE=)
                          4: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: SQBva7AHaoJKrZ6vg+VCRRVDYT6lI9oaiIx6/QC8zvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
                          rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
        Validity
            Not Before: Dec  5 01:40:23 2025 GMT
            Not After : Dec 12 01:40:23 2025 GMT
        Subject: CN=69323807-cbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:04:b8:0d:7f:40:d0:4c:68:87:28:e3:ef:
                    8d:ce:b4:8e:87:b4:d6:95:0b:f5:c1:50:e9:bd:67:
                    88:c3:10:d7:a4:1b:90:cf:a9:3f:c3:c4:ee:9c:27:
                    7b:26:db:a1:58:4c:6f:24:46:f9:93:b0:eb:80:ca:
                    51:5b:03:0c:ab:b5:1e:96:41:cf:03:0c:16:b1:63:
                    c8:ed:bf:d7:62:09:1c:14:e9:69:62:90:61:dd:b3:
                    d4:44:80:9b:22:ad:90:35:a0:6c:6a:43:90:d2:94:
                    d3:fe:24:a6:c6:f4:ec:d7:14:8c:6f:c1:58:b4:c7:
                    9e:5e:bb:c7:81:53:e5:8c:b4:68:28:49:96:1d:ef:
                    f6:86:76:ac:e5:42:91:ea:47:af:1e:04:c0:0b:a9:
                    66:60:a9:43:f8:df:a0:2f:29:dc:ec:0b:07:4a:cd:
                    4e:b2:62:15:27:98:ce:e9:ca:ae:af:98:e7:75:a0:
                    ef:bf:a6:f3:99:4e:58:19:54:1a:52:9d:69:b6:5a:
                    15:d4:d6:e0:af:ab:20:a8:ce:f8:a8:e0:20:90:f1:
                    51:af:93:ad:0a:34:2d:39:f4:a3:95:54:6a:0f:4b:
                    05:01:91:f3:a0:b2:ef:6f:2e:8b:9f:ab:9f:d1:02:
                    0c:cd:61:07:53:1f:a0:e9:ed:20:ad:7f:f7:0e:ef:
                    ed:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FF:0B:13:5A:D9:51:85:07:1D:7D:FD:B6:7C:AC:A4:97:9E:A8:82
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:81:6b:d0:34:10:d3:64:fa:d5:c3:99:73:b9:38:d6:0e:6a:
         ce:28:be:36:8b:45:d4:04:9f:42:01:10:e8:87:d9:ac:ec:73:
         a1:d9:1b:ef:62:4a:41:d3:3a:e0:0c:12:9a:f7:d7:7b:9f:cd:
         53:2b:f9:25:c7:72:b9:32:fa:3c:d1:2a:0b:71:e4:00:48:85:
         f7:d7:8f:a5:00:cd:16:0c:2e:23:b4:49:0c:a5:03:05:0e:73:
         19:fc:38:03:65:3c:6b:98:51:a9:3f:8a:c3:55:f9:50:a6:fe:
         85:ee:08:09:4a:01:06:3b:eb:92:ac:5c:50:f4:91:6d:07:ff:
         eb:01:50:64:94:bf:06:a7:09:e2:74:d0:12:52:f9:da:3c:3d:
         4f:96:f9:c5:69:73:7d:8d:f3:60:58:d9:55:ff:1d:e3:2d:c6:
         fd:d3:34:03:c8:1f:d2:37:de:5b:7d:dd:93:ff:77:4a:b8:70:
         07:ea:bd:31:e6:ce:cd:ad:ef:a3:c2:75:85:03:bc:2f:c2:a9:
         a3:b7:24:2c:55:48:e1:d4:b5:7e:2f:49:15:c7:9a:7c:fd:8b:
         6f:a6:ee:7a:01:65:92:0e:46:6b:8d:49:aa:bf:8f:de:0c:38:
         2d:5e:09:57:78:d5:64:5c:ea:f3:6d:05:1d:de:d7:76:94:62:
         9d:12:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:36:17 2025 by rpki-client