This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
File:                     4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json)
Hash identifier:          FOGm1WfqSU7/0Rkm1dGiDc60jVUCh+g11imAcLMwW9U=
Subject key identifier:   0F:78:76:6F:D8:4B:15:F7:D2:6E:5C:B0:73:8A:19:2C:2C:C2:64:D1
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Certificate issuer:       /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
Manifest number:          0149
Signing time:             Fri 05 Dec 2025 02:30:22 +0000
Manifest this update:     Fri 05 Dec 2025 02:30:22 +0000
Manifest next update:     Fri 12 Dec 2025 02:30:22 +0000
Files and hashes:         1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: eky4jRZMK7UvrDAVzxHkhVxJYnBGWB3+F1Bf1bLCsXM=)
                          2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: w52d9OuktB7yo9yKgF19teLaRAwVoNJ/C/T16AevquE=)
                          3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: MNv7Tv9JE/4kyK1NNSNq4H6AovhKI1wlDUP/bnL+AHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
        Validity
            Not Before: Dec  5 02:30:22 2025 GMT
            Not After : Dec 12 02:30:22 2025 GMT
        Subject: CN=693243be-94c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:bb:51:58:e0:9e:c3:42:7b:37:18:57:e8:
                    78:76:75:b6:76:e3:24:fa:55:0d:f7:18:6c:6a:1d:
                    9c:00:ee:c0:99:1d:17:2d:0c:15:d5:25:01:24:d5:
                    c7:86:36:ed:17:c8:f5:7f:d3:1d:fc:4e:3b:29:95:
                    9b:00:b7:aa:fe:a6:54:4a:a4:c1:b4:f6:3f:25:58:
                    08:ab:df:4a:5f:4b:9a:04:22:db:0f:22:ff:fc:69:
                    e4:af:ef:50:25:4d:77:65:f3:da:4a:de:a9:3b:43:
                    2e:9c:3c:d9:88:c5:71:e4:19:f6:b4:8d:7c:89:2c:
                    8a:e6:26:2c:75:72:73:9f:fd:ed:7d:b0:a7:41:e6:
                    fb:f8:fb:e3:90:e2:0d:e6:a8:87:66:f9:15:7d:72:
                    a2:99:da:df:1a:f5:43:bc:d8:19:19:08:1a:a4:8a:
                    fd:45:68:d1:c5:8f:39:be:c7:f6:1e:42:33:cb:f7:
                    a8:a7:5f:d6:f3:39:07:a5:09:b3:7d:4e:f2:0b:8a:
                    af:00:f5:e0:f6:63:3e:1c:1b:16:d5:37:ee:b0:31:
                    10:99:62:8e:1d:ef:08:93:8c:3d:32:ad:e6:6d:11:
                    36:a3:63:6c:ce:20:27:ea:a2:b9:77:51:01:72:c5:
                    8e:84:4a:22:c4:1d:ef:ee:cd:0e:29:29:af:f5:b5:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:78:76:6F:D8:4B:15:F7:D2:6E:5C:B0:73:8A:19:2C:2C:C2:64:D1
            X509v3 Authority Key Identifier:
                keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:34:26:37:c4:ec:52:99:56:1a:ff:ae:cc:42:e7:0e:df:e8:
         b0:eb:42:d8:fb:6f:6e:50:fd:03:0c:77:69:85:94:62:cc:78:
         bb:29:30:f1:4d:06:c2:0b:ba:df:a0:a6:b3:a6:63:f5:8d:ea:
         c1:6c:29:89:02:95:bb:66:ea:59:ad:c8:9f:8c:40:f6:b5:ba:
         07:5b:cc:83:ee:a1:84:d8:57:da:35:28:b2:98:33:ef:e2:54:
         92:ca:f4:6b:9b:9b:78:bd:05:ee:27:18:18:c8:58:01:de:26:
         f4:05:f9:69:d0:b9:70:60:fa:03:d7:bd:67:94:83:fc:ac:93:
         9a:38:6e:3c:59:c9:12:b6:72:e0:d3:a1:3e:c3:99:26:43:9c:
         f7:77:c8:68:37:60:02:8c:44:95:9e:e6:55:4f:cb:df:bd:44:
         a1:bb:39:c7:59:0a:f6:f8:8d:72:1b:4b:8a:6a:4f:58:53:fb:
         b7:16:2d:19:2c:ab:1c:00:8a:90:ea:d5:3d:de:78:7d:d5:fe:
         1d:f7:03:92:bd:d3:ce:85:49:fb:b2:00:43:38:9d:4f:63:d1:
         b6:64:59:81:7e:93:36:44:55:7a:cc:ff:07:96:5a:3c:38:ec:
         4a:d1:08:ca:ea:df:24:76:57:26:f6:64:cb:8f:37:dd:c1:7b:
         0d:55:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:04 2025 by rpki-client