This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
File:                     IiZie3PlFUazvVEODioN6qglIHg.mft (raw, json)
Hash identifier:          7RTxFEPIu95Bwojv4Vq1XXB75uH7kSQjA2h5SwYiLVg=
Subject key identifier:   D8:C7:B9:02:81:CB:CE:7E:8E:F3:41:91:45:4B:31:4C:AE:B6:52:79
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Certificate issuer:       /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
Manifest number:          07
Signing time:             Fri 05 Dec 2025 05:53:02 +0000
Manifest this update:     Fri 05 Dec 2025 05:53:01 +0000
Manifest next update:     Fri 12 Dec 2025 05:53:01 +0000
Files and hashes:         1: IiZie3PlFUazvVEODioN6qglIHg.crl (hash: 0iRacfAoL855MfKoaTVjCww6Fv894Ww1Ox301pltUvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
        Validity
            Not Before: Dec  5 05:53:01 2025 GMT
            Not After : Dec 12 05:53:01 2025 GMT
        Subject: CN=6932733e-5290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ca:74:e9:e4:f2:86:9e:d6:01:c8:9c:5b:c4:
                    c0:a9:38:2b:e1:63:f2:c4:e9:fc:b0:50:b1:97:7d:
                    6f:72:eb:dd:d2:d9:a2:37:42:fa:28:e4:13:ff:2a:
                    96:99:82:10:2b:31:2b:f8:8a:8f:61:6a:c1:10:78:
                    85:83:37:ae:b5:d2:2b:48:86:57:f0:f6:39:30:8e:
                    d3:8d:35:61:3f:2a:c9:20:88:0e:92:00:f7:df:83:
                    e7:1b:03:65:f4:ce:83:fa:be:a1:da:ae:9c:bf:39:
                    df:83:8b:db:f6:07:f8:9b:2c:4d:61:a5:1f:e1:5f:
                    9e:16:ff:18:7d:65:6e:fc:f4:09:1d:19:08:be:30:
                    44:e0:48:09:bc:30:ff:43:2f:d5:3a:1b:37:80:61:
                    53:e8:83:54:42:ad:44:1f:79:00:34:91:1c:a3:e3:
                    5a:2f:58:72:f2:18:41:c5:5d:82:91:dc:a3:97:ba:
                    28:94:77:78:ad:f2:bc:f5:3d:dc:36:36:14:df:be:
                    a2:61:5c:9c:b9:ed:f1:b2:6f:ba:cf:7a:44:d7:83:
                    a4:d5:43:28:d3:9e:66:ed:53:fb:08:c4:27:2f:b8:
                    8c:57:3f:54:78:5e:cf:2f:98:f3:01:18:a1:1d:58:
                    26:70:40:1f:18:66:39:80:f1:8d:3d:c3:8e:55:d8:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C7:B9:02:81:CB:CE:7E:8E:F3:41:91:45:4B:31:4C:AE:B6:52:79
            X509v3 Authority Key Identifier:
                keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f8:f0:61:5c:4a:34:82:e7:c4:07:81:57:c1:64:5c:8b:33:
         2f:b4:a6:ce:78:2b:79:6e:d9:e4:f3:8e:13:6d:13:23:97:ee:
         0d:cf:44:0b:60:2e:e5:b4:b2:b4:2c:5d:75:4f:8d:52:95:43:
         61:b2:a2:d3:57:40:05:15:e6:74:ba:1b:89:9a:fb:d4:63:e1:
         29:f5:9e:c8:ca:56:82:3d:cd:7b:ef:9e:75:71:e9:55:42:fd:
         2c:77:6f:85:bb:18:69:53:72:1e:87:98:a1:5d:1c:2f:b2:21:
         03:f3:e7:f6:1c:e7:f0:4d:fb:5f:df:1f:70:7a:2e:99:b1:5f:
         ef:a7:65:e0:59:d4:1d:5d:17:88:d5:ac:72:44:c8:41:67:1a:
         33:fd:02:aa:a3:a2:16:bb:78:b0:1b:ab:b5:9e:3d:12:93:0c:
         12:28:f5:ad:1f:99:9a:3f:e9:b0:fd:45:00:fc:18:cb:53:2a:
         ed:bb:22:0c:3f:06:90:06:74:55:73:e3:be:d4:3b:6b:23:f5:
         46:a0:12:8a:e8:40:d6:97:ef:57:e7:f2:58:c1:8a:a3:be:2b:
         ac:cf:35:ff:21:41:d9:21:3d:20:28:63:8d:80:29:72:c8:27:
         0b:92:bc:78:15:f6:ff:39:d1:4d:15:44:7a:7d:e3:32:4c:0e:
         22:e1:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:51:12 2025 by rpki-client