This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
File:                     B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json)
Hash identifier:          45EW8YdDIk/g8JaqDs+ZyapbXi/WbzfdcWdDmgsPz0g=
Subject key identifier:   6C:DB:65:FB:D3:B8:71:77:BF:70:81:BA:1D:A3:9A:44:61:CC:8C:A0
Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18
Certificate issuer:       /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
Manifest number:          D5
Signing time:             Fri 05 Dec 2025 03:37:56 +0000
Manifest this update:     Fri 05 Dec 2025 03:37:55 +0000
Manifest next update:     Fri 12 Dec 2025 03:37:55 +0000
Files and hashes:         1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: vcHZ8gU5hJIWyklypokRqvOV88UmnGrfqjmHiaxEImE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl
                          rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
        Validity
            Not Before: Dec  5 03:37:55 2025 GMT
            Not After : Dec 12 03:37:55 2025 GMT
        Subject: CN=69325393-7b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:90:90:9b:6d:85:ed:50:3c:bb:8c:a3:4c:
                    b4:fe:e3:cb:f1:1e:bc:f4:41:34:44:ea:28:a5:a0:
                    3c:e8:5c:8a:cb:72:5e:f8:52:16:0e:bb:04:88:ae:
                    00:85:6f:5b:f0:42:b3:ae:f4:d1:ea:61:d1:87:cc:
                    68:cb:1e:24:23:97:a1:88:b1:86:ca:b9:85:bb:28:
                    f8:ba:0a:32:21:df:a7:ed:f6:35:e8:56:b0:ed:a0:
                    2e:21:fd:6f:66:07:d3:75:c6:e9:46:de:76:bd:f1:
                    3d:38:bd:43:d1:ea:4d:7a:80:54:e6:52:a0:85:11:
                    aa:75:b4:9e:7d:4f:fb:55:1d:33:ff:28:69:87:fc:
                    01:ec:5b:9d:8a:4e:c7:73:83:5f:bb:6b:ea:d0:2b:
                    d6:df:e7:80:ae:e7:11:63:04:4a:e5:aa:28:bb:c4:
                    27:24:3f:89:75:9c:37:30:49:45:59:ac:1b:c8:62:
                    72:21:f3:e5:12:85:68:01:11:aa:bc:29:16:66:4d:
                    6f:51:10:6b:5f:41:f0:db:6b:25:3b:3e:be:99:28:
                    df:b8:01:12:fb:b6:2e:1c:eb:34:bc:bd:be:df:5c:
                    27:0e:e7:3e:fc:43:79:04:12:cc:68:8b:14:f8:ca:
                    45:8e:a1:23:12:03:f6:c5:1a:13:3b:b5:de:97:b7:
                    a8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DB:65:FB:D3:B8:71:77:BF:70:81:BA:1D:A3:9A:44:61:CC:8C:A0
            X509v3 Authority Key Identifier:
                keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:51:f4:45:16:d1:ef:ea:00:c3:38:9d:0f:0d:cb:f3:56:
         6e:61:79:08:03:5b:ef:50:00:3f:9c:cf:cf:c7:3f:84:cd:1f:
         ea:23:f8:df:29:02:40:11:f0:cf:db:4d:fd:d4:ac:7b:f6:ee:
         5b:15:fc:08:d9:52:93:a9:ad:6b:f5:38:70:06:e8:3c:33:29:
         85:7c:ca:97:8f:89:b4:d3:62:56:db:bd:b4:aa:1e:52:9c:41:
         f8:cf:cc:1a:d0:ae:4a:c1:0d:bb:a0:c8:80:ea:b9:5a:36:85:
         16:0e:97:4c:e6:49:f6:b7:07:a8:40:83:74:39:e2:d4:3a:b9:
         44:7a:56:01:fb:50:66:c2:38:7c:18:c4:3d:83:3b:fa:c3:64:
         54:7f:1a:36:3c:db:b2:44:d9:3a:1a:72:9f:9d:d4:a6:ec:2a:
         24:4f:e3:36:20:94:90:eb:ad:f7:37:33:30:09:ee:fe:78:65:
         0d:3b:b5:13:40:c5:b6:50:09:28:31:d1:64:67:df:f3:3c:e0:
         84:e0:a8:b2:75:b7:84:3b:63:47:b9:7e:b4:e2:9c:d7:f2:c5:
         e7:e0:6e:3b:e6:9f:f1:7d:f0:48:01:7a:30:c1:b2:95:cc:35:
         3d:75:66:c4:e4:dd:2b:0f:f4:54:4a:4b:64:a4:47:4b:d5:7f:
         7f:68:74:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:35:27 2025 by rpki-client