This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
File:                     07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json)
Hash identifier:          TxK8NJ0AH1f7r9UeBnzpGXOmS2G6dLXVeWN0n9lk17g=
Subject key identifier:   B6:2F:68:00:7F:DA:D2:05:1E:B6:63:44:0B:B4:7D:05:4A:97:A2:26
Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
Certificate issuer:       /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
Manifest number:          BD
Signing time:             Fri 05 Dec 2025 04:00:15 +0000
Manifest this update:     Fri 05 Dec 2025 04:00:15 +0000
Manifest next update:     Fri 12 Dec 2025 04:00:15 +0000
Files and hashes:         1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: t9d1M3d/poQ9PJHsefUw4bd+1Tp1goB0ezAg8afZbQQ=)
                          2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: PLX4kBW7Q6lIgEXicoBPIcX2q4HXvsbwpw0VmOF96dY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl
                          rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
        Validity
            Not Before: Dec  5 04:00:15 2025 GMT
            Not After : Dec 12 04:00:15 2025 GMT
        Subject: CN=693258cf-fc53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:e6:5c:7b:b9:11:a0:68:2b:26:8a:51:44:2d:
                    b1:eb:11:be:2d:f9:94:b4:45:bc:73:1f:ae:c6:48:
                    97:92:92:64:fd:07:9e:0b:c0:6c:5e:b8:83:d7:38:
                    98:8f:45:8a:03:4e:0d:85:b3:a5:c1:9f:08:e6:f8:
                    ad:3e:c9:31:df:ce:33:8c:43:f3:b5:80:0a:29:5d:
                    a9:72:de:c6:35:70:38:38:85:b2:c8:47:e0:37:e9:
                    90:b6:ce:ec:8b:96:2e:90:c7:8f:dc:05:6d:3d:5a:
                    75:bd:81:e2:b5:8d:f6:89:74:91:b3:34:8d:5c:8e:
                    3d:44:8d:ab:74:3f:8d:67:ce:15:14:14:42:78:a5:
                    72:0f:33:61:73:1a:5b:f8:56:a6:24:09:aa:82:82:
                    60:98:8e:96:32:20:1e:bb:90:65:81:3e:7d:8a:a8:
                    3c:a7:41:87:62:57:4c:49:3a:46:f0:d5:cd:0a:79:
                    25:ff:77:c8:64:9e:87:68:e1:29:5e:79:ec:fc:17:
                    cf:93:29:65:32:83:96:13:fe:0e:e3:99:cd:a4:07:
                    5f:7f:cb:54:57:95:40:7e:d8:b6:d6:d7:db:22:8d:
                    46:dd:64:42:2b:47:a3:15:08:07:a6:bd:84:47:28:
                    ae:4d:e1:43:06:ed:05:ab:cc:be:e5:9a:6a:76:fe:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2F:68:00:7F:DA:D2:05:1E:B6:63:44:0B:B4:7D:05:4A:97:A2:26
            X509v3 Authority Key Identifier:
                keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d9:5d:92:f6:a4:fe:4f:79:68:fa:06:b5:ed:3c:b9:90:fd:
         b5:43:bd:b2:f2:50:12:41:35:a1:88:23:af:9e:f2:67:1f:37:
         11:c7:d0:1d:b2:9b:1f:27:c4:20:26:2f:28:32:61:bf:d4:f4:
         36:64:02:7f:02:7d:10:2e:57:00:77:72:9f:28:51:0f:47:12:
         73:c8:18:df:45:a6:9f:b5:fa:83:04:46:1c:30:c6:39:e8:aa:
         a7:e7:ce:86:13:78:db:be:6f:e1:f2:e3:9a:a9:23:d5:3f:71:
         cf:75:16:0d:94:6a:a5:45:0f:bc:53:80:3c:a5:3d:a4:a5:77:
         31:3a:2c:87:ac:41:a6:02:2b:ac:34:bf:3f:96:b3:e2:fc:c1:
         a2:01:6b:dc:4d:14:ff:f1:2a:3e:8a:39:86:b1:43:21:3d:4c:
         48:e5:65:a4:7a:06:4d:a1:05:60:74:0e:01:57:f1:a4:01:80:
         25:32:c6:fe:47:c0:ea:29:a3:15:3f:c6:d4:d4:90:7e:7b:dc:
         4b:a7:b3:5d:a6:9b:e4:81:b2:46:a4:eb:eb:b5:40:a5:93:43:
         1b:ff:35:71:08:ee:89:87:40:c7:7a:74:15:a9:d7:99:34:4e:
         26:e2:69:d1:90:cf:0b:67:a2:b1:b3:bc:f0:9f:4b:1b:68:4d:
         16:7d:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:45:05 2025 by rpki-client