This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft
File:                     u7hAsFOTTV4f7dQN0CPvevQouuA.mft (raw, json)
Hash identifier:          Cr5NIoqc3et70R0qgCBCK+kkiOw/zY2C6QCBAQ1uWnk=
Subject key identifier:   49:F7:B2:90:D8:F9:34:6B:0C:58:C1:17:BF:33:EC:8F:28:56:71:46
Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0
Certificate issuer:       /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0
Certificate serial:       1829
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft
Manifest number:          181D
Signing time:             Sat 06 Dec 2025 16:08:47 +0000
Manifest this update:     Sat 06 Dec 2025 16:08:46 +0000
Manifest next update:     Sat 13 Dec 2025 16:08:46 +0000
Files and hashes:         1: u7hAsFOTTV4f7dQN0CPvevQouuA.crl (hash: aXjxtfGGJhjEcvjZvFPVtdmcPpfDx6w3XzfC4S2VwTs=)
                          2: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (hash: E/6I3qQjCBxjGs7jFLaCU1bmuGjPrQh25a7j/aLYowA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl
                          rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6185 (0x1829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AD2E, serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0
        Validity
            Not Before: Dec  6 16:08:46 2025 GMT
            Not After : Dec 13 16:08:46 2025 GMT
        Subject: CN=6934550e-8864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:58:2a:8c:0c:b4:e7:83:ac:e6:52:70:b8:
                    79:b7:97:f7:0d:7e:bf:e9:a3:d6:c5:90:0e:2d:2a:
                    3d:65:47:3a:a4:58:6e:5c:ae:c1:3e:5b:0f:ff:bf:
                    e4:fd:43:c7:ae:30:86:59:8a:9d:b9:29:64:85:d7:
                    de:e6:83:8b:d4:aa:1c:b5:01:a1:30:24:7d:f8:18:
                    88:6b:50:f3:0d:cd:01:c8:f5:bd:63:3d:df:fa:70:
                    09:fd:ea:bd:bc:f4:68:75:62:b1:f0:b3:74:4a:8e:
                    43:d2:e4:a4:1b:6d:0c:32:88:06:69:68:87:e5:99:
                    51:82:fd:93:d2:33:52:48:df:d0:7b:b4:a5:09:bf:
                    18:a7:99:3a:08:47:e2:08:d6:67:7f:e2:ff:89:5b:
                    e9:41:a6:a1:5e:45:44:59:a3:d4:73:d5:7f:85:9a:
                    67:3b:6e:f0:c0:66:f5:e4:45:2f:14:ff:11:55:c3:
                    0a:88:6e:de:55:6c:41:de:c3:5a:3c:8d:ea:6c:2c:
                    16:1e:5b:a0:75:52:fd:42:09:db:3e:db:fa:f1:c0:
                    8f:ae:c1:30:4a:80:a9:4c:97:8e:f9:2b:cf:1b:22:
                    fe:81:bc:f9:ca:b6:da:9e:ec:65:c8:11:b4:6c:7d:
                    00:95:28:07:ee:cf:cd:2f:5a:7f:a6:c9:3e:f5:c4:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F7:B2:90:D8:F9:34:6B:0C:58:C1:17:BF:33:EC:8F:28:56:71:46
            X509v3 Authority Key Identifier:
                keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:75:e3:0e:6c:19:4a:1a:69:5e:10:83:39:d8:9d:6e:7c:0f:
         ed:38:a7:63:d3:c2:b8:3d:bb:74:26:04:24:f7:52:8d:b0:d4:
         94:5d:e4:d8:d8:bf:71:f4:cf:73:48:e9:ce:d8:ed:c9:ff:b4:
         bf:a9:9d:13:c3:ac:30:20:24:5a:8b:bb:71:12:a8:b6:eb:d4:
         64:f5:22:a6:6f:7d:84:76:89:60:41:d9:3f:a9:0f:46:61:1e:
         ec:2f:02:98:da:88:1c:4a:9d:a5:1e:99:39:8d:d2:7f:a0:53:
         a2:4e:d0:be:c0:91:57:e6:b6:20:c1:07:3f:06:5d:d3:37:b8:
         fa:c6:a9:c6:f6:db:67:d9:b0:5d:b0:08:52:8d:ff:95:ec:90:
         21:51:22:68:f6:6d:52:5b:18:00:84:4b:63:36:5d:17:47:5d:
         3c:a0:6d:5d:8c:c5:1f:3f:94:a1:33:ae:d8:b8:e6:9a:d4:21:
         21:87:c7:b6:d4:4b:09:03:9b:9c:a5:04:69:15:14:51:29:1b:
         b5:9c:bb:cd:d4:53:8e:65:b0:e8:bd:f9:77:f4:0e:d1:6c:87:
         90:1c:df:77:27:a0:77:7f:d8:fd:38:54:19:d1:71:06:dc:70:
         d2:5d:45:8c:17:a6:e4:e2:05:25:5d:65:c3:6a:9f:36:7d:bc:
         d1:69:f4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:55:23 2025 by rpki-client