This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
File:                     7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json)
Hash identifier:          emPA5wU11pcLYIO0so9RfjYIwUtrRlODICZqJXj1Eqo=
Subject key identifier:   A1:5D:B7:6D:EB:CF:84:76:66:47:5C:77:1B:2B:E3:26:33:BD:37:47
Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
Certificate issuer:       /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Certificate serial:       020F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
Manifest number:          0205
Signing time:             Fri 05 Dec 2025 00:47:14 +0000
Manifest this update:     Fri 05 Dec 2025 00:47:13 +0000
Manifest next update:     Fri 12 Dec 2025 00:47:13 +0000
Files and hashes:         1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: LqR5qzVERzt4RY0LnFFuCaMUFPXhfDN3BQpXZwqzOiE=)
                          2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
                          rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
        Validity
            Not Before: Dec  5 00:47:13 2025 GMT
            Not After : Dec 12 00:47:13 2025 GMT
        Subject: CN=69322b91-0df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:2e:53:d9:dd:26:2b:39:b8:7f:de:09:e6:
                    d7:47:f8:c6:4d:9c:ca:17:81:16:87:18:ce:93:2b:
                    30:46:8f:c5:1e:bd:48:be:e3:46:3f:95:50:f2:15:
                    2b:e8:0b:63:e7:70:5b:9e:d7:63:b3:1c:84:d6:51:
                    11:f7:a8:13:07:69:40:44:6f:95:9d:af:b5:72:87:
                    8d:c6:57:d7:50:dc:18:35:42:c4:68:ec:64:a6:58:
                    1b:1e:b6:f9:65:b1:8d:72:0c:ef:7e:76:66:38:ac:
                    ff:43:5f:7c:c8:b7:53:c2:04:96:04:56:b4:d7:33:
                    b8:1d:94:59:68:5f:72:e7:c3:53:51:7d:63:4d:54:
                    33:ea:8d:39:c5:ea:8f:79:9e:d9:58:77:3a:0d:09:
                    42:4a:b1:45:8e:92:d1:a8:52:a4:dc:6e:c7:63:02:
                    9d:c7:b8:71:9d:59:7d:fe:36:9a:0d:d6:92:ab:a5:
                    a2:a3:7f:7c:93:23:e5:ab:8c:c7:d2:34:e4:a9:78:
                    4e:dd:84:dd:36:a9:c1:54:de:6e:43:c5:19:f4:bc:
                    a0:24:67:dd:88:64:12:e8:36:4f:bd:59:ba:5c:fb:
                    94:02:22:c0:f2:8b:55:9d:e5:3c:a9:3d:e2:aa:d9:
                    d9:48:c1:a6:b2:35:bf:68:58:29:bc:24:52:62:aa:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5D:B7:6D:EB:CF:84:76:66:47:5C:77:1B:2B:E3:26:33:BD:37:47
            X509v3 Authority Key Identifier:
                keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:00:0d:63:2e:4d:d8:0f:8c:14:c1:bc:82:15:d7:4e:6c:19:
         4b:60:9a:0c:49:ef:ab:af:58:b6:ae:66:7c:6b:f6:e7:5d:7a:
         41:d2:cb:13:fb:a7:56:c7:70:f1:49:58:f6:6b:ce:a2:75:c3:
         4e:9b:6d:cc:73:b9:fa:86:c7:42:6e:fc:9c:c5:5c:e8:2a:fe:
         96:98:b3:99:fd:63:d0:8e:d7:b7:19:60:87:5c:ad:4b:dc:a4:
         80:93:56:bf:66:f2:23:48:d5:a2:18:4a:b2:44:99:f8:be:f0:
         97:2c:87:9b:22:57:db:d4:76:f0:61:77:70:8d:f1:7b:77:73:
         e1:89:1a:d4:5a:cb:c4:54:8b:7b:82:20:44:3b:68:bc:e7:37:
         d7:e5:8f:1e:f5:52:e5:72:74:f7:eb:c8:f3:f6:e4:ac:75:07:
         02:5b:3c:0f:57:4c:7b:ed:f8:1e:b8:ed:b7:2f:f5:7f:27:a8:
         e8:d7:d2:99:78:c2:be:7f:8d:95:4e:e3:ce:73:4a:7e:57:38:
         71:2a:f6:39:02:b3:67:e9:1f:1a:34:f7:b0:08:05:2e:47:f2:
         5f:04:80:fa:f8:3d:b9:1f:1b:a4:97:f6:b0:de:ac:7a:96:d9:
         f6:61:1d:1c:1b:d7:e8:8f:b6:b7:b1:58:cd:91:05:4f:6f:d5:
         e6:5f:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:02 2025 by rpki-client