This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
File:                     7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json)
Hash identifier:          MohUWf1cB4VLcsfYT2sQeQ4ZNnGADwTRVyK4nIeOCUI=
Subject key identifier:   C8:FF:F9:69:51:7B:49:56:93:B5:58:8B:4F:39:CB:EA:C6:A8:39:42
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       078B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
Manifest number:          0672
Signing time:             Thu 04 Dec 2025 21:50:36 +0000
Manifest this update:     Thu 04 Dec 2025 21:50:36 +0000
Manifest next update:     Thu 11 Dec 2025 21:50:36 +0000
Files and hashes:         1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: EjaRf2nrR1aINP6gOp14MgxYNpBlh/AZTKUPD+dEgUM=)
                          2: 5E8F2C98FA5311EE9E6A8150C4F9AE02.roa (hash: iE6iwKcnxwEjtE9WXcQu4gGo9yNtUwjira1PGhRAUcI=)
                          3: 8FA95EF2E52811ED863E8C34C4F9AE02.roa (hash: RH854KQ/5YN87OjqRkRCiFr2IhqYgncWKfVpFPV13y0=)
                          4: 06FAE294924F11EF80B1115DC4F9AE02.roa (hash: mH+1wX3U3E+PwU1lGyk1jq9ZSIZ/eqIJUcTr6f/b6Xg=)
                          5: 3F3E4D0426F711EE81AD9A45C4F9AE02.roa (hash: SLlCncO2DyPvvTYxJFC2PAuP59bF79k10dAC8HNVIQs=)
                          6: B12A25C49A0311F09156AE56C4F9AE02.roa (hash: qyAII90csy0Rn8L/6v873TKIy8BdpI8H9BwdfO34meM=)
                          7: 18DDC828563A11F092DD586EC4F9AE02.roa (hash: RG7TCR+hu/+Ok550Z5N0qOkdev6k9kUyJ/FaV+2X5Ic=)
                          8: 17F4DF6E563A11F092DD586EC4F9AE02.roa (hash: nLnWAwdemI13C2q8S/qa+9BJ2323t0M3P0SOVSaJVNw=)
                          9: CED6A59A032B11EFAC30281BC4F9AE02.roa (hash: 62gMKAte/bNphw0tPYUF/ZvmE1/0Yr02LZLp3QQyGq4=)
                          10: F3E5A660E69E11ED841AC682C4F9AE02.roa (hash: pFm7n9VGiFUAcF3W7YGai7F1W8FI2/WlsVm3RdvaL8A=)
                          11: F2B3F2BA7DFF11F09B687570C4F9AE02.roa (hash: pQhLpM5Rl+aW3gSv3+uxd5+iWqRbm+2iGTggucxA9FM=)
                          12: 2FCAEB4AE15311EEBE7C925BC4F9AE02.roa (hash: Rgp4CAddp4zh4GvoUSZvZkXy9j88DgqM6tLo5LqrskY=)
                          13: 8E6DB97451C111EE9E564B29C4F9AE02.roa (hash: x5ZXcyZot9NxnkynC1UvcdUEHIRqiQ9BeutOwqKe7/Q=)
                          14: 1EA2E8FA819811EFBCB7403CC4F9AE02.roa (hash: 1DbRY7Dt+Gln8rSAGnsKUeRj0Sm0DLBT94bWpJpOtoQ=)
                          15: 718A62C23EFE11F08F98A223C4F9AE02.roa (hash: g3DvDfWhQW+pgOd3WbISADZLSahseyB4cwXN77ZdFPk=)
                          16: 9EE451A08ABE11EFA0AEF447C4F9AE02.roa (hash: KIrSmQo5iCGuGlJlwWjl9JWnA4uFzugb+1cf51uUuU4=)
                          17: 919E2B20E52811ED863E8C34C4F9AE02.roa (hash: Kqq5i0mycJsM2p96QyceGbqT0cTIxmv0LLK0yaPey48=)
                          18: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (hash: MGKfZkUlP4hm8yifkXlXdpMG3M4ujfcWqT10DluRHA4=)
                          19: 6904305CA65111EEAAF77C79C4F9AE02.roa (hash: lb9o/vIcDBEjvp+RqGQSW3gOmj7ndA5EvwIHbcU4984=)
                          20: 9FA2A3588ABE11EFA0AEF447C4F9AE02.roa (hash: 531oQX+rVA8FSL6e8iLTYKTaSv/hBNMulZCg1OlX9WE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931 (0x78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Dec  4 21:50:36 2025 GMT
            Not After : Dec 11 21:50:36 2025 GMT
        Subject: CN=6932022c-2ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:a6:1c:14:e9:81:e5:85:03:74:fc:55:9a:
                    35:2b:23:a1:3d:d8:eb:b0:e4:32:6a:4e:95:b3:01:
                    99:a0:04:11:95:ab:32:7a:17:0f:89:c1:c5:6f:d1:
                    94:d4:62:35:8b:22:57:40:f7:ac:51:e9:44:3f:0f:
                    97:f6:38:d2:06:b6:3c:51:7b:2d:c8:97:29:36:f1:
                    74:51:7f:a1:91:b2:67:d0:0a:41:62:89:cf:1e:05:
                    c6:ed:84:e9:f8:0a:93:b3:25:1f:a6:63:cc:f3:6b:
                    8c:31:43:f1:4e:ae:ff:12:e3:ff:cb:1c:2d:d6:ed:
                    c8:d9:f4:d5:e9:12:24:12:35:b0:18:0d:3d:26:8a:
                    22:13:05:01:96:c9:77:fe:52:fd:b7:93:97:ff:b2:
                    0a:36:7a:74:c6:ef:f4:67:3f:e4:38:e5:5b:a7:3f:
                    0e:15:ef:b9:fc:cb:85:b0:57:79:e6:16:cd:23:4f:
                    53:68:01:9e:16:eb:b7:9d:68:a2:81:43:74:97:c5:
                    26:db:25:61:f3:46:d2:0b:de:fd:f6:a1:84:7e:88:
                    67:e2:35:3a:5f:94:5c:2f:21:33:23:7a:9b:f6:91:
                    53:1f:b0:9d:83:5d:f9:f3:66:0e:db:55:6e:6e:e2:
                    35:c3:16:69:db:bf:f5:06:5e:bb:88:8d:fa:69:97:
                    c1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FF:F9:69:51:7B:49:56:93:B5:58:8B:4F:39:CB:EA:C6:A8:39:42
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:89:4f:29:11:cd:2a:ae:e4:a2:f6:e0:a0:dc:6e:48:2f:72:
         a9:c7:b1:89:46:d1:1f:35:cb:65:72:25:9c:d0:c1:60:51:44:
         f8:06:f3:6d:de:7c:21:00:d0:86:47:0b:cb:94:ca:fc:aa:94:
         56:2a:af:13:f7:a8:07:99:93:80:03:b9:b6:e9:9e:7f:44:86:
         6d:8a:f6:4b:f2:3f:40:ef:bc:f0:b2:8d:4b:27:e8:63:20:f6:
         21:dc:6d:bd:19:92:bb:64:41:fe:f8:dc:db:15:54:0d:95:b3:
         94:95:09:86:a1:2d:5f:6d:31:f9:9b:08:82:19:81:f9:7a:f4:
         05:20:c1:ab:54:9b:f1:9a:fd:f1:a0:68:02:07:7b:b9:53:50:
         42:d9:10:76:88:e4:33:fe:d2:a0:a9:a4:aa:83:d7:c0:e5:d9:
         32:54:ba:55:cc:19:a1:23:da:d4:23:04:52:1b:31:0a:39:ee:
         61:4d:75:24:f8:19:c5:7a:30:05:e4:3d:61:0d:a8:bb:61:33:
         68:08:fc:ab:4a:09:86:25:af:60:ea:6d:b5:59:e0:5a:d6:c9:
         d0:c1:cb:8c:ea:e1:61:b9:ce:3c:85:cc:b5:71:e0:5a:b6:9d:
         6c:99:e0:6e:3d:15:fc:59:65:f9:83:f1:b8:3b:f1:c3:9a:d8:
         40:87:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:49:28 2025 by rpki-client