This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File:                     kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier:          pzvZGYaEcy7d5xst6Df06OaNdfGTmc4twVYAQD06IBE=
Subject key identifier:   EC:40:A0:7A:FC:96:61:F2:78:18:C0:1E:F5:8B:5C:F9:93:18:97:A4
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer:       /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial:       0A80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number:          0A78
Signing time:             Sat 20 Dec 2025 19:05:32 +0000
Manifest this update:     Sat 20 Dec 2025 19:05:31 +0000
Manifest next update:     Sat 27 Dec 2025 19:05:31 +0000
Files and hashes:         1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: oc40RsY300D5UxBbUgwmjldlu6EmTM0EYLyRvjrijtU=)
                          2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: OgrtZob9BenmszWmMepyuR4+jTnWhH21Nc4ELG9DAkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2688 (0xa80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
        Validity
            Not Before: Dec 20 19:05:31 2025 GMT
            Not After : Dec 27 19:05:31 2025 GMT
        Subject: CN=6946f37b-dc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:c3:f5:41:c6:db:aa:dd:f7:03:9c:31:a2:
                    c2:43:fc:dc:52:5e:66:19:5b:d1:b3:e5:2b:62:af:
                    57:45:dc:28:83:12:f0:43:82:c1:80:d2:79:7a:69:
                    d5:ef:50:b2:ac:b2:cd:c9:32:2b:12:c5:94:19:ed:
                    65:2e:3e:20:5a:d7:60:18:0b:9d:f9:0e:bd:81:7c:
                    47:03:02:8c:86:44:32:05:10:c1:01:0d:17:2c:51:
                    af:09:ce:dc:73:27:c8:03:dc:d0:55:ef:b0:fd:fb:
                    33:8d:73:81:d6:e0:5e:51:e1:fd:e4:a8:77:de:74:
                    e5:cb:e7:9d:15:cf:a2:37:cf:22:56:67:a3:6d:93:
                    5f:3a:0a:db:37:9d:b7:7e:3d:e6:36:4c:84:6d:f0:
                    58:b9:78:d5:46:b1:eb:49:9d:01:46:7d:3a:54:dc:
                    6b:6c:9d:fb:50:ca:6b:d5:84:4d:35:15:0c:d3:6b:
                    ef:34:7b:1c:85:7d:fe:3c:33:af:82:8f:da:3b:4b:
                    6a:ac:8b:29:7f:cc:48:03:62:66:08:a9:42:f8:36:
                    ae:42:9b:00:d4:26:52:04:8b:81:f6:f6:53:17:e9:
                    6c:fe:b4:ee:98:19:fb:48:81:6f:6a:46:01:e8:d9:
                    73:0d:16:19:40:20:9d:f7:b1:09:e2:b0:98:93:2e:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:40:A0:7A:FC:96:61:F2:78:18:C0:1E:F5:8B:5C:F9:93:18:97:A4
            X509v3 Authority Key Identifier:
                keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a9:a5:20:a0:cc:d7:cf:49:d8:eb:ec:9b:e4:2a:5b:79:3c:
         27:1e:9c:d3:ea:e2:0d:9b:44:df:af:fe:05:9d:59:9e:96:23:
         cc:5e:2a:1a:22:ab:46:c7:87:ba:b1:5d:bc:90:e4:3e:cd:a2:
         6a:eb:e7:dd:a8:f6:f7:71:c0:51:88:64:7c:40:87:69:a3:60:
         ce:41:64:68:2c:1f:4f:01:d1:df:3d:d5:90:d1:32:8d:87:e2:
         16:49:a1:33:79:53:8c:42:0c:b8:8c:22:eb:df:bf:d4:45:e1:
         d5:57:c4:c1:55:be:ee:db:70:72:ef:e0:5c:6d:0c:f8:c0:9a:
         ea:c1:83:cd:85:59:80:59:12:bc:86:85:54:83:23:81:4d:c0:
         a4:61:9d:a1:d8:83:28:ab:72:83:bb:91:3f:9d:7f:0c:60:a0:
         c3:45:9e:85:03:4a:83:2f:cf:45:22:58:c5:e7:e6:05:93:f8:
         a9:b8:ad:71:84:3d:92:a6:b3:19:ed:f6:ad:69:98:a9:28:50:
         3d:b2:aa:c8:28:a3:6e:7b:ea:cb:37:37:3f:06:11:89:02:7f:
         3d:f3:46:af:e4:2b:e8:ed:b2:44:b6:83:bd:50:05:b6:2d:2f:
         99:83:66:bb:d3:82:5f:34:d8:0b:ff:c3:3e:d4:8e:92:52:c7:
         0c:be:8d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:23:32 2025 by rpki-client