This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
File:                     7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json)
Hash identifier:          liJmk07qhQ6LMaf6Qfa4t3MfYA9viAymW8WIkXiJ9hA=
Subject key identifier:   C1:F6:42:70:EA:0B:61:D0:D7:DE:48:9A:86:DB:B2:1E:D7:52:F4:20
Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41
Certificate issuer:       /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
Certificate serial:       0E6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
Manifest number:          0E63
Signing time:             Sat 20 Dec 2025 17:28:06 +0000
Manifest this update:     Sat 20 Dec 2025 17:28:06 +0000
Manifest next update:     Sat 27 Dec 2025 17:28:06 +0000
Files and hashes:         1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: Coa6evY8z+JQh72B5OKU6hHzhgNEzT+W/n8kMk1QplA=)
                          2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: kbrsBWLPmTs2n5OoEUQRcNgIkU1aEuNqMVThcieEjvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl
                          rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3692 (0xe6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
        Validity
            Not Before: Dec 20 17:28:06 2025 GMT
            Not After : Dec 27 17:28:06 2025 GMT
        Subject: CN=6946dca6-d76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:8c:ef:c7:3a:db:3b:fa:f1:d3:df:28:2e:
                    ee:6c:f5:d6:13:ec:83:bd:13:ce:58:10:ca:0a:57:
                    e5:e0:ad:5b:b6:e0:d3:34:0a:1a:e0:59:7e:4e:ec:
                    de:7b:bc:19:19:41:77:48:24:fc:2c:9c:1c:36:96:
                    bf:c7:84:3c:8e:2a:a3:7d:b0:49:9a:ff:99:ff:44:
                    5d:34:f2:ef:d4:e6:86:73:39:33:74:15:8f:3d:ab:
                    3e:e5:f4:2e:bc:be:42:13:8e:6b:b0:d2:be:54:47:
                    9c:1c:05:8f:f8:62:9d:1d:fd:33:31:cc:d5:b5:28:
                    0d:9d:ac:bb:ac:e5:86:0f:12:a5:67:fc:6b:a7:41:
                    07:a6:4a:a8:26:79:de:84:da:02:a4:b9:84:bf:94:
                    5d:48:e6:af:90:56:ae:c7:55:db:46:77:5c:50:b5:
                    88:3d:41:a6:c4:e3:0f:a6:83:40:92:0e:60:30:bf:
                    fe:8c:27:6c:e1:24:52:c0:77:d9:95:02:7e:60:db:
                    b4:4e:9f:0f:58:c4:17:69:29:4a:85:48:33:3a:08:
                    7a:29:e4:65:18:f2:d1:1d:db:36:5e:c4:7f:2f:07:
                    15:71:aa:b1:17:26:0a:9b:1c:c0:ef:16:c5:1c:5e:
                    47:39:9f:59:d3:30:4f:a5:f8:62:b3:ea:db:aa:b7:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F6:42:70:EA:0B:61:D0:D7:DE:48:9A:86:DB:B2:1E:D7:52:F4:20
            X509v3 Authority Key Identifier:
                keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:55:7d:21:de:86:94:03:73:ec:56:16:57:8e:a0:0e:d8:46:
         06:ea:4f:07:b7:03:e4:d3:11:50:93:ef:ca:d7:2b:73:45:66:
         7b:50:9f:4d:39:af:27:fc:59:fe:43:79:e4:af:0e:d5:fc:81:
         3b:51:d9:c7:b8:8b:ef:4b:a7:03:fa:5c:9f:1a:99:b9:b3:1d:
         8e:36:62:a2:97:b3:78:60:29:24:8f:5f:f1:a2:c6:7b:a4:c0:
         b7:12:e5:0c:be:58:dd:42:6b:a8:b0:a4:b6:21:c1:9d:6a:b5:
         b2:57:ec:08:ed:e9:5b:d1:6c:53:33:06:12:32:69:ee:2c:69:
         bb:03:e3:78:25:35:9f:ad:80:20:b9:1d:76:ec:d2:31:2e:84:
         40:cc:3e:d0:df:23:ce:36:8f:65:d2:21:99:19:79:ab:a9:16:
         5b:53:00:13:c4:6b:9d:f8:7d:d6:12:e4:ef:79:65:31:b8:49:
         d8:d8:de:90:49:e7:e1:40:d6:78:2a:ee:c6:42:d8:c3:b3:a2:
         d0:47:47:79:ce:ef:02:a6:f1:eb:cf:12:e0:99:56:5c:ba:06:
         63:c8:3e:31:26:32:5f:28:0b:f7:4f:e7:11:87:03:66:c1:b7:
         a1:9b:78:cd:ed:14:67:54:b2:27:73:fe:96:ef:1b:e1:d7:20:
         8b:c6:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:15:31 2025 by rpki-client