This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
File:                     7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json)
Hash identifier:          +8cT0O+jrZf/LEIbWTHs5ISHiTeCfEoaVunE3Y1Vvac=
Subject key identifier:   A5:30:16:11:D7:F8:7C:37:A5:8C:4E:4E:DB:E8:D2:21:BD:12:BA:DF
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Certificate issuer:       /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial:       0A5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
Manifest number:          0A22
Signing time:             Sat 06 Dec 2025 19:07:26 +0000
Manifest this update:     Sat 06 Dec 2025 19:07:25 +0000
Manifest next update:     Sat 13 Dec 2025 19:07:25 +0000
Files and hashes:         1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: 6ypDUTEy2h+ffV7cS7GKt/GW+j7N/h/CEcvYEyYkw58=)
                          2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: jzzWgD3HRpvAEJBXK/vfne+ihxsbOdjQU7WB0KMRVgw=)
                          3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: ZT22vRI1IQ1BmtH9ALydP3ilyhXOSnuc69Bf2IwyKlI=)
                          4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: 2Hvw21rvCVCh8S0/7oApM9oB0Qgb7ulGPIHYlQU89cU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2653 (0xa5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
        Validity
            Not Before: Dec  6 19:07:25 2025 GMT
            Not After : Dec 13 19:07:25 2025 GMT
        Subject: CN=69347eee-db16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:7d:65:8f:1d:c0:c4:b6:c4:7d:96:83:c0:
                    bd:e2:0d:a7:10:39:2e:74:33:f4:08:6a:31:f1:d7:
                    99:d6:26:f2:b3:98:b2:b3:49:be:4f:ef:39:f3:b7:
                    84:27:ae:e6:91:7b:c6:20:fc:b1:6a:bc:d6:26:2b:
                    99:1b:97:37:7a:26:42:4c:ca:73:5d:a2:ad:32:c0:
                    76:51:b9:34:44:9a:cd:78:b4:fc:2e:a6:d8:44:32:
                    21:f9:f0:43:7b:f3:94:7b:69:a2:69:e3:0a:11:be:
                    15:1e:08:78:27:c6:be:4f:df:8f:a5:ba:c6:32:1c:
                    09:01:d2:96:60:4f:79:c3:4c:6c:62:79:eb:a4:e4:
                    b9:e0:ee:e6:48:4e:90:d3:fe:78:82:a1:7c:ca:94:
                    f4:a2:3b:10:f6:cd:2e:9c:bf:9d:ae:96:f3:b6:b4:
                    e9:0a:83:9d:a5:89:b5:01:81:74:c6:64:56:dd:08:
                    09:58:ce:e8:87:07:73:3f:f5:8c:86:f1:ad:4b:10:
                    5d:dd:69:23:1b:4b:3b:1e:fb:35:0a:12:25:c1:b2:
                    a7:a7:83:35:42:e3:8e:bc:d3:2a:71:9c:88:9a:42:
                    0c:ea:b8:be:96:73:69:ee:54:da:fd:0d:54:89:f9:
                    81:14:ad:33:cf:31:b1:20:73:e0:49:ae:fc:90:99:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:30:16:11:D7:F8:7C:37:A5:8C:4E:4E:DB:E8:D2:21:BD:12:BA:DF
            X509v3 Authority Key Identifier:
                keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:16:a1:dc:b4:c2:c7:00:be:61:f5:91:69:7d:1b:4a:dd:88:
         e3:03:ea:5d:4b:d6:f6:f4:e2:d1:73:15:11:86:41:d2:33:65:
         eb:aa:04:3c:cd:81:8b:1a:da:14:55:5d:e0:c6:7d:40:be:22:
         e5:ae:2f:e8:41:b2:8f:30:78:86:73:e8:e6:22:bb:45:d1:b3:
         f3:c1:5e:60:24:9b:8f:0a:9d:ae:38:f4:59:45:0d:2b:6d:06:
         98:30:94:90:d6:56:cb:c5:0c:50:a0:cb:de:2d:61:0e:19:c7:
         68:56:19:70:a3:3c:79:08:12:2b:ec:1d:7d:d7:17:d6:6f:62:
         ee:23:7f:99:93:b4:4b:42:83:8d:e9:fb:81:c7:6d:41:c1:ba:
         61:23:9b:7a:14:43:30:b7:ce:66:c2:ed:a6:69:02:17:2d:6f:
         9a:0c:87:58:cb:96:2b:34:fe:6c:84:6b:52:f8:db:fb:4d:15:
         18:57:01:97:39:80:be:f5:74:dc:fd:53:8a:50:8c:74:45:e0:
         fa:4c:fa:19:94:08:a2:91:f4:e8:f7:12:db:58:5b:d0:49:56:
         9f:14:51:6f:25:bc:e5:05:7a:db:94:ca:45:66:df:3a:24:c3:
         76:b5:f6:6b:09:bb:ee:c8:53:73:98:01:46:a4:c0:1c:47:8c:
         ed:bb:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:01:35 2025 by rpki-client