This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
File:                     t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json)
Hash identifier:          tggh3eKek7TBMyBJSH57fhyCUgCj84F8bhxtLwzPC3Q=
Subject key identifier:   73:FB:1F:55:85:1B:6D:F3:B4:1F:96:40:2E:8D:3B:87:C9:59:4D:A5
Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
Certificate issuer:       /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Certificate serial:       0805
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
Manifest number:          07FD
Signing time:             Sat 20 Dec 2025 20:26:58 +0000
Manifest this update:     Sat 20 Dec 2025 20:26:57 +0000
Manifest next update:     Sat 27 Dec 2025 20:26:57 +0000
Files and hashes:         1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: Xg5IslcqEV1cjiQV7lk9rI/wk89Ff5fLT0YkfNtVfsc=)
                          2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: BfrlJ/DmsefwZSjV8vfM9JqfEVGXH8+gCgu9wILwOPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
                          rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053 (0x805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
        Validity
            Not Before: Dec 20 20:26:57 2025 GMT
            Not After : Dec 27 20:26:57 2025 GMT
        Subject: CN=69470691-6a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:05:40:38:a8:5c:1c:15:60:cb:14:fa:ff:
                    89:2e:05:0c:ad:5d:03:f6:92:b4:9e:18:93:00:81:
                    00:12:a2:d1:5e:b7:2d:f2:04:0b:70:24:b8:14:2f:
                    15:86:7b:5f:b1:f8:4b:b7:b9:0d:fa:59:54:e6:b6:
                    e2:8d:fe:1f:41:45:23:89:47:e3:62:f0:5d:d7:18:
                    87:82:67:57:fd:c3:25:03:85:4f:7e:0c:6d:9b:8f:
                    40:14:2b:f2:e5:32:f9:85:a7:71:8a:6b:79:3e:15:
                    d4:4c:22:e3:c5:ce:5e:26:0d:5e:22:1a:3b:07:aa:
                    20:90:96:25:87:27:b5:7b:91:1b:5f:44:ab:6f:48:
                    84:7a:33:6f:df:d1:a7:43:72:35:ab:59:90:9f:88:
                    02:91:b7:21:0c:21:c7:66:15:4d:ac:fa:7e:4d:c1:
                    48:69:37:0d:a9:66:51:94:19:41:3a:e7:d8:ff:9a:
                    93:28:25:69:d9:65:4f:5a:36:10:7c:72:77:fe:d7:
                    e9:94:ae:72:46:ef:71:1b:45:df:a3:1f:c4:42:33:
                    2b:e8:aa:63:88:e5:09:bf:41:3c:02:fe:72:08:21:
                    fc:73:4f:b9:01:f1:6b:fb:6d:a2:dd:4e:c9:ef:50:
                    1c:d1:b7:b2:8d:3b:e8:1c:c1:fe:bd:75:8f:e6:26:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FB:1F:55:85:1B:6D:F3:B4:1F:96:40:2E:8D:3B:87:C9:59:4D:A5
            X509v3 Authority Key Identifier:
                keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:67:0e:ab:db:0d:e0:3c:41:89:97:54:6d:d7:c6:02:64:82:
         f8:23:14:0a:0e:bf:3a:ac:2d:ad:b1:b0:47:d1:b6:bb:b9:8d:
         96:19:75:bd:c3:47:34:aa:06:af:7b:fd:6c:f3:5a:5b:9d:23:
         c6:67:1e:e0:14:7c:04:58:d4:64:14:df:85:e2:c6:8f:b5:09:
         f6:cf:48:8e:69:74:36:41:24:51:a1:73:8f:e6:cc:1c:f5:c8:
         ab:a6:b4:80:e4:e0:81:6a:65:d6:98:f7:70:04:fe:60:95:2b:
         d6:cf:23:11:05:34:cd:d9:27:53:3a:9b:a8:8e:7a:34:1b:b8:
         91:b7:86:31:fb:b3:4d:46:86:e2:ca:31:c8:d3:49:d6:6c:39:
         ca:ad:b6:f3:3e:e4:05:6b:58:85:47:9c:38:df:9f:c5:e4:78:
         51:a0:fe:9b:10:da:1f:12:68:f5:80:d5:5a:3c:6d:47:5c:f4:
         f1:b8:5d:75:91:fa:cf:ba:6c:4e:b6:5a:2b:52:39:60:12:0c:
         bc:46:5c:eb:2e:3a:dd:d9:2d:86:cc:6b:ee:e4:05:bc:e9:94:
         ac:f1:9d:5f:bc:35:25:01:52:c7:87:86:17:a5:19:2c:7c:7a:
         dc:d3:84:e1:d7:ca:aa:18:fa:bf:aa:7c:0f:18:ee:c1:b6:70:
         85:52:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:08:36 2025 by rpki-client