This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File:                     M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier:          EmlfT0JiK75TXqcxy+wVo7NpAdBSNfUpUHOCnpuPmtc=
Subject key identifier:   3F:A1:44:CC:64:7E:2D:D6:A4:6B:83:09:87:0F:A4:71:F1:B0:B2:F8
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer:       /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial:       02BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number:          02B5
Signing time:             Thu 04 Dec 2025 23:50:04 +0000
Manifest this update:     Thu 04 Dec 2025 23:50:03 +0000
Manifest next update:     Thu 11 Dec 2025 23:50:03 +0000
Files and hashes:         1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: DZoPGYWRGFo35ckVz2aF4ux7wpVc5/GJOyGAUE5cIJA=)
                          2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: ExbEkd7oCoyYXXiOdOycDgRHQS6NdbUqsudnvKbSXwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
                          rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
        Validity
            Not Before: Dec  4 23:50:03 2025 GMT
            Not After : Dec 11 23:50:03 2025 GMT
        Subject: CN=69321e2c-677f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:55:d1:bf:d5:57:b7:21:52:25:10:e5:59:
                    21:e8:70:4a:f9:17:76:73:05:13:5f:3d:b7:74:77:
                    32:68:b0:6e:ed:fd:db:a6:f7:31:f3:1e:a9:31:dd:
                    09:02:0a:c6:94:26:5a:db:d0:e5:3c:e6:5c:65:5d:
                    2f:57:f2:0f:a3:80:10:82:d2:68:a2:82:a4:e2:77:
                    86:a7:1d:ab:0a:48:38:db:be:2a:f4:47:28:a9:cb:
                    2d:6c:d4:0c:68:00:14:f2:c3:13:9a:d8:43:6a:ea:
                    f5:a2:82:ba:9e:15:aa:69:d1:9c:c6:8f:4e:d6:9f:
                    1e:f4:48:5d:74:72:4c:af:6c:80:77:80:83:f0:ce:
                    fe:a7:70:bf:3d:d5:49:7b:33:b8:e6:c3:44:a6:31:
                    41:e0:2f:99:24:5d:75:90:31:48:c6:2f:61:f8:11:
                    c7:5f:28:53:c5:71:24:64:26:ef:34:c5:fc:85:bf:
                    c6:34:65:57:f1:3c:03:a9:be:da:e4:ca:7c:5a:d5:
                    b0:80:00:45:c4:61:e6:22:13:ed:a9:8f:d7:68:cf:
                    52:23:a6:19:8a:e0:9f:93:34:e2:95:b2:a0:12:06:
                    a1:90:58:be:c6:bb:82:d3:bd:e9:e1:bf:96:29:00:
                    c4:69:98:aa:31:1b:5e:06:df:b5:7c:1a:f8:25:f2:
                    1c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A1:44:CC:64:7E:2D:D6:A4:6B:83:09:87:0F:A4:71:F1:B0:B2:F8
            X509v3 Authority Key Identifier:
                keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:dc:dd:84:0a:c1:de:54:6f:24:9b:96:33:62:ee:b1:c1:07:
         ad:1f:3d:67:80:44:0a:a9:14:20:63:90:fd:0e:d8:da:3e:d9:
         0f:d6:94:dc:cd:e3:28:10:e5:16:d4:58:63:eb:5c:b4:1a:5d:
         3a:2a:59:7d:2b:4e:46:29:e8:c7:6e:c6:ad:5c:18:37:f4:31:
         82:a1:56:96:26:34:94:79:15:76:13:92:1d:01:2d:b2:b5:35:
         e8:fd:12:ea:e9:d3:fe:b8:fd:27:01:53:bd:b1:27:e8:8f:05:
         6d:ad:1d:ee:14:c4:e2:40:0b:99:61:1f:bc:3d:30:25:99:cc:
         fa:aa:ee:a4:22:e3:f3:84:15:ca:12:53:30:d7:55:12:7e:31:
         90:e8:b3:67:cb:4c:f8:53:41:1a:9e:74:b9:96:e4:08:89:84:
         42:67:0c:43:5e:80:b3:1c:30:97:d8:8b:99:06:cc:32:d5:c2:
         94:cd:56:df:d7:5c:88:2e:c7:f2:ba:26:76:89:df:db:9e:5c:
         18:ed:16:42:3a:84:d8:e3:72:31:17:c9:50:1d:46:12:75:53:
         6e:d2:5e:0f:f0:0a:e6:ff:64:7a:b6:b5:b6:69:1c:2d:0b:94:
         66:bf:1f:2f:63:32:e3:56:bf:b3:fa:9c:b7:14:86:8d:06:c5:
         22:ba:aa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:02:32 2025 by rpki-client