This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
File:                     1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json)
Hash identifier:          BQVP296YE2N76AslfzU0Uwg5JpoXkAFoExp+gzOt+yE=
Subject key identifier:   3B:A0:66:9A:4B:C7:C7:D0:33:2E:E2:F9:3B:47:E2:DB:12:BD:46:FD
Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
Certificate issuer:       /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
Manifest number:          F7
Signing time:             Fri 05 Dec 2025 03:20:16 +0000
Manifest this update:     Fri 05 Dec 2025 03:20:15 +0000
Manifest next update:     Fri 12 Dec 2025 03:20:15 +0000
Files and hashes:         1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: TGN+p5CBxcIz5OghXxs7cwEcCucj7XL3twjrbDDbn+0=)
                          2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: ewsNS72wnAdnQiFMusstfvI/PZNeUDtev9nr2+xdPsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
                          rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
        Validity
            Not Before: Dec  5 03:20:15 2025 GMT
            Not After : Dec 12 03:20:15 2025 GMT
        Subject: CN=69324f70-0394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fe:86:cf:e7:e7:bb:34:d7:77:16:46:d6:88:
                    84:58:3c:c2:ef:93:b4:d5:c0:f7:f8:42:68:99:b6:
                    e3:36:38:db:54:04:0b:d4:17:d6:98:bb:04:a1:14:
                    2e:33:02:49:e9:f2:dd:39:3e:7d:20:4f:f0:f8:09:
                    16:f8:d3:e2:11:8c:aa:05:50:2d:e5:60:3f:ae:e5:
                    e1:44:71:0c:dc:1a:bd:02:e6:5a:de:bc:e2:94:a9:
                    ca:1b:73:45:a2:fd:ce:92:cb:66:7c:9c:ea:c1:b1:
                    04:2e:23:d5:93:40:c1:ea:86:b5:16:d1:29:3e:9a:
                    3f:ab:02:07:e5:08:e7:ca:a9:e7:eb:eb:c0:a9:a2:
                    fb:7f:9d:b3:20:e8:13:2f:82:a4:3c:cc:e9:80:78:
                    1f:61:53:6f:2c:dc:09:18:7e:44:22:34:1a:02:5d:
                    1c:94:3f:3d:6f:23:6f:9d:9e:5c:da:66:8e:33:68:
                    8d:3d:97:35:9e:04:5c:3d:c6:93:0a:f4:13:18:93:
                    91:11:32:a3:8c:fc:ff:a6:c5:b9:ab:0d:c1:6f:2e:
                    d9:ef:5e:e9:2e:21:5c:1d:74:cf:42:dd:28:08:66:
                    c9:40:b2:8d:36:ca:0b:bb:93:87:dd:86:14:e0:b5:
                    28:64:30:49:15:f6:01:15:f7:7a:6b:56:08:b9:c0:
                    f5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A0:66:9A:4B:C7:C7:D0:33:2E:E2:F9:3B:47:E2:DB:12:BD:46:FD
            X509v3 Authority Key Identifier:
                keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c4:fd:ce:8d:17:c7:d9:c6:68:1b:53:40:5e:39:7d:a7:31:
         73:12:e9:15:bb:83:8a:fb:99:80:0f:7c:47:30:62:9d:a9:da:
         14:49:fd:a3:25:ea:1b:cf:8b:5b:c0:4e:3d:63:4b:c5:62:59:
         d9:33:cb:11:5f:af:63:0a:13:48:c0:88:34:47:2f:ab:80:e3:
         73:75:ad:ec:91:9a:d9:e8:71:30:51:16:ff:9a:11:c1:f2:2f:
         c5:d5:ca:7c:72:9c:b2:74:fe:c0:7e:df:80:20:35:f6:11:8a:
         10:9d:5c:f1:50:00:54:11:be:b1:f5:43:bd:5a:26:52:44:19:
         aa:34:5c:e0:4f:8c:10:ba:7a:d0:df:f1:9e:69:46:20:fa:48:
         e8:0c:e5:7a:83:2b:61:fd:8b:03:aa:09:81:42:91:68:21:60:
         8e:c1:b0:28:0e:39:02:f0:7c:87:80:a9:65:8d:84:44:d9:7a:
         e3:93:65:a4:64:25:45:e0:82:0e:de:c4:98:29:f5:19:33:e4:
         0e:24:96:c1:6b:49:5a:4a:15:df:16:77:bf:fa:a3:96:a0:06:
         b7:37:1f:92:79:d9:80:a8:4e:62:d4:c8:3b:41:e7:fb:8b:7d:
         c4:69:1c:1c:e4:7c:2f:c8:b9:02:77:df:9f:8f:79:01:a6:bc:
         74:17:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:12 2025 by rpki-client