This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
File:                     DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json)
Hash identifier:          6C5+okqbK3jpYmPRMrYy58ISDQ7CbDL3eUD0+y+t24U=
Subject key identifier:   26:61:4F:60:9C:51:43:82:73:06:81:F4:98:C5:40:CF:94:F9:DF:C8
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Certificate issuer:       /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial:       052F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
Manifest number:          0527
Signing time:             Thu 04 Dec 2025 22:07:29 +0000
Manifest this update:     Thu 04 Dec 2025 22:07:28 +0000
Manifest next update:     Thu 11 Dec 2025 22:07:28 +0000
Files and hashes:         1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: TfgCdYHqiDXwCW575lIWNHqh6iSvLxUIJU1hYEsq3tI=)
                          2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: RwcRY83ScxlbqM04nHpwXB0Y4y38xjFyFzwqEWYpGkc=)
                          3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: AAv9iRZkCrIdjmlojo08VQ3Lr0iHsrSZtwCxTUl/qrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
                          rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1327 (0x52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
        Validity
            Not Before: Dec  4 22:07:28 2025 GMT
            Not After : Dec 11 22:07:28 2025 GMT
        Subject: CN=69320621-0710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bc:3e:b6:2b:73:d3:2f:8a:0f:50:6b:df:ba:
                    79:a0:b7:4a:7e:de:75:0a:44:80:3e:4f:46:d2:fe:
                    cf:f5:79:d5:be:7d:2f:e7:04:dc:8b:b6:c7:db:3d:
                    87:df:f9:76:5e:dd:01:93:8d:70:b2:c0:51:28:73:
                    e1:d9:db:1b:36:84:40:09:c9:da:78:2f:d1:ba:2d:
                    a5:ea:b6:45:87:00:43:dd:b1:42:e9:88:c9:90:71:
                    07:31:5a:69:1c:3c:fb:fc:b8:b2:fc:38:2f:c4:6a:
                    22:24:87:bf:82:32:83:fb:9a:0d:96:c5:a2:22:55:
                    4b:17:7a:aa:f7:f2:ce:db:a7:c5:ed:06:67:d8:c6:
                    76:33:6f:93:28:d3:d6:68:98:19:cf:b9:01:2b:db:
                    b1:c5:97:5b:cb:da:c0:6a:bf:d9:63:3c:f1:9e:7e:
                    fd:98:db:d8:85:ce:d8:0e:25:c9:82:f4:8e:c0:03:
                    c1:4d:5e:3b:c5:9b:75:42:a5:22:18:67:d4:06:4b:
                    5e:aa:7b:d4:a8:dc:c5:82:3b:b0:d9:6a:6b:13:ff:
                    bd:00:c7:54:6d:16:95:58:43:ef:d6:0d:05:26:2a:
                    c6:b4:58:07:5b:d4:ef:54:31:dd:f4:89:43:66:73:
                    d2:2f:30:4d:7b:ff:4c:60:30:a9:4b:1c:39:22:43:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:61:4F:60:9C:51:43:82:73:06:81:F4:98:C5:40:CF:94:F9:DF:C8
            X509v3 Authority Key Identifier:
                keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:23:7f:48:8a:60:7f:c9:5c:c8:37:13:f1:68:97:b8:64:57:
         af:71:8a:ec:5d:00:5b:17:96:6b:5e:ff:28:a5:3c:a8:30:de:
         94:3a:31:25:8f:b8:1c:0e:73:b5:ad:a1:c2:cf:a9:8d:12:82:
         ed:63:75:74:58:eb:91:43:25:48:d1:fb:68:ec:3a:74:e7:c8:
         a9:bd:06:15:20:6f:90:9d:5a:72:5b:3d:b8:61:52:90:22:42:
         8f:d3:5e:dd:52:f1:e7:bd:43:00:2a:11:31:be:c9:ca:2b:5d:
         80:e7:f1:3e:1b:b9:1b:ab:76:80:fc:64:3a:2d:70:75:1a:26:
         2d:7c:21:68:3a:34:d2:14:53:3a:c5:a8:5e:8b:69:e1:2e:16:
         0d:92:77:9b:8a:16:7a:6a:33:db:53:80:f1:57:23:a3:cd:37:
         a8:b8:d5:b7:96:6f:ad:3b:76:60:5e:55:a9:bf:df:bb:5c:0a:
         dc:e9:54:a9:14:be:4c:bc:20:a6:91:ff:39:66:73:5f:67:fd:
         c0:61:73:32:35:0a:b5:a7:7a:ee:38:f9:29:24:a6:7d:f2:52:
         72:d9:85:4b:b3:b0:b2:ed:c7:da:36:27:79:46:a0:3c:3a:24:
         db:7e:bb:6f:a9:23:ea:62:6b:cf:86:c4:ef:72:e1:3d:6f:a1:
         22:45:9e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:50 2025 by rpki-client