This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
File:                     u7dF5o0mJdldbQcyKFARSry-_wQ.mft (raw, json)
Hash identifier:          O/pEdkJItnz/bpVtkcuPe0XlN2ebyCHvvEStA8QW1v4=
Subject key identifier:   0F:70:C5:BE:3C:56:A8:5B:75:B8:85:F2:EE:AE:11:5B:B9:63:4A:05
Authority key identifier: BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04
Certificate issuer:       /CN=A9168F50/serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
Manifest number:          07
Signing time:             Fri 05 Dec 2025 05:54:04 +0000
Manifest this update:     Fri 05 Dec 2025 05:54:03 +0000
Manifest next update:     Fri 12 Dec 2025 05:54:03 +0000
Files and hashes:         1: u7dF5o0mJdldbQcyKFARSry-_wQ.crl (hash: +ZCd1KkboWXVKD3IU3dzIyT/c/KpgdUZcNiYEqqRqBs=)
                          2: 8FD832B4C9B311F0BC2AD366C4F9AE02.roa (hash: oljPiy+Pa+471195QZXqo85lgk4Gdg8umHtl0zD2LZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl
                          rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168F50, serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
        Validity
            Not Before: Dec  5 05:54:03 2025 GMT
            Not After : Dec 12 05:54:03 2025 GMT
        Subject: CN=6932737b-d910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:23:5c:77:ba:37:cc:e2:a7:6b:ce:dd:35:
                    02:ac:1f:52:63:01:79:15:b7:77:da:e3:5e:a3:13:
                    50:d0:63:93:8a:3f:3b:90:e0:a8:ad:ee:00:51:7c:
                    de:0a:ab:24:3e:db:1a:20:5b:1a:4c:bc:f9:59:0f:
                    d8:48:f1:78:6b:ae:af:3e:74:35:f4:e3:12:30:bf:
                    ca:8c:83:e7:18:28:22:dd:5d:3a:20:6b:72:8c:db:
                    05:8b:12:49:d4:73:85:e6:ad:65:3e:b0:43:0a:5f:
                    b2:5a:9a:11:05:ab:a5:02:04:d2:ec:5b:1c:12:5d:
                    63:ed:98:e8:26:52:b8:4b:04:a6:10:18:3d:e8:cc:
                    80:ca:6f:23:c1:be:94:53:41:43:5c:de:ca:65:fe:
                    20:9f:01:2f:e6:06:d5:1c:8e:ce:01:93:42:6b:5d:
                    96:28:1d:04:d2:61:a2:9c:f7:cc:ef:2e:43:61:3d:
                    1a:25:dc:97:fe:77:c5:c7:ba:ee:38:2e:8a:2e:67:
                    dd:9b:28:8d:d2:cf:31:0e:c6:8b:fa:99:95:b1:05:
                    8b:6b:66:5a:69:97:5d:b3:97:b4:10:b4:43:19:ba:
                    07:2d:e9:1a:20:b5:50:42:92:25:59:5b:32:40:2f:
                    d1:e2:da:65:e3:80:78:0a:c8:dd:d1:e4:2e:87:a2:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:C5:BE:3C:56:A8:5B:75:B8:85:F2:EE:AE:11:5B:B9:63:4A:05
            X509v3 Authority Key Identifier:
                keyid:BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6e:1b:4e:7f:95:95:b7:65:94:2c:27:09:f5:b9:74:d4:ff:
         03:2e:a8:a6:2c:c1:ef:eb:a5:fc:dd:f8:6f:d9:87:4c:09:58:
         75:3f:e3:52:28:9a:55:55:11:50:10:27:31:04:53:99:9c:d0:
         27:15:20:c6:8c:ba:75:50:31:d6:d7:c8:c5:8c:4a:10:c3:c3:
         b0:83:15:2d:79:3b:b8:ef:cc:1d:69:ba:85:5a:08:f0:8d:e9:
         32:1e:fd:2b:43:71:f3:ee:e6:03:1d:a9:e3:37:3d:6b:c4:19:
         22:f0:3f:19:9d:f5:13:69:4c:1f:30:68:69:39:22:9b:b9:9b:
         11:5a:57:ab:e4:7d:0d:cf:45:68:9a:3f:7f:0f:aa:89:21:f5:
         44:4f:77:fa:a5:e1:d4:29:55:f2:20:e7:da:36:63:09:a3:d9:
         31:92:f0:d9:a2:61:a5:e6:01:73:1a:f6:24:28:9f:c3:eb:d8:
         c1:61:03:57:47:12:03:e4:cb:11:d5:34:34:3b:47:f9:ac:30:
         7a:9b:82:30:3b:7f:9e:50:cb:ac:4a:42:19:8e:0a:8d:00:bb:
         5b:60:02:ef:18:97:3f:ce:a6:c8:2d:63:a0:b0:dd:66:d5:54:
         e1:d3:06:3f:6c:dc:46:90:e7:3c:66:3a:34:a0:2d:37:3a:79:
         17:c5:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:45:17 2025 by rpki-client