This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
File:                     7UHN-Ie33i9cIBvogU8ejfPQIB8.mft (raw, json)
Hash identifier:          gIJGHB/0jXPWY10v5bcfheyOdxvwyPN9Xkx01HEGFkI=
Subject key identifier:   D2:67:AA:5F:F4:43:D2:20:BD:7E:6E:EE:24:34:AE:19:BF:E6:AB:1F
Authority key identifier: ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F
Certificate issuer:       /CN=A916C832/serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
Manifest number:          74
Signing time:             Fri 05 Dec 2025 04:44:56 +0000
Manifest this update:     Fri 05 Dec 2025 04:44:56 +0000
Manifest next update:     Fri 12 Dec 2025 04:44:56 +0000
Files and hashes:         1: 7UHN-Ie33i9cIBvogU8ejfPQIB8.crl (hash: OHCyTL/f20OHl5kdo3AONRTeRRyBv0hgLx4MmCnXuNg=)
                          2: 9C40745A86F911F0AC1F5922C4F9AE02.roa (hash: iXo4kScDCGZMJR2A/670yFNX9nbH7Jj9Oj398RIkzRg=)
                          3: AA3FBE4A1E6111F093F53B75C4F9AE02.roa (hash: LSRr7TMpx9Qi1u09QfccXCZNggaDKCGxTg8r/GddSHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl
                          rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C832, serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F
        Validity
            Not Before: Dec  5 04:44:56 2025 GMT
            Not After : Dec 12 04:44:56 2025 GMT
        Subject: CN=69326348-23f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:05:92:84:83:bc:60:c7:c6:e3:69:eb:a5:
                    81:f0:35:22:ab:a8:29:29:00:80:7d:23:f0:eb:2c:
                    0a:73:a3:ef:27:b4:52:20:a9:8a:37:9e:42:81:05:
                    f5:25:fc:54:6d:d2:4b:c5:82:ee:2e:28:93:bf:20:
                    49:ee:d3:ab:26:33:3f:18:3f:c4:df:d4:dc:a5:c4:
                    58:60:bd:1b:f7:bc:88:8a:4d:5b:d6:e9:62:d3:e1:
                    52:80:db:f9:ed:a3:72:20:e7:bf:24:3e:8c:a2:5f:
                    8e:4d:5d:ef:bc:4e:b6:c7:ac:80:ec:53:7b:80:37:
                    d1:ce:7d:62:a3:cd:b3:28:e1:33:81:85:d5:f4:b5:
                    95:c2:cf:d8:9a:0e:e1:60:59:47:f0:a6:58:7b:05:
                    0e:26:48:23:e2:86:a4:01:3e:6d:23:d2:3b:82:ec:
                    c3:31:b4:04:17:97:74:2f:7c:32:da:be:ee:5f:98:
                    fe:de:bc:6f:0e:19:fb:1c:31:76:be:f4:15:7d:4b:
                    d4:7c:f7:81:81:0f:b2:a5:06:c6:dc:e6:58:fc:0b:
                    2b:ee:bd:82:b8:94:f3:5c:73:ad:44:b3:6f:0f:ca:
                    8e:db:a9:0b:0f:16:1d:6c:88:e1:19:4a:e2:fc:f9:
                    2d:7b:e2:68:a4:bf:f7:5a:23:c1:dd:eb:66:c7:53:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:AA:5F:F4:43:D2:20:BD:7E:6E:EE:24:34:AE:19:BF:E6:AB:1F
            X509v3 Authority Key Identifier:
                keyid:ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:09:c9:77:3e:2d:24:47:17:0a:84:02:7f:87:66:78:a7:30:
         3e:f3:29:cb:94:79:a7:d9:8d:76:aa:97:8b:5b:30:15:ff:5c:
         5a:20:38:f1:a6:c0:fb:25:4a:95:17:ab:10:67:fe:3a:f8:70:
         a9:f1:45:13:fc:d1:df:1e:a4:19:22:d0:d8:d5:40:3c:49:18:
         a9:18:db:bc:c9:ba:1c:bd:cc:b4:0b:ba:40:eb:eb:6f:dd:38:
         da:27:69:e3:91:ff:2d:06:20:4c:8d:4d:83:18:a7:51:30:09:
         ae:03:ae:41:34:84:c3:91:6b:c0:40:15:7e:b0:34:1b:63:68:
         b1:e0:d8:33:40:4b:84:6d:aa:c1:cb:33:dd:ba:67:20:8e:12:
         b1:d7:b2:f4:9d:a4:d8:57:c9:83:eb:5e:b3:ee:1a:29:a7:59:
         1b:1c:93:8f:47:65:f5:fa:82:0e:2a:fe:cf:a7:bf:8f:59:b1:
         48:46:dc:ac:11:8e:23:92:1d:2f:af:23:0c:43:9c:40:72:c4:
         45:d9:33:d5:33:b1:e9:fd:0a:6b:88:8f:81:0a:1c:95:23:44:
         b2:4e:81:45:04:79:6f:ae:ff:9c:b4:93:cd:5b:be:6b:36:48:
         5a:50:97:fd:f5:1d:1d:42:7c:ee:d3:fd:39:2c:0c:eb:53:d9:
         2e:a8:8e:57
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QzgzMjExMC8GA1UEBRMoRUQ0MUNERjg4N0I3REUyRjVDMjAxQkU4ODE0RjFFOERG
M0QwMjAxRjAeFw0yNTEyMDUwNDQ0NTZaFw0yNTEyMTIwNDQ0NTZaMBgxFjAUBgNV
BAMTDTY5MzI2MzQ4LTIzZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkfwWShIO8YMfG42nrpYHwNSKrqCkpAIB9I/DrLApzo+8ntFIgqYo3nkKBBfUl
/FRt0kvFgu4uKJO/IEnu06smMz8YP8Tf1NylxFhgvRv3vIiKTVvW6WLT4VKA2/nt
o3Ig578kPoyiX45NXe+8TrbHrIDsU3uAN9HOfWKjzbMo4TOBhdX0tZXCz9iaDuFg
WUfwplh7BQ4mSCPihqQBPm0j0juC7MMxtAQXl3QvfDLavu5fmP7evG8OGfscMXa+
9BV9S9R894GBD7KlBsbc5lj8CyvuvYK4lPNcc61Es28Pyo7bqQsPFh1siOEZSuL8
+S174mikv/daI8Hd62bHU4exAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0meqX/RD
0iC9fm7uJDSuGb/mqx8wHwYDVR0jBBgwFoAU7UHN+Ie33i9cIBvogU8ejfPQIB8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDODMyLzVCNjE4MDYwMUU2
MTExRjA5MzRGNkY3NEM0RjlBRTAyLzdVSE4tSWUzM2k5Y0lCdm9nVThlamZQUUlC
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN1VITi1JZTMzaTljSUJ2b2dVOGVqZlBRSUI4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD
ODMyLzVCNjE4MDYwMUU2MTExRjA5MzRGNkY3NEM0RjlBRTAyLzdVSE4tSWUzM2k5
Y0lCdm9nVThlamZQUUlCOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADAJyXc+LSRHFwqEAn+HZninMD7zKcuUeafZjXaql4tbMBX/XFogOPGm
wPslSpUXqxBn/jr4cKnxRRP80d8epBki0NjVQDxJGKkY27zJuhy9zLQLukDr62/d
ONonaeOR/y0GIEyNTYMYp1EwCa4DrkE0hMORa8BAFX6wNBtjaLHg2DNAS4RtqsHL
M926ZyCOErHXsvSdpNhXyYPrXrPuGimnWRsck49HZfX6gg4q/s+nv49ZsUhG3KwR
jiOSHS+vIwxDnEByxEXZM9Uzsen9CmuIj4EKHJUjRLJOgUUEeW+u/5y0k81bvms2
SFpQl/31HR1CfO7T/TksDOtT2S6ojlc=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:31 2025 by rpki-client