This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
File:                     8YnN8PufnGkSkaFGaBnRPE6MlgA.mft (raw, json)
Hash identifier:          7hEnNt6g/CbBWiHsknt41BMTTEHSZXvqmORB4F86N5E=
Subject key identifier:   04:1D:24:0B:54:0E:73:13:EF:12:B8:8C:EB:76:FC:7C:AB:A1:DD:0E
Authority key identifier: F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00
Certificate issuer:       /CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
Certificate serial:       07A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
Manifest number:          07A1
Signing time:             Sat 06 Dec 2025 20:27:47 +0000
Manifest this update:     Sat 06 Dec 2025 20:27:46 +0000
Manifest next update:     Sat 13 Dec 2025 20:27:46 +0000
Files and hashes:         1: 8YnN8PufnGkSkaFGaBnRPE6MlgA.crl (hash: ngDjxXfixvUMPIMW47xo+Kri7stB5A/THHBbltpPsVE=)
                          2: 1687F94A2A1B11EB97B90C81C4F9AE02.roa (hash: g3w/XsJqAxVEVlKlr0cv2aQ+w+aC0v9T6kWu2Ywl2js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl
                          rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1959 (0x7a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D750, serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
        Validity
            Not Before: Dec  6 20:27:46 2025 GMT
            Not After : Dec 13 20:27:46 2025 GMT
        Subject: CN=693491c2-4380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:75:15:14:f6:d3:0f:ed:ce:c0:04:42:99:
                    42:ac:b1:67:8a:c4:7a:29:f7:03:c4:a3:7d:58:d7:
                    cf:b1:81:28:0f:e8:79:9a:c7:53:77:37:4c:63:f3:
                    c2:a7:16:98:bd:c9:ff:1c:02:67:02:28:bd:91:3a:
                    a9:ea:7c:d9:89:fd:9d:27:7b:96:db:d9:5d:dc:f6:
                    fd:c9:90:1f:d5:dd:3e:48:38:77:26:35:6c:a9:17:
                    75:8f:c7:94:95:08:4b:65:d6:88:3b:64:96:8b:a3:
                    d0:ac:86:3a:77:44:aa:2c:0e:bd:96:42:f6:a9:e7:
                    00:a3:77:35:0b:38:38:7a:a0:c8:3d:ce:71:b4:80:
                    a1:36:83:49:d2:cf:12:4e:e6:a0:fb:75:1b:7b:72:
                    a2:5e:61:4b:83:97:ac:96:36:08:b2:1f:5e:ea:57:
                    8f:c2:82:e3:2d:62:cd:34:c9:5e:bb:d2:ee:53:6d:
                    39:06:21:a9:25:62:a5:c8:79:7b:c1:c5:b7:12:93:
                    10:9e:c5:56:4c:7f:40:ef:aa:a7:51:7a:8e:d4:e2:
                    e8:8c:94:4b:44:84:07:00:cf:43:20:d6:36:3b:83:
                    7a:6d:e9:be:66:6f:49:81:9b:41:17:af:9f:1d:b9:
                    5e:e7:59:69:74:71:8b:3c:93:f0:80:0d:3b:ff:73:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1D:24:0B:54:0E:73:13:EF:12:B8:8C:EB:76:FC:7C:AB:A1:DD:0E
            X509v3 Authority Key Identifier:
                keyid:F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ee:53:57:91:81:7b:6a:e7:25:f8:b7:8b:5d:0f:5c:23:f1:
         5a:29:d2:1a:90:ed:13:37:f5:73:13:56:e6:86:75:ae:ea:7d:
         26:d7:cf:c5:8a:05:03:c1:2e:a8:da:0f:bc:00:21:43:53:cb:
         ad:47:64:6a:73:2d:50:a0:c3:a5:44:19:19:11:09:d8:af:c8:
         d9:e5:d0:08:66:3c:9e:19:58:14:c7:2f:9b:2f:67:34:24:14:
         31:a6:94:0a:a1:19:d8:3d:e1:aa:9d:32:83:38:09:d9:59:9d:
         16:ab:dd:15:b4:15:c6:ce:4f:7c:8d:dd:ed:c6:69:a6:d7:05:
         e3:3a:13:de:4f:1f:bf:6e:fd:c1:c0:81:cf:aa:e6:4c:46:a4:
         b1:e8:60:73:0e:21:47:68:4b:ad:9e:1a:19:e7:a6:7d:2a:f8:
         0b:12:73:06:4a:c2:bb:00:d2:81:cf:1e:62:9c:9e:f0:d2:6d:
         24:de:99:a9:24:22:24:45:75:1b:14:90:f8:10:a3:0a:7f:32:
         cd:c6:a4:91:16:cd:9d:5a:cf:45:a6:b2:9d:03:45:ba:dd:f8:
         89:aa:9c:11:1a:ad:11:08:50:a8:db:a6:39:d7:83:fa:4e:9b:
         0c:bf:b4:64:3e:7a:7c:96:60:f1:2a:ff:9d:41:c1:d2:0d:97:
         4f:d9:d6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:10:23 2025 by rpki-client