This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
File:                     7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json)
Hash identifier:          dY5sEpqZgKVdWhOSUdiz5+/rCyflmIHjxXtV2Ry90gU=
Subject key identifier:   42:B5:6C:4D:BE:23:EA:80:D5:32:D8:3B:03:04:CB:77:A8:BD:C7:B4
Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
Certificate issuer:       /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Certificate serial:       04D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
Manifest number:          04C7
Signing time:             Thu 04 Dec 2025 22:25:31 +0000
Manifest this update:     Thu 04 Dec 2025 22:25:31 +0000
Manifest next update:     Thu 11 Dec 2025 22:25:31 +0000
Files and hashes:         1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: tOYgUvNnHHG9CypKxIogy1jd0V4YlAIyJRXu8QFyd20=)
                          2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: 75+qcslrpbStlF9MBXstO6Kxv6zf8gOrBw7RkBWwZKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl
                          rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1234 (0x4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
        Validity
            Not Before: Dec  4 22:25:31 2025 GMT
            Not After : Dec 11 22:25:31 2025 GMT
        Subject: CN=69320a5b-ad7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f0:99:4f:86:f4:ad:a1:9e:9c:f2:6c:e5:68:
                    45:14:47:07:5f:1e:fd:bd:10:46:c4:a1:28:09:7b:
                    d2:a4:62:1f:83:7c:4f:c3:60:b2:2e:58:c2:60:fa:
                    e2:ec:c4:7d:6e:64:1a:bb:f9:e3:33:27:b3:3f:f4:
                    a8:13:38:6a:8f:2c:34:4f:8f:93:db:9c:ab:9c:c2:
                    ba:5b:17:cb:30:53:16:27:6a:2c:0e:62:6f:be:d3:
                    dd:16:34:be:e4:d2:ad:d8:ca:aa:75:ca:02:ab:d4:
                    34:6b:8f:71:18:1a:ea:bc:a8:32:12:64:56:92:90:
                    62:10:fd:d9:43:fb:51:48:fd:92:74:c2:d9:70:d8:
                    bc:52:cc:37:7a:77:ce:36:2c:74:db:b6:e0:97:25:
                    29:ff:e7:49:02:3d:86:80:3e:f3:d5:cd:44:7d:a1:
                    bb:d9:b2:80:cb:68:12:39:dd:1e:54:eb:b1:f2:58:
                    7b:5c:b3:ce:70:9d:a6:07:31:52:ae:dd:1b:bc:b5:
                    9a:98:a8:0c:64:77:a2:2d:22:42:22:f5:10:10:46:
                    2c:d1:49:f3:e8:bf:5b:db:4a:93:c2:d6:31:b3:44:
                    e7:8f:ad:bb:1c:a6:be:59:31:bb:0d:60:17:7d:59:
                    c7:a6:d3:d1:46:b4:dd:50:b3:d3:f1:25:7c:4d:e0:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B5:6C:4D:BE:23:EA:80:D5:32:D8:3B:03:04:CB:77:A8:BD:C7:B4
            X509v3 Authority Key Identifier:
                keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cc:f3:42:28:0a:86:23:94:e3:47:b3:f4:ac:63:be:6f:bb:
         7e:e7:42:f9:f5:3b:0a:10:62:55:d9:c3:5a:4c:d3:3b:56:db:
         df:1e:ee:b1:b1:d2:0c:07:c6:be:82:df:61:3e:f0:7b:04:7a:
         0b:8e:56:ad:21:25:40:0b:d4:36:8b:a7:d3:50:d3:6f:c8:93:
         87:28:09:26:68:a0:97:77:1b:0f:98:68:cf:6f:e2:6b:80:26:
         ce:32:7d:a1:26:4e:8d:ba:a5:08:a3:25:bc:ce:8e:9e:c0:75:
         c7:c3:a3:a7:03:c2:d5:72:a7:96:1d:79:eb:b4:ed:0a:83:71:
         65:93:1b:60:26:80:20:ba:a1:0f:a9:c3:da:d7:3b:f1:f7:62:
         20:06:42:8b:91:cc:aa:90:39:f6:97:14:e4:00:d6:bf:2f:07:
         bd:d2:f1:5a:dd:d8:61:6c:e6:7e:bf:f0:27:f5:c3:90:f0:d4:
         96:44:b5:1e:b7:cf:a1:56:d5:fc:58:3e:31:96:60:b6:03:18:
         0d:0d:f6:dc:c5:50:3a:9e:1c:b1:83:9f:55:cb:e5:3e:08:5b:
         2e:4a:ef:8e:f9:86:19:cc:88:3d:a4:57:fd:9a:f5:eb:a0:e2:
         a6:0e:97:e9:79:03:5a:48:dd:3b:e9:c2:67:1e:d6:d1:f3:7e:
         39:6d:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:11 2025 by rpki-client