This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
File:                     n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json)
Hash identifier:          TRqonCeWWZulLTYRnnQDHbyoCm1re2W+apdOP8uSccI=
Subject key identifier:   50:81:23:00:59:83:27:4F:01:3E:D0:11:80:EA:64:6E:87:3A:FB:9C
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Certificate issuer:       /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial:       10B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
Manifest number:          10A7
Signing time:             Sat 06 Dec 2025 16:50:42 +0000
Manifest this update:     Sat 06 Dec 2025 16:50:41 +0000
Manifest next update:     Sat 13 Dec 2025 16:50:41 +0000
Files and hashes:         1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: 4xampTI9uW/h5PUtm4P2LYIe7lePu5IixToKsm3PZN8=)
                          2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: EtmvbN1xVVE7PUjHrIh1I7up8NoBR/klrPWqoCS0Bq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
                          rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4272 (0x10b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
        Validity
            Not Before: Dec  6 16:50:41 2025 GMT
            Not After : Dec 13 16:50:41 2025 GMT
        Subject: CN=69345ee1-5b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:7f:db:34:40:6e:1a:ed:fe:29:35:4b:2b:
                    d1:7e:7c:8a:24:14:35:13:c6:26:02:e7:f5:3e:bb:
                    6b:12:84:33:f8:01:3b:8d:87:42:b2:33:d3:f6:cb:
                    dc:86:b8:dd:a9:d8:30:cd:1c:c5:6a:0d:e5:12:90:
                    9c:a0:6e:a2:1c:1e:5f:8d:7e:18:06:5d:7b:c6:92:
                    54:de:56:64:33:dc:ab:0b:67:61:40:1a:1a:69:72:
                    56:37:e4:4f:e3:96:9c:63:4e:d2:09:7b:c4:8e:b2:
                    87:58:7f:21:02:fa:d8:7a:99:ec:af:7a:41:71:89:
                    21:f1:a4:66:d2:a3:bd:d3:d7:8b:d5:a1:3c:d6:78:
                    77:4c:44:fb:1b:32:d1:30:ea:cd:a1:fd:5c:6c:a3:
                    c1:7c:6c:14:d2:ed:f6:de:03:1d:30:7d:5d:7a:0b:
                    c1:0c:71:49:6d:4b:87:c2:c1:21:7b:a8:ec:7b:bb:
                    e2:85:fb:f6:a7:22:8c:47:49:a6:27:8b:5b:70:c1:
                    a6:07:8c:e1:65:10:75:82:fa:83:f5:89:66:ab:fe:
                    86:f3:41:67:15:25:24:87:53:a4:26:cc:c1:34:5d:
                    8c:43:62:43:c1:5b:f7:80:ad:ea:3d:0e:91:b5:73:
                    1c:f0:ad:e7:79:29:9d:d8:3d:c0:6d:27:c6:f1:f0:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:81:23:00:59:83:27:4F:01:3E:D0:11:80:EA:64:6E:87:3A:FB:9C
            X509v3 Authority Key Identifier:
                keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:69:39:3f:39:0f:08:81:61:b2:0c:b5:c9:62:b3:91:ff:d6:
         a7:51:d3:c0:40:8f:9d:17:7f:7e:1a:a7:b9:eb:f7:fd:74:13:
         77:1f:c5:81:0a:02:75:da:0f:59:d0:6c:9c:1e:a7:c7:b6:5c:
         ca:c9:f3:f1:04:4c:87:9c:3e:e1:8c:30:96:ab:b3:c9:57:24:
         42:52:df:f6:d7:0e:dc:16:b1:da:1d:f3:52:66:dd:0a:6f:1d:
         6c:4d:41:32:c9:0a:26:91:8d:21:99:03:d1:29:8d:04:94:16:
         03:08:e9:aa:5f:40:e5:ec:5d:3b:20:5a:af:87:84:9a:78:3a:
         c3:2a:2e:46:e2:3d:36:71:ab:94:5b:5d:b8:82:7d:d6:81:49:
         d4:6e:48:e2:e8:7e:86:53:af:92:26:b3:81:d0:5a:76:e2:40:
         0e:44:d7:34:87:cc:6d:a4:61:0b:1b:b9:a0:66:e9:4d:50:e9:
         6f:12:69:61:0d:d3:e9:63:99:f8:b9:17:ac:9f:8a:e2:e6:5e:
         dc:4d:8a:08:c2:4a:87:e5:3f:e4:f7:a4:0c:2c:8e:d8:ef:27:
         44:67:1a:32:1e:b4:c9:10:e4:0c:df:4e:04:bb:32:3f:7d:a1:
         09:aa:e6:69:6a:88:f7:fb:06:05:d7:36:01:54:92:bc:5d:1a:
         7d:e3:a9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:22 2025 by rpki-client