This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
File:                     7enmnD0KkdKXM8a3AvPMSL7dzuk.mft (raw, json)
Hash identifier:          0culJB8cv7cMJUpHVhFOpVU31nEigIpoNXfoGJgbZvU=
Subject key identifier:   03:5C:EE:8A:32:88:7D:2D:EF:30:85:9D:0B:59:34:89:96:46:63:D7
Authority key identifier: ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9
Certificate issuer:       /CN=A9193869/serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
Manifest number:          14
Signing time:             Fri 05 Dec 2025 05:44:00 +0000
Manifest this update:     Fri 05 Dec 2025 05:43:59 +0000
Manifest next update:     Fri 12 Dec 2025 05:43:59 +0000
Files and hashes:         1: 7enmnD0KkdKXM8a3AvPMSL7dzuk.crl (hash: dqtUqOTHUWwImyBK2OXtgAV1V8oeQQdt5N3zc7gmmv8=)
                          2: 00C05CEAB7D511F0AE891D43C4F9AE02.roa (hash: b+1hqemSQst2M7DCyOrAvb7h4SpsImJMoRs35hPQsyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl
                          rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193869, serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
        Validity
            Not Before: Dec  5 05:43:59 2025 GMT
            Not After : Dec 12 05:43:59 2025 GMT
        Subject: CN=69327120-dfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:cd:76:1a:ce:4a:5f:26:2b:4b:e9:76:e3:
                    3e:6a:16:5b:a1:51:22:29:d1:17:ef:31:b9:64:22:
                    1e:88:0e:09:08:2e:e1:6e:b2:90:eb:65:d8:f5:7b:
                    ce:7c:03:f6:cf:b3:8e:25:64:ad:2f:32:46:41:de:
                    bf:85:d5:14:97:eb:96:61:79:aa:e9:77:97:6f:71:
                    19:49:53:69:3e:7f:10:94:8b:fb:36:2a:7c:d6:39:
                    a1:49:3a:4a:4f:fc:af:df:fa:25:b4:b8:91:8a:5a:
                    d1:1b:62:71:d6:2f:48:9d:3a:ab:30:65:9f:68:64:
                    5d:68:20:ab:cd:43:ae:27:10:00:61:cf:7b:7c:86:
                    99:e3:f7:74:90:98:fd:2c:c3:04:66:29:c8:51:bc:
                    4b:ef:33:4c:59:39:f2:6d:66:be:cc:cc:89:ed:8a:
                    4b:52:a4:7c:5e:fa:35:c0:eb:de:3d:08:85:26:fc:
                    c5:a5:0e:47:fd:6e:f5:65:3d:de:cd:bf:35:ae:82:
                    79:97:ab:e5:77:d3:14:76:99:e4:75:03:2a:c0:64:
                    74:37:73:54:b4:7f:f1:a0:68:59:96:9f:3f:c5:b3:
                    4d:f8:9c:6b:07:d6:4f:78:88:a5:7d:62:89:f6:24:
                    53:ab:a1:9b:01:a0:54:87:ab:e6:83:16:11:03:48:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5C:EE:8A:32:88:7D:2D:EF:30:85:9D:0B:59:34:89:96:46:63:D7
            X509v3 Authority Key Identifier:
                keyid:ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:12:e0:14:06:3f:34:8a:8b:7d:21:c3:3d:9d:d1:f1:25:a3:
         9f:c9:c8:96:3c:fb:20:1b:92:85:e4:6e:1d:88:4b:20:28:4e:
         16:9b:b3:3e:5a:fc:2e:de:7f:fc:13:31:d6:6d:f5:9c:b3:1e:
         f5:e0:d5:ff:33:3a:c5:5e:56:a2:36:75:89:b9:23:9f:46:0c:
         04:9b:cb:54:38:a2:db:b8:9a:f4:99:7e:b4:0d:b1:13:fc:2a:
         94:f3:7f:2a:30:b0:3c:27:66:e7:ae:30:99:e4:94:93:ef:d4:
         af:3a:36:84:82:ac:b1:15:2a:e3:07:e7:d7:3a:ab:c6:33:59:
         c1:3e:cb:f0:2b:3a:03:cc:0f:0e:7d:9d:e4:ad:a1:0c:ec:4f:
         d2:52:85:d6:4a:63:1e:ca:1d:01:8b:e3:b9:65:a7:49:9e:20:
         c1:c8:b8:3e:be:df:2e:09:d4:4d:c3:92:0f:59:3c:95:b2:a9:
         83:50:43:76:39:8a:d1:64:b8:12:5d:44:2c:ee:af:26:2e:dc:
         54:e4:c8:23:a1:5c:46:a4:28:2f:77:7a:42:bd:57:04:89:a6:
         41:20:94:5b:bf:04:a2:12:01:3b:0b:7b:b1:29:96:5e:b8:73:
         b5:71:96:bd:2d:94:36:12:49:23:98:3b:b0:f3:71:7b:2d:aa:
         3f:f4:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:43:45 2025 by rpki-client