This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File:                     05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier:          Dd6+uyiKBQobZF4+W43kbKauSHfB1dx09p9u0NDl2es=
Subject key identifier:   61:77:F8:62:CF:AB:A6:12:01:18:20:A3:7A:A3:98:80:EC:4D:3C:9A
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer:       /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number:          F7
Signing time:             Fri 05 Dec 2025 03:17:58 +0000
Manifest this update:     Fri 05 Dec 2025 03:17:58 +0000
Manifest next update:     Fri 12 Dec 2025 03:17:58 +0000
Files and hashes:         1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: nhRmaCMl6SGTQm75Wt3sitCtnPc3WVFefX78j3JsABU=)
                          2: 13435546ABF211F0BA77FA0DC4F9AE02.roa (hash: q/F51LSqhdUzQ5wuFfu2jC3x+BTiobOoytHd+JzEAJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
                          rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
        Validity
            Not Before: Dec  5 03:17:58 2025 GMT
            Not After : Dec 12 03:17:58 2025 GMT
        Subject: CN=69324ee6-bc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:5f:50:c4:4a:cb:3e:2e:f1:30:6d:5d:21:
                    01:0e:8f:08:32:6c:09:eb:23:7f:49:98:4e:b1:32:
                    c6:64:df:26:df:96:ce:5f:37:bd:34:39:98:e5:e4:
                    ab:82:ba:0d:c1:79:64:5f:fa:fb:49:57:21:50:fe:
                    0e:ee:80:91:06:ce:94:c4:1f:ff:50:1e:36:cc:83:
                    21:b8:30:b1:cc:69:34:96:c1:52:94:36:56:6a:07:
                    4f:aa:d8:f7:a7:fb:17:61:8d:44:f3:47:87:37:66:
                    ba:74:4a:bb:53:18:33:33:50:e3:cf:34:8a:3d:79:
                    c9:69:11:5a:fd:b2:0b:50:55:96:8d:bf:a0:7a:30:
                    82:db:49:28:0d:f1:1c:c4:54:c5:c6:a0:27:0a:57:
                    6c:42:ad:37:dc:93:72:85:bf:fd:c6:3d:ad:04:0b:
                    01:40:7c:e8:d6:ff:d7:4a:bc:4c:bf:c0:21:3e:ef:
                    46:9e:e3:49:b1:b8:ef:59:b4:2e:ac:d9:ce:53:65:
                    ab:97:56:5d:21:5f:55:e5:bc:e7:5f:ac:f7:26:99:
                    6a:08:fb:b1:a8:6a:f1:a5:3e:ad:1f:bf:b7:b2:1b:
                    23:8d:9e:44:af:0f:27:53:5c:00:99:cf:02:12:1f:
                    ac:cd:23:9b:dc:91:0e:b9:66:c8:74:d8:9c:5d:46:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:77:F8:62:CF:AB:A6:12:01:18:20:A3:7A:A3:98:80:EC:4D:3C:9A
            X509v3 Authority Key Identifier:
                keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:00:69:ce:e3:b5:c9:cc:dc:1f:fa:50:c9:76:66:60:7a:2e:
         4d:26:99:bf:f3:c6:0f:4d:48:5c:0d:cf:79:09:e6:b3:14:7b:
         85:05:9b:57:ae:9e:d8:05:c3:69:96:81:90:85:03:bb:45:4e:
         dc:0c:85:b9:fb:55:29:a5:24:46:9f:aa:74:be:c3:a0:6b:21:
         7e:3c:c0:56:81:76:fc:16:ee:7b:d1:f7:17:ab:86:86:8d:fb:
         95:e9:c3:05:c5:15:e4:b3:e9:43:7e:64:ae:d3:28:28:5d:0e:
         b9:80:5d:69:4b:79:9d:bc:77:20:38:48:67:6d:15:15:ae:37:
         e6:87:59:71:c1:46:58:be:ea:62:90:9f:22:48:38:d4:74:80:
         7b:05:85:21:2b:6f:1b:21:0c:2c:29:e8:d3:62:a9:3c:81:7a:
         b6:cd:ab:e7:9f:77:95:ae:33:b3:0d:e8:b5:9f:2f:45:9b:21:
         80:19:af:48:c5:6f:b5:01:53:1a:d3:9b:5b:73:f3:0b:27:aa:
         42:88:d1:9d:94:fc:f8:5c:3d:02:95:16:6d:b8:f8:81:98:a7:
         51:d5:19:4b:2d:d3:f8:dd:09:56:f4:bd:b9:de:fa:94:a0:c4:
         89:3f:5a:79:dd:de:d0:42:b0:99:43:e9:55:e3:1f:80:9c:5f:
         cc:39:9d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:20 2025 by rpki-client