This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
File:                     dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft (raw, json)
Hash identifier:          r38Dvk6gW5Cti3psKOGEul9Afg+iu7HCpmGtAN3o8s4=
Subject key identifier:   3F:5F:67:6A:33:EB:A5:D9:10:65:FE:B6:36:67:9B:9A:2D:97:EC:F2
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Certificate issuer:       /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial:       077C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
Manifest number:          0748
Signing time:             Thu 04 Dec 2025 20:44:40 +0000
Manifest this update:     Thu 04 Dec 2025 20:44:39 +0000
Manifest next update:     Thu 11 Dec 2025 20:44:39 +0000
Files and hashes:         1: dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl (hash: 27zhwiBY7Y+POeVjp8YZRZcN3HQEKne4ohiITnFUQ8I=)
                          2: CA9C08E07C7E11EFBDC93555C4F9AE02.roa (hash: oSVU6TANmFNJPtGm2LLbjYN9gVwM++0Tr3Y7yHyfLIg=)
                          3: 6B0EF3045B4911ED8862970DC4F9AE02.roa (hash: zU3F+DNKEcXteC81RWStHkXhmGLc0rH0zlpC6YzpGEc=)
                          4: 4641C3785C2311EDA3D17465C4F9AE02.roa (hash: pQWYgNK/qzWshElxqnoWin8qXcCoT1gedLnIOWTMMR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
                          rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
        Validity
            Not Before: Dec  4 20:44:39 2025 GMT
            Not After : Dec 11 20:44:39 2025 GMT
        Subject: CN=6931f2b7-cb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:6f:49:ae:f3:73:26:f6:30:54:01:3c:d1:
                    dc:7d:f5:e5:0d:0d:77:02:18:ce:88:a3:5a:f0:76:
                    fb:6c:a3:60:59:01:81:9a:6d:a3:01:23:93:00:b9:
                    78:a1:b3:d4:e3:10:1f:28:e1:6f:e1:01:05:59:ca:
                    e8:75:2a:9d:0c:2a:aa:48:19:c8:20:a9:87:7e:85:
                    73:ae:8a:fc:01:a6:0b:04:62:b5:5c:82:c7:7e:fd:
                    d2:a2:aa:26:31:98:40:e2:27:5a:d9:98:ac:a1:83:
                    4b:ff:e0:65:e4:dc:89:37:88:71:8b:9b:6a:35:19:
                    bd:6a:c2:f3:c2:0d:aa:41:77:42:df:4f:a3:20:aa:
                    3c:d5:65:5f:aa:5a:21:b7:b3:8e:1a:8c:fc:1a:b2:
                    8f:2e:a4:ae:50:dd:75:61:bf:91:20:50:bf:20:e2:
                    71:8e:44:b5:f9:5a:23:bc:63:ba:94:8e:f3:9d:12:
                    8e:65:86:d4:fa:3f:f2:5d:6b:34:86:97:90:9c:9a:
                    9a:36:12:f9:20:cd:c0:ad:b7:48:75:4a:ed:03:d9:
                    4a:c0:8f:59:9d:0d:d2:64:5e:db:d4:b9:ca:a6:ea:
                    1e:f6:cb:72:a8:5f:76:73:06:45:24:44:0b:35:98:
                    c3:b3:88:5f:ed:51:f4:0c:98:aa:c3:3e:e7:84:47:
                    82:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5F:67:6A:33:EB:A5:D9:10:65:FE:B6:36:67:9B:9A:2D:97:EC:F2
            X509v3 Authority Key Identifier:
                keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:85:b5:e1:0a:08:31:12:f5:76:34:d6:c7:c8:93:e8:a3:ee:
         85:39:74:f4:79:bd:83:f4:aa:33:1a:e5:76:18:53:87:33:85:
         c4:35:9e:a2:c6:93:84:75:c9:0f:cf:ac:09:29:6a:b1:e5:49:
         39:c2:61:a0:89:c6:83:e9:db:e1:37:0f:4b:c3:09:c2:20:ae:
         99:5c:93:01:83:ea:16:92:9c:8f:9b:18:1b:a2:5c:56:7b:f9:
         d2:41:42:bd:0b:b1:ee:89:6d:e9:26:17:43:6f:43:ee:77:41:
         02:15:26:b4:bc:b3:8e:71:cc:7f:d4:03:9b:35:58:a4:f7:27:
         f2:c3:74:e6:de:43:51:74:04:dd:75:50:57:5c:b8:cb:e7:ef:
         f2:91:10:59:01:8e:9e:ec:31:53:5b:84:3d:b2:9e:b1:50:a5:
         b5:57:1e:74:f3:f9:92:4a:44:18:cd:62:56:ac:76:b5:73:a5:
         2d:27:aa:b4:35:62:6b:06:63:32:a6:4b:37:38:4c:ac:7d:ca:
         d0:89:83:48:f8:3a:2f:42:b8:19:c2:7e:8d:e9:69:20:d0:c0:
         4a:b4:c1:ca:67:ad:87:c1:31:c6:38:63:4e:3f:64:69:7b:6a:
         b9:a8:05:45:95:00:5e:90:34:2c:66:76:a9:0e:eb:e6:59:5d:
         43:6d:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:40:11 2025 by rpki-client