This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
File:                     7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft (raw, json)
Hash identifier:          4/Wyen412GSlhL8ndVN9ORL59VaPaBxhFGE1MqkRtDM=
Subject key identifier:   B0:BA:5B:C3:21:F3:59:E2:FA:00:88:09:7F:63:A3:08:84:2B:E7:9B
Authority key identifier: EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
Certificate issuer:       /CN=A91A1D8C/serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
Manifest number:          05
Signing time:             Fri 05 Dec 2025 05:57:44 +0000
Manifest this update:     Fri 05 Dec 2025 05:57:43 +0000
Manifest next update:     Fri 12 Dec 2025 05:57:43 +0000
Files and hashes:         1: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl (hash: V7xFoOe8Kq4B3TNlffD54X0/SWcLJIHWgJ2Hj38yje8=)
                          2: C50D496ED01711F09F944781C4F9AE02.roa (hash: +FXKf9pzaYEtHBMLx1teuGPKhDJV9moOa+k7XskLZqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D8C, serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
        Validity
            Not Before: Dec  5 05:57:43 2025 GMT
            Not After : Dec 12 05:57:43 2025 GMT
        Subject: CN=69327458-68d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:9d:06:d9:67:4e:8f:81:38:ab:2f:02:1d:
                    f4:7f:ea:9c:31:40:69:fd:22:a6:1f:50:08:05:36:
                    a1:a9:2f:94:b5:2b:7d:e3:9d:1c:03:2b:dc:da:a5:
                    e6:26:33:aa:ca:88:2f:d8:c2:ef:83:e7:09:d2:28:
                    8f:24:d1:30:ba:0a:eb:ff:0d:cf:f1:3a:9b:7b:66:
                    71:6d:3d:0e:a9:dc:92:d8:1b:1c:54:46:61:2e:01:
                    23:dd:9f:07:65:37:66:b1:8c:91:81:9f:30:43:c9:
                    2b:ae:41:d5:c3:db:1b:af:f0:a4:27:e9:c6:0c:d0:
                    1e:ef:b9:12:c8:c2:0c:39:ec:8a:a0:f0:28:54:a2:
                    34:01:c7:c5:54:67:41:6c:78:59:28:13:d2:74:c9:
                    89:10:b7:d7:fa:de:5c:65:55:a1:47:8e:00:f9:20:
                    3d:76:30:ca:61:6a:41:9a:96:31:da:db:57:94:41:
                    51:08:4e:4d:71:9a:28:81:da:d4:65:52:be:7b:20:
                    ad:51:d0:ff:89:49:3d:30:5f:35:c5:e9:c5:49:c3:
                    6c:1d:b1:95:97:d8:35:17:68:55:71:f0:44:9a:d4:
                    ce:9e:66:58:36:ff:70:33:aa:cc:65:8e:45:e5:60:
                    3f:72:84:67:9a:8b:be:b8:38:fc:45:a5:86:17:5d:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BA:5B:C3:21:F3:59:E2:FA:00:88:09:7F:63:A3:08:84:2B:E7:9B
            X509v3 Authority Key Identifier:
                keyid:EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:33:32:da:aa:8a:b8:84:f3:1c:a9:a5:13:9a:06:85:3b:83:
         71:4e:e4:20:ec:cd:b3:73:75:62:2c:90:b2:41:45:fe:d6:78:
         44:8a:a2:3c:0f:9c:ad:5e:2c:5f:be:e9:29:7f:5f:a3:53:82:
         48:ea:09:13:bd:a3:d8:67:a0:5b:df:0c:b1:c9:fb:54:18:d4:
         bd:75:43:ea:61:45:8a:f4:19:60:a1:88:99:bc:12:0b:7f:4d:
         6b:98:23:5b:8b:5d:f8:a5:9a:04:1a:40:f7:e5:c1:98:8a:68:
         69:0c:02:b9:5b:78:44:b8:0e:30:a2:50:2c:0c:41:3a:2e:96:
         e2:91:e7:8d:b2:9e:58:82:57:6d:c5:1c:05:b1:b2:9e:f3:b4:
         3a:4f:4c:3d:71:97:dc:01:3a:9f:9b:dd:fa:4f:cb:ee:b9:b0:
         d2:3f:02:61:d8:bf:28:63:07:50:a6:ad:99:f5:9c:60:46:eb:
         a5:d1:d0:97:b2:a8:74:43:4e:25:d5:87:f8:20:04:c0:a6:2a:
         69:85:f2:02:11:16:16:94:10:fd:66:f6:00:a3:bb:af:21:f6:
         00:ce:cf:45:ee:01:e7:3f:2d:58:3c:d0:49:ad:cd:86:23:15:
         d0:14:28:e0:c9:11:d1:6e:00:0e:86:55:8b:b2:83:70:6b:47:
         56:bd:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:58:44 2025 by rpki-client