This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
File:                     7mC-_JS8D3S9nREVbhW6I_fr5ag.mft (raw, json)
Hash identifier:          TEDYJBhKsp+MasZ8+3HWCwTLXa5nLYQJECKDLQzcrrM=
Subject key identifier:   D8:F4:EB:69:0E:6D:B0:A9:5C:EE:6F:CC:84:4A:19:CA:05:AA:2B:96
Authority key identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
Certificate issuer:       /CN=A91B6DD0/serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
Manifest number:          0A
Signing time:             Fri 05 Dec 2025 05:49:28 +0000
Manifest this update:     Fri 05 Dec 2025 05:49:28 +0000
Manifest next update:     Fri 12 Dec 2025 05:49:28 +0000
Files and hashes:         1: 7mC-_JS8D3S9nREVbhW6I_fr5ag.crl (hash: KTbGTS6Qht9HqfbDH1ndJI409jWXAhXAeMSPjrFZqdQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
                          rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6DD0, serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
        Validity
            Not Before: Dec  5 05:49:28 2025 GMT
            Not After : Dec 12 05:49:28 2025 GMT
        Subject: CN=69327268-c4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5d:39:fe:2f:32:a7:de:7e:43:4a:39:3a:58:
                    06:f0:88:91:59:7d:49:d9:12:f0:f0:ba:31:fb:54:
                    3e:82:13:f6:5c:65:63:06:72:d1:c0:2c:15:15:b3:
                    b6:f5:36:6c:23:23:f1:c0:78:5d:16:b8:d1:aa:b6:
                    01:6d:0e:1a:ee:56:57:84:45:fe:2b:11:61:54:f1:
                    99:8e:19:54:6d:16:b6:86:ce:e2:16:4b:ec:7e:51:
                    d8:9b:4d:0e:3f:89:0a:39:6c:71:5c:60:4f:84:e0:
                    5b:31:4c:2b:ba:5c:19:80:27:6b:2e:9f:11:23:30:
                    fa:6c:af:2c:fe:14:01:20:6d:ae:27:e9:d5:49:38:
                    18:2d:20:f7:c1:c0:50:25:f9:ed:d1:66:86:41:f1:
                    9b:d9:11:d6:0a:19:2b:8c:9a:c7:e6:9d:ed:4c:9a:
                    24:e6:66:86:f3:cc:7a:b4:91:9e:37:bc:fb:30:06:
                    63:aa:c8:c3:17:b2:71:16:49:36:7e:d0:3c:f9:5f:
                    f2:f4:b8:28:11:e6:b4:5c:c3:22:8b:a7:44:65:ca:
                    16:03:8b:e9:4b:07:c7:76:da:da:f6:13:52:97:49:
                    a7:d3:b0:7d:d5:8d:96:14:b0:9d:6d:7f:30:8c:c4:
                    cf:6b:a7:26:12:fc:7a:6d:47:b2:f8:9e:16:2a:09:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F4:EB:69:0E:6D:B0:A9:5C:EE:6F:CC:84:4A:19:CA:05:AA:2B:96
            X509v3 Authority Key Identifier:
                keyid:EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d5:a0:72:20:a1:42:d8:b9:8e:8b:b0:7d:37:7e:ce:21:21:
         2f:01:e6:20:21:fc:71:d1:53:a5:23:8b:e5:b3:eb:6f:ba:19:
         12:46:f6:2e:52:c3:86:6a:b9:25:1e:f2:8d:23:42:3b:7a:16:
         58:86:fc:c2:80:d7:d8:bf:94:c9:34:78:34:f5:79:4b:6f:bf:
         92:4e:11:1b:70:91:dc:c5:af:33:ee:3b:97:b4:e1:e4:a3:a9:
         35:4b:f8:b8:3c:a5:9d:82:46:18:47:81:e8:ae:32:02:03:8f:
         e4:51:48:64:4e:2f:3c:ca:0a:80:f0:fe:be:ce:6f:66:c5:a0:
         49:2a:ce:d8:d3:79:d6:f8:aa:cd:c4:83:91:c4:3c:bd:49:8d:
         67:82:b5:7d:0c:16:24:0f:37:3f:d7:50:29:d9:bc:b2:c1:e0:
         02:2b:47:bb:85:65:d2:b1:44:91:e0:ba:ca:57:ce:d1:ac:7a:
         6b:5c:9a:62:83:8f:31:94:4d:02:9f:fd:6e:64:84:04:07:e3:
         e8:c0:fd:c0:a8:7a:35:90:90:f0:92:d9:1b:ae:05:05:df:d7:
         42:f9:29:24:13:9d:53:78:2b:16:22:19:58:eb:3e:ab:b0:06:
         71:65:e7:cc:d8:92:79:ec:58:3d:a8:41:ea:1a:1d:34:93:59:
         e6:5b:15:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:39:35 2025 by rpki-client