This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
File:                     r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json)
Hash identifier:          JzhVcnBaGg1/a6g845vCFs4zruNSmVdnuf0nIIKPCBo=
Subject key identifier:   6C:F4:BE:01:EB:1C:4C:32:67:F5:A2:6B:5A:8D:DB:6A:AD:2F:4B:9A
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Certificate issuer:       /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial:       14E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
Manifest number:          14C4
Signing time:             Sat 06 Dec 2025 16:26:00 +0000
Manifest this update:     Sat 06 Dec 2025 16:26:00 +0000
Manifest next update:     Sat 13 Dec 2025 16:26:00 +0000
Files and hashes:         1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: K7p/ucy5n6f7ushxXxg6BVOn6wCv9YgNYaZWBNl8rfg=)
                          2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=)
                          3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: NmgnSbqhNrVMFG4Dg8/Hr5BSKbryNdhaQqVsZnbZ5iU=)
                          4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5346 (0x14e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
        Validity
            Not Before: Dec  6 16:26:00 2025 GMT
            Not After : Dec 13 16:26:00 2025 GMT
        Subject: CN=69345918-0eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:56:71:01:2e:22:09:23:21:ff:9b:87:c2:
                    0e:51:2c:bd:f9:13:d6:20:6e:c2:4b:87:ef:f4:59:
                    e4:3d:86:f9:46:df:7f:fa:07:a6:fc:ac:3b:88:ce:
                    83:bf:84:ee:0e:dc:8a:76:5c:17:1d:f0:a4:bf:05:
                    4e:87:96:34:9a:bc:b3:96:1c:a5:ac:8e:4a:2f:c5:
                    df:7e:79:40:08:1f:94:64:06:df:c6:43:f0:eb:42:
                    ed:37:88:65:80:de:76:2e:8c:4f:c0:4a:87:8c:f8:
                    de:69:bf:6e:5d:0b:32:29:9b:1b:3f:50:ed:5b:05:
                    d6:ea:8d:9a:d4:8b:f4:75:27:c9:1b:19:96:d0:db:
                    c5:ff:80:45:05:4c:4d:8f:31:2b:67:44:b0:93:32:
                    65:c7:de:87:49:fc:85:73:ca:ff:97:2b:aa:17:1b:
                    80:85:85:52:37:4d:e5:1a:0b:8b:c3:6e:87:07:ae:
                    59:41:f3:74:0a:90:8d:5e:b8:97:84:82:5b:62:50:
                    b3:e9:1b:7e:58:04:d5:41:0f:31:bb:e0:27:3f:b6:
                    b2:e2:e6:76:ca:90:26:00:07:cc:95:a4:04:19:90:
                    a9:b1:ab:62:eb:6a:ec:da:b7:cb:69:71:4a:9c:02:
                    ea:18:90:be:cd:33:43:45:3d:cc:89:47:b8:c2:9a:
                    7b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F4:BE:01:EB:1C:4C:32:67:F5:A2:6B:5A:8D:DB:6A:AD:2F:4B:9A
            X509v3 Authority Key Identifier:
                keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:22:ba:f1:7e:92:01:54:d1:51:02:35:0d:ae:da:1a:b4:6f:
         ce:bf:67:79:61:39:eb:1d:96:d4:b2:5b:69:66:47:ec:c5:b8:
         6b:db:03:56:c2:07:5a:c7:0f:33:da:52:ed:25:15:93:af:11:
         e9:70:91:75:05:ca:cc:99:61:6d:b5:28:b7:7f:56:a1:a9:6c:
         a3:d9:f4:78:39:e7:68:af:4a:48:5c:f8:4e:e7:74:cd:6d:2f:
         a6:38:7c:d1:b7:ba:5e:c4:17:4d:5f:25:b3:90:43:2a:0a:f2:
         6e:9f:8d:d0:66:6b:8b:ad:bc:05:f5:55:68:dd:59:b0:eb:3d:
         8b:91:34:4d:a5:1b:3d:0f:ad:4f:49:85:dd:e3:53:45:9c:9b:
         12:b5:25:35:96:9f:15:16:45:4f:51:8a:1c:9a:95:ca:7e:c5:
         05:47:bd:6c:3d:e0:50:4b:a0:c4:47:2d:1b:5a:e8:13:bb:7e:
         63:5a:89:15:07:68:60:64:5e:56:37:fa:98:95:34:dd:b6:c6:
         c0:9e:f1:87:0e:19:6e:5a:db:48:42:8b:82:6d:5e:1d:44:54:
         54:b5:e8:fb:9a:fe:f2:c5:71:ed:93:ae:ad:35:a6:74:ec:4f:
         35:64:24:0d:c2:e4:1b:e9:75:44:2b:7a:f0:ed:96:93:d4:fd:
         de:fc:9a:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC
MUQwNkUyRTMwHhcNMjUxMjA2MTYyNjAwWhcNMjUxMjEzMTYyNjAwWjAYMRYwFAYD
VQQDEw02OTM0NTkxOC0wZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGVWcQEuIgkjIf+bh8IOUSy9+RPWIG7CS4fv9FnkPYb5Rt9/+gem/Kw7iM6D
v4TuDtyKdlwXHfCkvwVOh5Y0mryzlhylrI5KL8XffnlACB+UZAbfxkPw60LtN4hl
gN52LoxPwEqHjPjeab9uXQsyKZsbP1DtWwXW6o2a1Iv0dSfJGxmW0NvF/4BFBUxN
jzErZ0SwkzJlx96HSfyFc8r/lyuqFxuAhYVSN03lGguLw26HB65ZQfN0CpCNXriX
hIJbYlCz6Rt+WATVQQ8xu+AnP7ay4uZ2ypAmAAfMlaQEGZCpsati62rs2rfLaXFK
nALqGJC+zTNDRT3MiUe4wpp7+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGz0vgHr
HEwyZ/Wia1qN22qtL0uaMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx
RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG
dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlIrrxfpIBVNFRAjUNrtoatG/Ov2d5YTnrHZbUsltpZkfsxbhr2wNW
wgdaxw8z2lLtJRWTrxHpcJF1BcrMmWFttSi3f1ahqWyj2fR4Oedor0pIXPhO53TN
bS+mOHzRt7pexBdNXyWzkEMqCvJun43QZmuLrbwF9VVo3Vmw6z2LkTRNpRs9D61P
SYXd41NFnJsStSU1lp8VFkVPUYocmpXKfsUFR71sPeBQS6DERy0bWugTu35jWokV
B2hgZF5WN/qYlTTdtsbAnvGHDhluWttIQouCbV4dRFRUtej7mv7yxXHtk66tNaZ0
7E81ZCQNwuQb6XVEK3rw7ZaT1P3e/Jq5
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:18:19 2025 by rpki-client