This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
File:                     7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json)
Hash identifier:          k41EIshhAejzJc5ZfJz+PoK5mrTLkwX0pYQ/2FEeUqc=
Subject key identifier:   2F:D8:CA:6B:A4:0E:96:07:20:5B:D1:94:7D:E7:90:09:48:2B:E4:B8
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Certificate issuer:       /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial:       0B43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
Manifest number:          0B27
Signing time:             Sat 06 Dec 2025 18:35:31 +0000
Manifest this update:     Sat 06 Dec 2025 18:35:31 +0000
Manifest next update:     Sat 13 Dec 2025 18:35:31 +0000
Files and hashes:         1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: 9QXoWZ3TkjyrYKXEoRiuLtFKeDtNc57GNuIFQM8GKmI=)
                          2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: DR5F6HRqYYMo1uwv7ihEplZzpoKgREyzR6TXxsIOhyI=)
                          3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: AlDXjMzrluQLs6V85p5i3jcfN6x00fmAUpJ1+5KxZR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
                          rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2883 (0xb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
        Validity
            Not Before: Dec  6 18:35:31 2025 GMT
            Not After : Dec 13 18:35:31 2025 GMT
        Subject: CN=69347773-02c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:3a:cb:05:01:c3:35:8e:c6:0a:83:d3:6b:
                    90:a4:69:d2:f7:af:10:ec:3f:c1:48:3e:32:a8:5e:
                    19:5f:42:52:98:f9:30:81:7e:ea:dd:77:0b:d6:37:
                    4f:07:55:d2:72:b0:31:df:fe:19:9b:44:1c:bc:21:
                    8b:5a:36:2f:ec:11:e5:2a:4b:5b:f7:c6:09:a8:f7:
                    4e:6b:06:b2:c9:d6:40:ec:8e:1e:2d:9e:02:a6:bf:
                    5d:f5:33:9f:3a:f5:cd:1b:08:4a:a4:e5:67:e7:96:
                    5c:26:98:f1:5c:fb:7d:84:e0:39:29:fd:9e:52:b5:
                    ce:ee:c5:3a:50:c5:e0:74:d4:30:8b:2b:c5:6f:26:
                    76:f5:2b:dd:fb:8e:25:9e:19:78:b7:a2:af:46:60:
                    c7:dc:0e:eb:53:1b:e0:78:e4:65:d4:c1:e9:1a:a6:
                    51:67:e1:f1:90:60:a3:6a:b3:9a:32:5c:73:12:e7:
                    ef:03:0f:b3:62:33:8c:65:37:01:e9:54:d4:88:d5:
                    29:20:bb:d1:34:69:14:30:96:73:0d:15:d5:e7:73:
                    57:c8:21:b9:57:a7:9a:9c:5d:d3:f6:64:d4:a0:6b:
                    84:cc:62:3d:11:35:8b:3b:94:41:17:7c:5a:09:c0:
                    ba:61:b6:a8:63:94:81:34:58:33:54:a0:1a:71:76:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D8:CA:6B:A4:0E:96:07:20:5B:D1:94:7D:E7:90:09:48:2B:E4:B8
            X509v3 Authority Key Identifier:
                keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:26:d5:f1:62:2c:f3:53:d4:6f:a2:0d:35:fc:6c:fe:9f:9c:
         88:0a:af:e1:9d:39:be:57:4c:a6:37:b5:8f:9f:1f:3b:74:f5:
         d6:8e:e2:dd:8e:87:f6:c4:d1:a4:ef:31:ad:0e:ac:2d:8f:ec:
         2c:a0:90:72:42:1c:eb:ff:58:9d:61:b3:9b:02:ba:a6:67:12:
         0b:ae:85:23:4b:c3:14:0e:91:ea:7e:a9:00:fd:b1:7e:a8:d2:
         c7:88:d2:d5:52:0c:92:60:ab:95:bd:70:d2:ca:f9:7c:ca:79:
         c2:03:d6:35:fc:f8:35:ae:f6:3e:cf:5e:ef:0e:19:31:c1:5d:
         49:3f:af:05:8d:11:29:87:36:bb:b9:f0:74:4e:f1:77:a2:08:
         6d:50:c8:a4:09:ea:bc:82:c0:50:05:e4:a0:8e:62:8f:41:8a:
         77:7e:25:47:fd:8f:fb:d3:a9:63:40:25:70:39:f4:94:2b:9b:
         95:8f:c4:3c:a3:03:66:c4:f7:e8:79:32:75:55:c6:3e:c8:15:
         ee:e5:0d:1f:1e:30:4b:83:75:50:69:53:d6:e0:44:ac:7f:09:
         02:e4:9d:10:0d:1f:fc:90:59:aa:06:81:2b:76:d9:2e:62:9b:
         55:96:ab:6a:6d:0f:18:53:f5:a6:09:30:b5:9f:13:fa:49:cb:
         99:5e:86:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:04:47 2025 by rpki-client