This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
File:                     _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json)
Hash identifier:          DZ7AdRjPQHbMXaJQozfvMSr1+LaSM0yVu2G8rJYkm8E=
Subject key identifier:   EA:DB:76:C7:80:23:C1:A3:6C:74:67:55:DA:39:90:9D:6B:B1:DC:DB
Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B
Certificate issuer:       /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
Manifest number:          A7
Signing time:             Sat 06 Dec 2025 14:32:51 +0000
Manifest this update:     Sat 06 Dec 2025 14:32:51 +0000
Manifest next update:     Sat 13 Dec 2025 14:32:51 +0000
Files and hashes:         1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: Jj4oBOBqMB6nqZYXISiGSg5qZHnomAbLGf61iRy+Mww=)
                          2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: HitZiMXiwNMvF13mhcDQf6XM4HwHI8hyTa9V9MVcrDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl
                          rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B
        Validity
            Not Before: Dec  6 14:32:51 2025 GMT
            Not After : Dec 13 14:32:51 2025 GMT
        Subject: CN=69343e93-eb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:04:cd:e8:16:2f:01:32:25:b1:24:88:cb:
                    9c:ab:b2:6b:e3:f1:db:62:04:30:03:1e:f0:ed:99:
                    3c:07:57:d3:af:06:f1:c3:03:26:16:1f:fe:fd:2e:
                    a7:52:a9:e5:9f:fa:f3:5b:df:19:03:02:35:94:9d:
                    9f:fd:4e:d2:90:dd:6a:60:f5:9c:f7:37:38:29:db:
                    01:88:5b:79:c2:25:c7:61:87:8c:16:6c:8f:3e:8e:
                    b0:1d:3b:5b:6a:8b:93:59:bb:46:bf:f3:b0:70:c4:
                    95:b7:01:ef:2a:fe:92:de:53:4f:83:63:27:39:7e:
                    6f:be:3a:7c:4d:d6:f5:2b:ce:aa:43:42:26:d8:41:
                    fa:34:10:b0:b8:29:31:3f:af:75:00:9a:1d:ee:64:
                    0f:75:2c:28:38:ee:74:0b:1b:c3:f1:83:19:fa:cf:
                    ce:7d:04:71:90:d7:74:37:62:f8:75:35:9d:d3:d5:
                    6b:79:cc:a1:09:27:53:16:c2:c1:53:9d:38:12:cd:
                    ca:d3:e4:ad:13:e5:10:f8:e8:75:50:51:fd:c8:36:
                    a7:b0:84:01:8d:50:0e:9c:b6:f9:c8:26:e6:f5:99:
                    eb:73:d5:1c:9b:76:de:ad:5b:45:5d:34:f3:25:b8:
                    cb:2a:64:27:91:0f:e0:6e:f3:41:2f:a8:3c:20:6f:
                    09:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DB:76:C7:80:23:C1:A3:6C:74:67:55:DA:39:90:9D:6B:B1:DC:DB
            X509v3 Authority Key Identifier:
                keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f0:c6:88:da:bb:13:37:0a:d0:1a:9a:d9:82:f1:7e:59:48:
         8b:82:f8:75:ca:85:a9:63:ea:cd:02:c2:61:cd:ce:a1:f9:6b:
         27:cf:61:64:85:99:1c:c5:2e:7c:76:7e:d5:22:dc:ff:7c:9d:
         c1:c5:03:f4:09:35:cf:88:70:f7:f6:09:0a:28:c3:2d:2d:4c:
         e4:cc:ca:a0:2f:2e:d0:e2:d5:be:73:70:78:12:8f:cd:2c:1e:
         3e:74:67:6a:32:9a:75:b7:30:8e:9f:44:57:a1:10:c6:0a:79:
         8e:97:2c:51:9c:f6:6a:5d:39:79:17:a2:12:2c:e0:f3:b5:7f:
         aa:35:06:af:6a:2b:64:83:a5:61:4d:f0:f5:66:04:80:14:91:
         45:65:82:bd:db:7c:43:4d:2e:13:1b:ae:0d:c3:21:a6:66:4b:
         e7:de:58:87:35:8a:eb:a9:bd:83:18:2f:96:46:1a:37:a3:c4:
         a4:46:5e:35:3a:0b:52:63:88:6d:4a:b6:35:8e:dc:23:7d:7f:
         03:88:2d:da:f9:f5:d3:26:06:e2:e4:19:16:71:71:04:8f:d6:
         15:21:e6:6e:41:98:b7:ec:d8:05:42:04:6f:76:e8:f5:fb:f8:
         77:88:c1:26:c5:e1:c0:bf:fd:83:77:18:3d:f8:25:91:e8:1d:
         06:df:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:15:15 2025 by rpki-client