This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
File:                     Ip7mz7eVhLojEKzORSg496SKUB4.mft (raw, json)
Hash identifier:          5gGX7qonKYkn827DOCPoLibpn+gGeWPIOFNvimqkQ1g=
Subject key identifier:   55:33:03:06:4B:C4:37:88:4D:FE:3F:38:83:AF:55:F0:0A:68:96:6C
Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
Certificate issuer:       /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
Manifest number:          0117
Signing time:             Wed 03 Dec 2025 03:19:48 +0000
Manifest this update:     Wed 03 Dec 2025 03:19:48 +0000
Manifest next update:     Wed 10 Dec 2025 03:19:48 +0000
Files and hashes:         1: Ip7mz7eVhLojEKzORSg496SKUB4.crl (hash: eEjq9CY49XZ/zPPZLjbA6wDthSqn5hb87YSNYh7s8dU=)
                          2: 4F179FFA45C711F09D90C528C4F9AE02.roa (hash: AoqGhpw1dfLgh3xeboUCFj7o3T5zts+KEOp4p0FPim4=)
                          3: E02064A0C9E911EFABA90568C4F9AE02.roa (hash: 1KWYaNEqXlQZbYyzbVPFnEogKXP5LSRzPFTHIQIRAMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
                          rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 03:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91106C7, serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
        Validity
            Not Before: Dec  3 03:19:48 2025 GMT
            Not After : Dec 10 03:19:48 2025 GMT
        Subject: CN=692fac54-694e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:38:75:70:b3:ba:63:3e:70:6c:b4:9c:fe:
                    47:aa:55:90:40:05:f3:fd:1e:b2:94:1d:95:97:b3:
                    b8:26:8e:29:7e:da:06:ba:51:38:92:72:8e:7c:4a:
                    64:90:16:dd:42:2d:9f:f9:93:56:02:e9:d3:d2:70:
                    77:8d:fe:da:d6:e8:d1:b3:fd:77:b2:48:27:9b:58:
                    a6:77:c0:6f:8d:a9:ba:5c:23:d5:41:7c:f6:34:95:
                    dd:d4:11:c8:90:45:2e:6f:ec:cf:5d:9d:6e:52:f3:
                    50:8a:9e:b6:d5:c8:86:3e:16:4d:0d:e7:d8:19:b9:
                    88:01:00:65:6a:c5:57:96:db:27:e7:ce:f1:21:83:
                    de:2c:26:9e:9c:63:ff:45:dd:9c:88:d3:fa:ac:16:
                    a8:cc:62:03:9d:55:39:f5:32:19:e3:0c:29:40:94:
                    95:bf:3d:fb:c6:53:9b:fa:b8:de:90:b2:3e:7a:72:
                    4f:0d:14:b0:e4:5d:2f:f6:44:99:05:8e:cc:8d:8b:
                    92:5a:4c:14:96:69:84:07:db:06:c1:ca:5b:9d:63:
                    95:74:2a:e5:5c:2f:4d:f0:73:3d:d8:e6:1b:a3:2d:
                    a7:c5:33:06:97:49:a0:e0:ab:f9:24:c2:cf:3a:9c:
                    1c:4f:c4:d7:25:f5:01:87:e8:2c:6b:70:29:bf:2c:
                    79:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:33:03:06:4B:C4:37:88:4D:FE:3F:38:83:AF:55:F0:0A:68:96:6C
            X509v3 Authority Key Identifier:
                keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:70:6f:5c:da:18:e8:e0:6f:39:d3:b9:f7:9c:a7:7b:45:ae:
         07:db:c2:75:46:f2:45:82:b4:48:bf:92:8a:34:c7:f0:27:95:
         aa:b6:4c:ba:8c:64:4b:6e:5c:7c:a0:60:d6:70:cc:ba:b2:6f:
         3b:d4:bc:24:17:c5:1a:ff:86:fc:04:a2:38:74:5e:81:ed:57:
         77:bb:cd:2a:d9:cd:61:44:df:02:a7:86:bb:11:fb:9b:5b:ef:
         b0:5e:48:63:24:ee:1a:30:3d:c6:9b:08:d7:39:ed:92:e6:49:
         2a:ad:4d:11:a9:28:85:12:82:ec:ca:aa:28:70:14:ff:f0:58:
         fc:a7:c6:2b:ac:8b:41:4d:b1:eb:b3:11:41:62:5a:ff:b2:9c:
         99:3c:4a:49:c8:11:64:49:59:61:84:7b:a8:f5:9e:0f:31:53:
         0e:bb:26:10:ec:91:be:ee:c1:a6:8d:a5:9d:1a:ea:4d:a4:90:
         e8:52:d4:23:ef:f9:cd:a7:f6:92:7a:26:70:d1:7e:f0:73:fe:
         3e:ef:56:b4:fe:a8:2a:fd:f1:41:1d:a0:c9:cc:ef:88:ee:8e:
         ff:07:62:dc:4f:d7:1f:be:21:73:be:26:b5:eb:f0:4e:4a:c5:
         f5:f2:b6:9a:bc:03:cf:23:53:5b:59:9a:73:1e:f2:26:9c:71:
         04:12:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:22 2025 by rpki-client