This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
File:                     7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json)
Hash identifier:          1oTGAz/au11WbA93Cdo0yamP/F/yHDqufJ+OST1mqMY=
Subject key identifier:   B5:FA:C2:6C:26:64:35:F6:D9:99:47:56:C1:11:0F:92:13:E7:2B:17
Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C
Certificate issuer:       /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
Manifest number:          01AB
Signing time:             Tue 23 Dec 2025 02:16:34 +0000
Manifest this update:     Tue 23 Dec 2025 02:16:34 +0000
Manifest next update:     Tue 30 Dec 2025 02:16:34 +0000
Files and hashes:         1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: FFCEyxDEsDu35NrSjTGX5uEChK+bwquxCEu3yEGybOk=)
                          2: 099FC48C854911EF8C3F5275C4F9AE02.roa (hash: Vh8HA37Ll1YokJwtXyOXVAZejUyFz/Dlz9aO3ujmjWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl
                          rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912294F, serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
        Validity
            Not Before: Dec 23 02:16:34 2025 GMT
            Not After : Dec 30 02:16:34 2025 GMT
        Subject: CN=6949fb82-3162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:4c:6d:be:98:93:17:30:31:91:99:a0:e7:
                    3a:3f:0e:ea:d5:1a:dc:6d:b0:2e:ed:45:f6:69:8d:
                    ff:ba:13:e9:2d:95:c9:f9:85:e5:a7:82:48:c2:6a:
                    eb:75:8f:a5:bd:3c:80:b1:41:a8:cc:8b:40:6b:26:
                    cb:f6:94:22:1c:f9:89:5b:63:57:b7:bc:85:3c:02:
                    6b:eb:ee:1e:10:8a:f5:db:5c:40:11:fa:4d:60:b7:
                    ce:4b:38:14:b2:8d:60:30:64:04:bd:fe:87:61:fa:
                    18:e1:39:4b:d0:aa:1e:de:cf:b8:db:78:e5:e1:7a:
                    92:7a:ab:9f:74:c8:24:d9:43:d7:8a:de:f9:b5:96:
                    c8:d4:9c:5f:21:57:d2:b2:c3:a8:ed:a7:d7:b4:ac:
                    df:49:ce:7c:6f:d9:56:83:5c:84:e6:a2:c4:f5:9e:
                    c2:ee:68:a5:47:48:47:49:12:0c:be:0b:54:6f:62:
                    e6:5b:58:2d:c5:5d:bf:fb:65:b0:2e:05:de:f9:2d:
                    00:16:8a:e0:51:f0:84:06:e8:f9:7b:77:e2:76:f6:
                    f8:2a:30:63:da:b9:c8:1b:df:bc:b2:96:cd:71:8f:
                    d2:20:10:34:4f:d3:a1:ee:08:7e:48:57:c0:18:1d:
                    6e:89:67:44:b2:e8:ec:4b:36:6e:69:3a:73:27:b7:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FA:C2:6C:26:64:35:F6:D9:99:47:56:C1:11:0F:92:13:E7:2B:17
            X509v3 Authority Key Identifier:
                keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ab:df:5e:b2:74:f3:53:cf:a1:59:16:17:11:de:d8:a0:b4:
         24:7a:90:54:a3:20:41:af:58:e9:6a:cd:64:8d:5e:ed:da:a6:
         cc:67:da:00:58:d6:2d:c2:fd:ba:87:27:5b:cb:16:6b:98:03:
         4d:51:c2:1d:27:de:6b:41:58:31:5c:b7:6e:ea:4f:5b:25:3b:
         d9:70:b7:7b:0f:cd:a8:c2:40:fb:d2:73:0c:5b:f4:17:1c:f5:
         5e:95:37:a7:e0:25:60:94:c9:5c:c5:fa:19:73:d3:34:d6:d7:
         cc:cb:de:a7:57:66:4c:d4:ce:1e:12:a7:f5:42:5d:51:98:10:
         28:48:98:22:f0:45:45:3a:84:7d:8b:33:8c:02:8e:da:ca:3c:
         40:e9:a0:66:f6:f4:1b:9a:70:08:c1:dd:b6:7b:04:a9:30:e7:
         db:1d:0b:99:8c:0e:f3:16:5a:c1:fa:94:7e:2f:75:f6:3e:06:
         2d:b3:4e:6c:9c:03:85:e0:44:93:13:9c:32:a7:67:e1:f8:a9:
         2a:40:4c:6b:4f:a8:f7:f3:6d:b0:2a:4d:0e:a8:76:8e:dd:ca:
         3f:f8:18:c6:55:8b:07:41:b2:9b:29:87:e1:d6:8e:be:79:cc:
         86:75:46:ec:fd:de:8c:50:c8:4b:16:d4:dc:b3:8e:58:93:19:
         9b:7f:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:41:56 2025 by rpki-client