This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
File:                     P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json)
Hash identifier:          rNkx+oNdYj/BudgRSP2XVXirf166iDRFGwVrn44Zeq8=
Subject key identifier:   48:E7:70:6A:4E:DA:97:6D:90:78:46:73:B7:08:F6:F4:79:A9:23:9A
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Certificate issuer:       /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial:       033B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
Manifest number:          0327
Signing time:             Mon 08 Dec 2025 23:27:58 +0000
Manifest this update:     Mon 08 Dec 2025 23:27:58 +0000
Manifest next update:     Mon 15 Dec 2025 23:27:58 +0000
Files and hashes:         1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: MIwznqFGt6wLRK1nqUigDwMcPiE4dGgnqxB51Ng53k0=)
                          2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: cwVG6skd3N1RIYsEuEG8iHXyP7x6WSmLSEaSXVtQaYU=)
                          3: 38813674CA6811EE9891A565C4F9AE02.roa (hash: /I66GwSb6b8OKFWqoS4US5PTjIDfLyd4Pk4hVzRDLQU=)
                          4: 6A347A8E6E0711F0B4073D1DC4F9AE02.roa (hash: WLJSC8F2beVFwk5wQF2XhiW8o1W05YWVEl7Z6TS1RpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
                          rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 23:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827 (0x33b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
        Validity
            Not Before: Dec  8 23:27:58 2025 GMT
            Not After : Dec 15 23:27:58 2025 GMT
        Subject: CN=69375efe-248f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b9:66:d7:fb:ab:f5:7c:72:11:b9:a9:a3:85:
                    b6:c4:b0:c1:72:de:17:e4:c6:1e:eb:2e:30:ab:86:
                    af:38:55:d9:28:24:89:b0:7e:f7:87:26:45:c9:2d:
                    90:a6:df:9b:75:15:9d:1d:4e:35:2a:d2:d9:8f:5b:
                    d4:74:33:63:f2:f9:81:53:b6:8a:f1:46:f1:1f:ab:
                    e2:ac:56:a7:1a:37:b8:2e:89:f0:1f:93:6b:8a:a2:
                    ff:35:95:2e:3a:e3:df:90:2b:be:c9:45:74:f7:71:
                    79:0d:91:0f:6c:55:64:d5:49:d8:ec:25:28:f0:02:
                    20:49:6e:6c:92:c8:6f:5d:fc:ee:50:f9:ec:a1:d4:
                    b0:78:82:67:09:f5:b6:9e:8a:ae:88:88:17:e7:cc:
                    ad:bc:fc:a3:bc:dc:09:10:44:36:9d:09:4b:50:40:
                    70:f3:01:20:63:7a:f4:13:fa:0b:7c:de:5d:f8:18:
                    8f:b2:a1:bc:f2:7e:32:95:e2:c2:5a:dd:94:ba:bf:
                    28:dc:65:aa:62:ee:27:d8:8d:39:e9:33:0d:a4:66:
                    0e:4b:29:cf:01:1b:1c:e0:d7:b0:2d:7a:03:d2:cf:
                    10:e6:a1:79:ab:f0:61:9f:6c:17:f5:b6:83:13:35:
                    23:35:dc:64:5c:26:fa:67:c7:ab:5e:4c:1d:4d:49:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E7:70:6A:4E:DA:97:6D:90:78:46:73:B7:08:F6:F4:79:A9:23:9A
            X509v3 Authority Key Identifier:
                keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:00:29:d2:0c:ce:96:35:82:13:57:27:51:4b:ea:5f:d9:f8:
         7d:d9:4f:a6:56:6e:1a:fd:24:a6:4f:c2:2a:21:6c:c9:d0:0f:
         d4:92:b5:2a:69:ba:7d:93:e6:41:64:4c:cb:10:28:f2:85:fe:
         2b:31:15:77:24:56:49:93:f0:d0:f8:d9:ab:45:94:bb:c9:b8:
         bc:dc:2e:af:a0:bd:dc:f0:44:3f:92:cc:dd:27:21:c2:41:e3:
         54:a1:0b:dc:85:5d:81:00:a5:bb:a8:49:62:d8:80:ab:ed:83:
         2d:e6:3d:f1:60:b0:65:56:40:7b:4c:e4:4d:59:43:eb:1e:9a:
         5a:eb:80:03:aa:56:f9:5c:3d:40:f4:0a:1d:48:f6:10:20:36:
         49:fe:c1:c7:45:97:f2:40:a5:fc:2c:72:59:6a:9f:ee:9d:64:
         cd:a1:55:e5:b4:97:32:fc:33:54:68:5d:af:0f:84:da:fa:3b:
         42:35:8b:f2:6e:bf:8d:ae:6c:bc:a7:74:5c:78:5e:60:3c:fc:
         8b:3c:e5:ae:d0:fd:ad:9a:b6:95:db:c7:f2:f8:fa:06:96:94:
         72:26:38:e5:d2:99:52:01:92:62:d7:c3:ed:97:71:cf:b8:85:
         df:cd:d8:fc:87:ad:d8:c7:b3:22:1d:3f:29:75:20:f1:0d:b7:
         a8:a2:e8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 09:24:08 2025 by rpki-client