This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File:                     f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier:          7WBgKOodF701SO2IVU21IouYab2+FZaYEWwF6Imsbb8=
Subject key identifier:   07:F7:3F:8D:6D:D6:95:F2:84:D0:46:20:C8:E2:BB:91:24:DD:96:4E
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer:       /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial:       0638
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number:          0629
Signing time:             Wed 31 Dec 2025 22:20:36 +0000
Manifest this update:     Wed 31 Dec 2025 22:20:35 +0000
Manifest next update:     Wed 07 Jan 2026 22:20:35 +0000
Files and hashes:         1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: CKU9WyeL4J1MNKbSiXPEiOWjAzg65vhapbrRT6zPMxM=)
                          2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: a4WQSUXqPLBs6hBYXUzBgrWs1nsWnI2pLDicQNKog6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 22:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4
        Validity
            Not Before: Dec 31 22:20:35 2025 GMT
            Not After : Jan  7 22:20:35 2026 GMT
        Subject: CN=6955a1b3-a810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:83:34:a6:77:ea:e8:ee:85:7e:65:3f:74:
                    e7:11:2f:2b:15:49:46:ee:72:6d:5d:b7:15:d1:c8:
                    a6:1b:47:e7:d0:51:66:22:68:ce:cf:2c:16:b7:61:
                    32:24:c7:19:ac:78:33:6e:0f:f6:f7:dd:ee:89:92:
                    90:c9:85:8e:69:87:43:4b:b5:46:65:d8:2d:2b:0a:
                    18:be:bb:ab:00:12:d2:cd:0c:08:49:3e:75:5d:f9:
                    db:d3:15:d3:13:b0:66:e7:33:66:11:65:89:8f:fe:
                    05:94:c0:d5:85:3d:ea:37:b4:46:f1:ae:b3:d0:ff:
                    06:ba:0c:ab:e1:ab:55:ca:8a:a5:5e:60:0b:db:04:
                    2d:b5:d0:90:f4:b0:93:89:cb:11:04:f2:3a:5c:39:
                    96:56:f8:9f:e6:c4:8d:67:3e:8f:fd:b1:af:2e:fa:
                    37:d4:50:b3:59:90:e6:31:f5:7a:05:5f:50:8b:65:
                    9a:5e:65:d0:18:72:3c:99:8f:70:31:a2:7a:55:bc:
                    60:cb:e2:fb:b5:b7:94:60:78:7a:a3:3c:fb:bc:1a:
                    2f:9e:b6:02:59:ff:b4:0b:07:4b:96:67:78:46:79:
                    af:aa:71:97:1c:e4:36:de:dc:ac:9a:9c:89:0d:31:
                    3c:d1:8f:9e:74:12:36:6f:88:75:9a:d0:95:08:a2:
                    a4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F7:3F:8D:6D:D6:95:F2:84:D0:46:20:C8:E2:BB:91:24:DD:96:4E
            X509v3 Authority Key Identifier:
                keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:99:93:24:b3:2f:90:9b:04:04:62:d3:d8:bb:b5:91:6c:5c:
         c6:f4:4f:37:3d:4e:77:8e:92:e0:33:46:4d:79:25:ac:ee:72:
         de:3e:d1:c8:db:8e:2d:81:a5:74:ec:56:1b:f0:19:62:3c:8a:
         11:31:0b:36:d5:1d:ba:12:84:3e:f6:b3:42:e1:1d:82:c3:42:
         81:7c:8f:ae:9f:e2:78:2c:48:11:d0:20:f0:63:79:bb:6d:35:
         9b:84:45:75:5e:86:3d:81:87:61:82:a8:6d:1d:10:32:b1:d8:
         43:11:05:ea:3c:39:ce:f1:9e:1f:c4:92:f7:db:47:f9:7a:93:
         59:ab:b5:05:95:5d:18:47:36:43:e0:67:a2:c5:7b:bb:9d:06:
         c7:13:66:69:6d:1a:8d:63:b3:70:ac:3f:c9:75:07:0a:5c:e5:
         89:a5:32:d5:7f:f5:18:87:63:31:87:d6:d3:8b:64:94:5c:17:
         d0:ea:54:1a:de:7a:76:38:0d:40:10:35:87:cf:0d:31:03:3d:
         bd:8f:6c:22:07:96:26:b8:a1:04:53:c6:1a:84:70:8b:f9:a7:
         c6:c7:23:50:ab:7e:a9:02:e2:77:48:23:99:53:42:41:5d:4c:
         4a:6c:39:26:71:08:e6:8c:b5:4f:96:ea:02:38:95:02:ab:7a:
         79:eb:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 14:26:13 2026 by rpki-client