This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
File:                     eFGQATcElYfBJg7e1Re30ooYjrM.mft (raw, json)
Hash identifier:          oVI3yjhARSmmJVdiSIYTazWNfona/foANtBEdWkT4ag=
Subject key identifier:   F7:20:F3:D2:21:07:F8:5A:28:07:46:50:35:7C:2C:E9:97:E7:56:60
Authority key identifier: 78:51:90:01:37:04:95:87:C1:26:0E:DE:D5:17:B7:D2:8A:18:8E:B3
Certificate issuer:       /CN=A9130D7B/serialNumber=7851900137049587C1260EDED517B7D28A188EB3
Certificate serial:       0614
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
Manifest number:          0613
Signing time:             Mon 22 Dec 2025 22:00:18 +0000
Manifest this update:     Mon 22 Dec 2025 22:00:18 +0000
Manifest next update:     Mon 29 Dec 2025 22:00:18 +0000
Files and hashes:         1: eFGQATcElYfBJg7e1Re30ooYjrM.crl (hash: LtyKkuAhObACum3nJ6b+2tqfOnvfWP0BgWGshqLY7nE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.crl
                          rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130D7B, serialNumber=7851900137049587C1260EDED517B7D28A188EB3
        Validity
            Not Before: Dec 22 22:00:18 2025 GMT
            Not After : Dec 29 22:00:18 2025 GMT
        Subject: CN=6949bf72-b3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:66:2b:7e:3e:7d:f5:22:c2:35:f5:cb:4a:
                    a0:b0:dd:f7:b5:2e:d1:2b:7e:b3:4e:50:f7:7a:79:
                    23:9a:af:70:82:2e:c6:55:8c:c3:77:50:94:e7:a6:
                    25:32:50:b4:87:1d:43:f1:2a:e6:91:59:27:76:9f:
                    c3:6a:a8:9a:60:1f:92:4f:6c:68:6e:eb:16:f9:2f:
                    42:65:df:e7:e5:ad:3f:bc:6d:34:15:d9:f2:19:05:
                    39:25:09:47:9a:af:ab:99:94:95:7c:05:a1:11:39:
                    c7:f2:d7:24:1f:92:17:54:9d:3c:f7:8f:8c:62:2e:
                    b4:18:21:e3:42:36:29:02:ac:1b:8e:5d:2e:79:5a:
                    d7:99:ac:52:22:10:ed:dc:5a:bd:84:f1:48:45:22:
                    a8:32:e4:e4:77:3d:46:1c:5d:b8:2e:44:8e:4a:2e:
                    29:99:89:8f:df:65:5d:75:7a:c0:f9:0e:30:61:d4:
                    24:7b:2b:86:c5:25:6b:2d:e6:7c:39:f1:e5:dd:bb:
                    bc:b8:05:1b:e6:e7:80:e8:3f:3d:3d:de:4f:8f:8b:
                    18:26:3d:99:42:17:24:46:19:8b:cd:0d:4a:1c:9a:
                    47:4c:dc:0c:1d:71:fa:6a:94:d4:da:40:71:44:ed:
                    ca:bf:9a:85:5b:f4:ad:5e:69:4a:ac:66:ab:36:49:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:20:F3:D2:21:07:F8:5A:28:07:46:50:35:7C:2C:E9:97:E7:56:60
            X509v3 Authority Key Identifier:
                keyid:78:51:90:01:37:04:95:87:C1:26:0E:DE:D5:17:B7:D2:8A:18:8E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b3:8c:4e:99:b5:65:db:d8:ac:49:cf:73:81:a3:61:3f:80:
         9f:4d:86:92:a4:c3:3c:db:e6:b4:c0:40:2a:58:08:c8:1a:b3:
         0b:86:30:8b:fe:1a:e9:06:b7:a6:45:20:07:11:cb:0c:27:cc:
         31:4d:5a:e5:68:b4:f5:17:6b:bf:d8:19:7c:4e:fa:e6:fc:4b:
         44:19:38:e8:29:dc:56:74:a2:14:db:1e:65:66:8c:91:d9:ed:
         1c:db:c0:7c:ed:11:ff:d4:17:b8:d2:24:6d:e7:dc:3e:51:34:
         89:78:87:bc:8d:94:f2:39:cb:ba:9a:2c:43:2e:6b:8f:88:34:
         50:d6:a2:e6:39:c5:eb:82:71:2d:72:96:ce:92:c2:ac:98:cd:
         ac:5d:77:e2:a6:ef:50:79:fe:a6:09:ef:f7:9d:44:0b:45:b8:
         39:be:1b:1d:e7:38:a8:aa:cc:b2:d7:00:1e:e7:e7:c2:87:a6:
         f2:29:3a:9a:ce:ce:43:bb:88:ed:cb:87:fa:6d:46:d4:60:53:
         94:30:11:79:f6:5f:48:5e:51:59:e3:ec:00:72:99:74:87:09:
         91:54:7f:05:73:e8:bb:36:7c:6a:c4:9e:f0:d6:af:27:72:3e:
         74:cb:30:5d:f3:2a:ac:c1:10:25:4d:71:19:39:4c:9e:aa:fc:
         01:a0:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:08 2025 by rpki-client