This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
File:                     e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft (raw, json)
Hash identifier:          0n4TfhvLaMrYPJ3LPYjucZb2TAa/kiT05J9l/7oSv90=
Subject key identifier:   AA:83:C8:E7:23:9D:EF:C7:12:94:C5:47:99:E0:C5:9E:CC:4B:25:9F
Authority key identifier: 7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4
Certificate issuer:       /CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
Manifest number:          C3
Signing time:             Fri 19 Dec 2025 05:02:26 +0000
Manifest this update:     Fri 19 Dec 2025 05:02:26 +0000
Manifest next update:     Fri 26 Dec 2025 05:02:26 +0000
Files and hashes:         1: e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl (hash: 4NhSRJucZFiWnjEwdFJExsRmY8m70YzcLFTuTk07yDk=)
                          2: 265BE218B69F11EFB2CFE86CC4F9AE02.roa (hash: ROjBhj4WNSVnQpneHUZVLTay7BSLWkeCN2H9UxKd4tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl
                          rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C83A, serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
        Validity
            Not Before: Dec 19 05:02:26 2025 GMT
            Not After : Dec 26 05:02:26 2025 GMT
        Subject: CN=6944dc62-a4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:a9:05:3d:0f:24:e3:e5:dd:db:17:2c:eb:
                    05:bd:d9:51:ea:74:ba:5e:87:e8:60:8d:0c:bb:38:
                    87:9a:04:26:08:5a:6f:27:41:14:bf:80:4c:72:d1:
                    74:ba:96:de:77:66:3a:b7:06:57:34:d4:c2:8f:10:
                    75:28:8b:66:e3:87:b1:68:cd:c8:82:97:8f:74:54:
                    6e:ad:07:16:d9:1f:5c:e4:b7:85:e9:70:d2:bf:d9:
                    b1:90:38:44:bb:a6:ad:b9:66:dc:5f:22:ae:e0:64:
                    d0:f8:e3:49:49:e2:b3:82:60:4b:d5:a7:10:6f:da:
                    b4:77:ca:90:fe:fa:3a:ec:69:1e:a9:db:f5:07:62:
                    17:ec:79:34:f1:6f:7c:62:35:b7:b9:cd:bf:e6:7b:
                    d5:89:3d:48:84:17:6f:b2:bc:25:74:81:27:99:d8:
                    94:89:f4:7d:0f:af:2e:a9:95:1a:b3:6e:6d:1b:9b:
                    c6:1d:9e:d0:07:fe:0d:19:cf:09:2b:ff:59:16:33:
                    e0:a5:1f:4e:5e:42:4a:0a:68:ab:68:49:dc:91:5c:
                    6a:1c:28:c3:80:18:28:64:ea:e7:98:33:0f:1e:c1:
                    2c:60:11:4c:fe:39:d0:59:e9:a7:6c:d0:86:2d:ab:
                    23:72:d5:32:ae:e3:ed:3b:47:49:43:a1:4b:4a:cf:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:83:C8:E7:23:9D:EF:C7:12:94:C5:47:99:E0:C5:9E:CC:4B:25:9F
            X509v3 Authority Key Identifier:
                keyid:7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:76:e1:b0:a5:cd:6c:5a:5b:1e:58:80:7a:a5:48:17:00:ad:
         b1:b0:da:7d:24:ae:86:01:b4:be:16:6e:ab:d8:15:bd:99:03:
         16:11:f9:46:df:2c:46:9f:61:b9:58:95:79:f3:91:d1:5f:0d:
         2b:03:c6:bf:d8:65:3c:4f:99:42:6a:ff:e4:db:03:4c:09:01:
         cc:67:f7:ed:b8:de:c0:84:4e:e8:4a:15:f9:d9:32:cd:03:10:
         89:4d:e1:31:ed:cf:13:88:2a:30:23:c4:9d:72:9c:98:18:ed:
         e5:6a:00:0f:87:f9:79:4a:c9:a9:19:c9:bb:09:b7:49:1b:2b:
         58:f1:b8:ca:54:93:b0:17:78:c4:5c:ea:52:1e:f1:7f:5b:24:
         47:6b:10:0a:5e:e4:7e:36:b0:04:40:1b:1f:f4:bf:4a:bd:e1:
         e9:95:d7:66:86:76:c9:c0:6c:f0:82:b8:4a:08:e8:fa:67:50:
         6a:ca:aa:4f:45:70:a2:77:fe:a0:0b:10:9d:b9:fd:6a:a2:e1:
         cb:c7:d6:21:64:17:f0:58:60:6b:d6:17:86:7a:ca:83:5f:d9:
         bc:9c:37:e4:51:65:0f:f9:db:28:77:36:40:9a:af:85:e2:a1:
         2d:48:f6:60:7d:e0:2d:bb:89:9a:b6:5b:fc:f2:72:82:45:6e:
         3f:1a:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:39:28 2025 by rpki-client