This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
File:                     a7IptQZEL6BIpPedPLRPoOAEeUE.mft (raw, json)
Hash identifier:          9L7VpuIJhGONIqd2GORRksLffQVKQQzi0vO9kbrL4Cc=
Subject key identifier:   AD:5B:7D:C5:43:9C:39:F0:C6:4F:35:FA:1E:E3:17:CC:06:C4:7D:AA
Authority key identifier: 6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41
Certificate issuer:       /CN=A913C928/serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
Certificate serial:       07B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
Manifest number:          07AA
Signing time:             Mon 22 Dec 2025 20:43:17 +0000
Manifest this update:     Mon 22 Dec 2025 20:43:17 +0000
Manifest next update:     Mon 29 Dec 2025 20:43:17 +0000
Files and hashes:         1: a7IptQZEL6BIpPedPLRPoOAEeUE.crl (hash: UH0bpkaI5OHF2UBOVdath4iV+ydAmOnpl3o2VU/dSq8=)
                          2: 08D6D5122A4511EBA2903755C4F9AE02.roa (hash: /eGyMyfZrwg+tW0iicICs4kHkYiGhwJp9BCaRgreCno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl
                          rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C928, serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
        Validity
            Not Before: Dec 22 20:43:17 2025 GMT
            Not After : Dec 29 20:43:17 2025 GMT
        Subject: CN=6949ad65-3612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:87:11:ec:95:d1:03:18:cd:84:c3:2a:6d:6c:
                    5e:06:aa:22:83:14:c9:0e:88:92:04:c5:04:d6:b8:
                    05:a9:df:4b:0e:f8:b6:cc:d9:cb:51:82:05:53:4f:
                    62:82:c9:1e:9d:9c:aa:d6:bc:6c:75:e4:db:7a:8b:
                    46:31:c1:b0:6b:38:3d:95:03:9d:77:7b:a6:fc:8a:
                    5a:75:04:0b:c9:ce:6d:29:9f:88:d3:a4:9b:7f:3b:
                    4e:4d:db:3f:fb:26:d5:6c:2e:59:14:9c:d9:28:4f:
                    d0:15:fa:d5:22:60:0c:73:62:fd:96:f7:5a:f6:5a:
                    40:84:00:11:a4:01:5c:fa:ad:c5:b5:32:42:47:c9:
                    e4:3d:cb:34:9c:33:dd:67:08:8f:c0:10:99:cf:03:
                    ed:43:9c:4b:7b:20:d0:62:bf:e7:82:f3:65:93:35:
                    d0:6b:70:7a:f5:21:40:68:98:c4:b3:ec:55:54:56:
                    00:1e:f1:f5:89:97:ae:7f:c9:04:a1:fb:64:21:30:
                    8a:b3:9c:ac:2e:e7:bf:a3:0d:0a:25:8c:ef:32:d9:
                    19:23:8e:f9:f9:fc:04:c9:66:ab:85:60:0c:7d:ac:
                    fe:d1:23:ce:5d:88:f5:2c:52:51:93:b0:b2:02:bf:
                    fe:81:e3:13:6d:70:28:f4:db:ea:95:45:8b:1f:4b:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5B:7D:C5:43:9C:39:F0:C6:4F:35:FA:1E:E3:17:CC:06:C4:7D:AA
            X509v3 Authority Key Identifier:
                keyid:6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:bd:d6:35:df:56:a6:23:f7:50:2c:00:ff:08:6f:07:7d:9e:
         21:b3:d3:63:20:54:31:f4:de:f8:ad:c9:a7:25:61:02:fe:da:
         ce:7b:0e:9b:a9:78:bb:21:ea:7f:1d:d3:41:07:87:3f:3f:a8:
         60:3b:79:0f:68:5a:cd:47:c2:0c:a5:a7:1d:2f:fa:5f:6b:94:
         25:c0:57:eb:50:83:77:ea:aa:51:b8:b9:70:a8:52:c7:ac:75:
         69:d9:63:9d:b9:7d:c9:1a:67:e1:45:e6:28:dd:27:b5:46:f4:
         29:ad:f7:c4:ac:ca:0d:4a:ca:b6:ed:82:35:85:7a:1f:29:31:
         0e:11:f3:d3:53:54:2d:2f:06:3c:10:b5:ff:ed:0b:31:44:c5:
         8c:5c:8e:af:0c:7a:96:16:bc:55:56:0f:01:64:8c:b2:6f:a9:
         e4:4b:43:a6:b5:3a:41:aa:6c:92:0f:0a:e0:84:8a:83:e2:6b:
         a5:a3:b1:bf:ea:0f:5f:4a:cf:51:ec:07:5a:d1:02:25:70:8c:
         2a:b5:ca:2d:7f:4c:f5:b0:ab:9b:bc:1a:4a:b4:64:e0:54:b4:
         9e:f0:23:5d:a3:cc:ea:04:f6:2c:46:16:cf:fe:8a:34:29:b4:
         d8:59:c1:28:f6:37:df:ac:2e:8b:17:eb:d9:0a:5b:57:b1:fa:
         32:a6:05:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:51 2025 by rpki-client