This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft
File:                     8uBzCSl2BY65hlYUFDf4-2i3IV0.mft (raw, json)
Hash identifier:          uSZmNcYigm1iqrr+wmikwGmZHRWAr2PcXk06nojEbYs=
Subject key identifier:   76:9C:09:FB:20:21:99:22:7A:1A:6B:F0:3F:34:9D:E9:64:71:8E:3B
Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D
Certificate issuer:       /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft
Manifest number:          7B
Signing time:             Tue 23 Dec 2025 05:40:17 +0000
Manifest this update:     Tue 23 Dec 2025 05:40:16 +0000
Manifest next update:     Tue 30 Dec 2025 05:40:16 +0000
Files and hashes:         1: 8uBzCSl2BY65hlYUFDf4-2i3IV0.crl (hash: F7z6oCGhuxb6C8CgLJBlxAJXDBnlintC++gWFn38QGA=)
                          2: CF53E5E6240411F0B73CB374C4F9AE02.roa (hash: aGXXY3h8pMjRmE6vJ9+0EmvsUGymYki2tMrN0LjTaWE=)
                          3: CFED56A4240411F0B73CB374C4F9AE02.roa (hash: Zn3nz0esus3n+Qr7MjHUDFZOowDDsYzs6GVur4c4Gdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl
                          rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D
        Validity
            Not Before: Dec 23 05:40:16 2025 GMT
            Not After : Dec 30 05:40:16 2025 GMT
        Subject: CN=694a2b40-5865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:f7:e9:09:2c:94:67:4b:92:dd:80:d7:a6:
                    4f:fb:05:3b:03:f8:a7:24:a8:cf:17:8c:83:32:1b:
                    fa:72:fa:e9:b4:38:8e:dc:58:33:25:35:50:5f:87:
                    62:d9:65:b9:c6:5d:e9:41:de:c4:32:ed:69:35:1e:
                    55:60:00:6d:76:5e:b1:40:e6:cb:13:01:f0:89:d2:
                    4c:a9:cb:c6:f4:e7:fc:86:b7:bb:5e:17:30:7f:11:
                    cb:58:c4:c0:08:7b:14:89:91:20:cd:11:a4:60:df:
                    96:83:74:ca:fc:c9:98:0e:dd:7e:db:d5:d3:02:f5:
                    79:ce:6b:06:1d:67:7c:01:1a:fa:66:21:6e:f9:5c:
                    52:61:19:ea:43:97:10:32:2a:ab:c0:f8:b0:a1:ae:
                    01:71:19:7f:1c:a0:02:ba:3b:1e:80:94:e6:f0:0c:
                    05:27:91:cf:0c:5a:28:b6:4e:92:99:6d:27:a0:e1:
                    33:40:a5:f0:49:97:3c:26:1a:58:1d:26:1a:0d:9e:
                    0d:7b:6e:de:76:ad:d3:88:75:c1:c8:2f:de:b0:e4:
                    b0:b9:43:5a:81:76:16:68:bd:8c:98:f5:9a:c2:07:
                    bd:fd:cc:71:ca:88:1b:7e:79:8f:85:af:84:d7:8a:
                    6f:11:bf:a6:20:49:b6:46:ef:cc:87:13:79:ad:9d:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9C:09:FB:20:21:99:22:7A:1A:6B:F0:3F:34:9D:E9:64:71:8E:3B
            X509v3 Authority Key Identifier:
                keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:dd:97:ff:b7:d9:da:42:dc:d1:c0:e5:16:93:06:86:d5:cd:
         13:95:73:f3:70:cc:60:12:1e:44:b4:b2:8a:1b:0a:d3:da:53:
         e5:8a:b3:de:cc:ea:06:c7:ff:c4:a9:4c:e1:b8:31:69:c1:41:
         f0:17:20:a5:14:44:ef:5b:bd:b9:1d:35:2c:8a:a8:c0:71:f2:
         8c:c8:d0:aa:52:45:5a:10:d7:e0:12:0e:98:3b:ce:d6:6f:ba:
         72:03:7d:e0:89:8a:f2:8f:d1:c2:a0:1c:97:6a:d5:92:f0:b5:
         16:d5:de:23:77:26:90:28:7f:4a:dd:26:59:a0:5b:a5:4c:e8:
         00:2a:00:bc:d0:80:bb:09:db:a8:8c:07:87:62:60:76:86:e4:
         a1:61:a2:ba:29:d5:2f:c9:3a:67:a7:b2:99:87:cf:15:c3:08:
         51:8b:eb:b3:e3:16:c5:6c:a2:00:ef:12:7c:c1:7f:67:ad:72:
         23:30:72:fb:c2:2c:8d:33:67:45:7b:a8:b5:df:9c:dd:b8:e8:
         64:f8:f4:57:7f:45:fc:57:44:c5:de:33:ae:15:b9:6e:25:5f:
         1f:f8:e7:a7:07:6d:bb:ce:c6:41:12:cc:ef:ce:59:a9:7b:21:
         8e:38:ca:46:95:de:b7:2c:b1:60:46:76:6e:eb:7d:ef:5e:b8:
         50:a6:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:03 2025 by rpki-client