This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
File:                     7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json)
Hash identifier:          T2W/IndPRbJdMNAk7NF4wmizmyRi8R4ibCVY+XuYuqk=
Subject key identifier:   3F:CE:AE:E7:A4:77:2F:39:9A:05:A5:B4:BC:80:60:AF:A0:11:0A:15
Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41
Certificate issuer:       /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
Certificate serial:       0E6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
Manifest number:          0E64
Signing time:             Mon 22 Dec 2025 17:25:22 +0000
Manifest this update:     Mon 22 Dec 2025 17:25:21 +0000
Manifest next update:     Mon 29 Dec 2025 17:25:21 +0000
Files and hashes:         1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: TraYteTTMbTrOIA64aXpRP4vV/tSqhTzp9C0MWHTrQ4=)
                          2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: kbrsBWLPmTs2n5OoEUQRcNgIkU1aEuNqMVThcieEjvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl
                          rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3693 (0xe6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
        Validity
            Not Before: Dec 22 17:25:21 2025 GMT
            Not After : Dec 29 17:25:21 2025 GMT
        Subject: CN=69497f02-d774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:26:f0:4f:7f:dc:d1:75:b2:94:b9:6f:1a:
                    89:34:d9:2f:56:5b:81:d9:62:2c:19:d0:67:9b:c7:
                    77:96:0c:0e:0f:13:04:f7:d8:cf:3b:ba:59:5e:60:
                    cd:6e:f7:41:a9:9d:2c:45:28:8c:c2:22:fc:fc:87:
                    17:76:04:5a:85:c9:dd:ce:b9:d4:30:29:ad:d7:96:
                    fb:ee:5e:39:8a:f6:d5:66:c7:83:67:1e:9e:7f:36:
                    e6:ff:8a:2e:2a:96:02:09:32:ef:a1:99:75:46:87:
                    c7:1a:df:54:fc:c2:e6:e8:1e:7c:27:54:2e:6f:52:
                    3b:d3:d8:96:02:a4:66:52:fc:3d:28:4c:20:26:5f:
                    66:44:16:c5:1c:fe:6a:7e:22:1a:4b:52:bc:22:0a:
                    c0:4a:a0:0d:dc:17:89:b6:a0:04:53:b9:39:90:f8:
                    27:9c:e1:69:46:7c:bc:0c:0e:a5:ed:c7:88:d0:d0:
                    12:71:c5:9c:0e:1f:85:3e:66:d9:d9:12:81:94:2c:
                    98:4c:57:66:bf:2c:f5:80:86:c1:32:cf:1f:33:ea:
                    da:ed:54:13:10:e5:c6:06:f3:c5:08:29:fc:95:df:
                    32:c8:70:89:63:21:d2:94:33:f4:b8:01:da:a1:6e:
                    4f:5d:5a:b9:68:04:28:e3:61:b7:ed:21:43:2c:0f:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CE:AE:E7:A4:77:2F:39:9A:05:A5:B4:BC:80:60:AF:A0:11:0A:15
            X509v3 Authority Key Identifier:
                keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:5c:12:9c:4d:0c:53:24:93:1e:f5:02:fd:ec:ab:38:f6:
         0c:c4:19:16:ea:7e:6a:b1:ee:8a:7f:fc:1e:3c:d8:0e:cb:44:
         d9:3d:40:5d:81:b0:30:f8:1b:5a:15:4a:0a:b6:06:1a:0f:71:
         4f:26:e4:79:fd:60:f9:c2:22:b3:a8:6e:8c:67:4c:40:34:95:
         ff:e9:3f:2d:6b:42:71:58:b8:4c:96:c5:ec:28:4c:cf:a5:f9:
         cc:3f:78:01:ab:75:2c:69:9f:e6:b8:76:11:64:63:53:28:f6:
         7d:4e:76:75:4b:87:0a:95:09:bb:fe:a1:2f:6f:9d:cc:e1:b8:
         37:77:21:1d:1f:cb:d5:5c:80:bb:6c:45:9e:ad:b8:07:46:9a:
         8e:e1:b5:6c:de:9b:da:e8:37:5b:d2:d9:02:bd:6a:a2:8d:e7:
         a0:d1:7f:59:ff:7a:0d:ea:e9:86:02:2f:c2:15:95:f6:fa:0a:
         4f:d8:48:e4:26:6a:a2:b1:b9:f6:95:da:ae:19:2e:08:56:59:
         27:44:8f:e4:1d:9d:3f:8a:20:4a:50:48:2e:58:03:66:13:47:
         9e:f5:d0:56:e7:7a:b2:1b:77:4f:8f:9f:64:e5:68:f9:03:1c:
         fe:89:e3:ad:db:45:0a:8e:6a:ee:c1:88:b8:7e:f0:fe:cc:e1:
         08:03:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:50 2025 by rpki-client