This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
File:                     aR7cVncnIjOjjzNRkaropa4q97k.mft (raw, json)
Hash identifier:          H68EgCuL+5+M5vgF85efftbiHXg6bHYt32vogsYYghE=
Subject key identifier:   DE:B5:4B:1A:91:07:8D:BB:85:D0:32:15:76:DA:5B:87:A3:D9:F9:83
Authority key identifier: 69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9
Certificate issuer:       /CN=A9155725/serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
Manifest number:          8C
Signing time:             Tue 23 Dec 2025 05:29:23 +0000
Manifest this update:     Tue 23 Dec 2025 05:29:22 +0000
Manifest next update:     Tue 30 Dec 2025 05:29:22 +0000
Files and hashes:         1: aR7cVncnIjOjjzNRkaropa4q97k.crl (hash: Bqox+xAcNqsHuVN6onRm6qEK1eq5HH9s6Zl64lDsVW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl
                          rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155725, serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9
        Validity
            Not Before: Dec 23 05:29:22 2025 GMT
            Not After : Dec 30 05:29:22 2025 GMT
        Subject: CN=694a28b3-b779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6a:7b:75:31:17:38:da:0e:57:44:f1:fa:3c:
                    b7:92:26:8f:25:aa:30:7e:b6:9f:75:e3:cf:fc:55:
                    72:9b:bb:41:99:cb:52:27:81:78:27:24:ec:a9:0e:
                    c7:20:81:ab:90:3a:2e:51:17:8b:88:1f:7d:a0:38:
                    3a:5a:ee:c1:42:94:bf:1b:f1:d9:08:64:02:8c:71:
                    19:64:a4:54:71:2d:ef:69:b9:2e:ec:a5:db:ed:d4:
                    8a:54:9c:cc:18:70:3c:fb:40:ae:c4:c1:3a:c2:8a:
                    e9:80:2b:26:e5:5b:2f:79:bf:bc:62:87:1f:31:51:
                    5d:a3:7c:ca:97:78:d9:fe:2c:27:ba:6c:ab:1d:cc:
                    ce:10:9b:0a:fd:4a:a9:2d:0b:37:76:5f:b7:09:8c:
                    dc:07:cb:0e:af:89:63:9b:00:bb:61:fd:3c:08:7d:
                    27:cb:ef:87:be:3a:ab:58:82:c8:58:2e:74:73:f7:
                    2d:2b:a4:2f:f0:b5:d6:7d:d6:4d:50:d3:fa:95:6f:
                    33:e7:c0:dd:15:06:71:db:ec:ed:f9:45:26:d3:54:
                    6a:70:40:14:a2:6e:61:3d:e5:86:47:d7:dc:ed:70:
                    4b:4e:bb:b2:41:4f:a0:22:26:6e:dd:37:4c:48:46:
                    f7:23:66:e2:9f:c0:37:ea:0a:15:aa:82:36:d4:4c:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B5:4B:1A:91:07:8D:BB:85:D0:32:15:76:DA:5B:87:A3:D9:F9:83
            X509v3 Authority Key Identifier:
                keyid:69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:28:9f:3d:51:96:66:af:3e:71:b8:69:46:a1:2b:7c:e4:dd:
         06:db:05:0f:56:b6:3d:82:a7:34:22:a6:7b:29:62:0c:0b:7c:
         c3:9d:02:4d:95:be:c9:ae:25:73:14:46:e1:4b:43:c0:a6:5f:
         c4:10:ff:18:30:fb:c4:08:7a:d7:57:1a:90:1d:68:c9:c3:73:
         64:72:e0:68:b9:c7:0e:f0:64:17:14:55:5c:cd:ff:9b:84:44:
         76:3d:90:d0:41:de:cb:38:a8:11:15:df:19:82:37:3a:6e:20:
         b1:48:e6:ae:0e:e4:49:bd:ec:8c:89:ac:a1:7d:bc:61:4c:bf:
         b3:ff:0f:26:ef:b6:e5:3d:4e:d3:dc:cf:cd:56:6f:70:0a:eb:
         cd:87:9a:99:1e:1f:95:cf:e5:ac:a1:54:11:80:c8:52:41:f3:
         ff:b4:ac:62:15:99:d9:86:6d:be:f8:01:52:55:cd:64:1d:b5:
         39:2b:56:d6:13:cc:8b:0f:56:1a:37:b4:a8:5f:4e:02:be:6b:
         10:c5:9a:38:82:16:75:2b:82:04:4b:19:42:02:c9:15:43:b6:
         57:09:c9:bd:2e:d1:44:65:ef:c4:e1:27:a6:e0:71:47:db:f9:
         e1:2a:73:57:40:bd:70:da:97:ca:d7:50:99:26:87:39:81:23:
         34:e4:2c:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU3MjUxMTAvBgNVBAUTKDY5MUVEQzU2NzcyNzIyMzNBMzhGMzM1MTkxQUFFOEE1
QUUyQUY3QjkwHhcNMjUxMjIzMDUyOTIyWhcNMjUxMjMwMDUyOTIyWjAYMRYwFAYD
VQQDDA02OTRhMjhiMy1iNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Wp7dTEXONoOV0Tx+jy3kiaPJaowfrafdePP/FVym7tBmctSJ4F4JyTsqQ7H
IIGrkDouUReLiB99oDg6Wu7BQpS/G/HZCGQCjHEZZKRUcS3vabku7KXb7dSKVJzM
GHA8+0CuxME6worpgCsm5Vsveb+8YocfMVFdo3zKl3jZ/iwnumyrHczOEJsK/Uqp
LQs3dl+3CYzcB8sOr4ljmwC7Yf08CH0ny++HvjqrWILIWC50c/ctK6Qv8LXWfdZN
UNP6lW8z58DdFQZx2+zt+UUm01RqcEAUom5hPeWGR9fc7XBLTruyQU+gIiZu3TdM
SEb3I2bin8A36goVqoI21EyXIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN61SxqR
B427hdAyFXbaW4ej2fmDMB8GA1UdIwQYMBaAFGke3FZ3JyIzo48zUZGq6KWuKve5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTcyNS81QTY2Q0Y2ODA4
M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi9hUjdjVm5jbklqT2pqek5Sa2Fyb3BhNHE5
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FSN2NWbmNuSWpPamp6TlJrYXJvcGE0cTk3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTcyNS81QTY2Q0Y2ODA4M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi9hUjdjVm5jbklq
T2pqek5Sa2Fyb3BhNHE5N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC+KJ89UZZmrz5xuGlGoSt85N0G2wUPVrY9gqc0IqZ7KWIMC3zDnQJN
lb7JriVzFEbhS0PApl/EEP8YMPvECHrXVxqQHWjJw3NkcuBouccO8GQXFFVczf+b
hER2PZDQQd7LOKgRFd8Zgjc6biCxSOauDuRJveyMiayhfbxhTL+z/w8m77blPU7T
3M/NVm9wCuvNh5qZHh+Vz+WsoVQRgMhSQfP/tKxiFZnZhm2++AFSVc1kHbU5K1bW
E8yLD1YaN7SoX04CvmsQxZo4ghZ1K4IESxlCAskVQ7ZXCcm9LtFEZe/E4Sem4HFH
2/nhKnNXQL1w2pfK11CZJoc5gSM05Czk
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:20 2025 by rpki-client