This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
File:                     7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json)
Hash identifier:          6g2C2R5ASwKAd3ED19XPB6WWWuTXFpXMYo9qyPFjORw=
Subject key identifier:   94:43:0A:B8:41:7A:2B:17:64:8C:B9:60:EE:E9:8A:61:A7:C4:54:B1
Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
Certificate issuer:       /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Certificate serial:       0A47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
Manifest number:          0A40
Signing time:             Sat 20 Dec 2025 19:11:15 +0000
Manifest this update:     Sat 20 Dec 2025 19:11:15 +0000
Manifest next update:     Sat 27 Dec 2025 19:11:15 +0000
Files and hashes:         1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: E7Zuj8oTIBMLQd5KUq0ZyWD6oU8TgKS4VhguUHvtKoo=)
                          2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: uDDzLcWBodLbCzdLP4VyOIXnIAGgVu5+EW/H/aSjYJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl
                          rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2631 (0xa47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
        Validity
            Not Before: Dec 20 19:11:15 2025 GMT
            Not After : Dec 27 19:11:15 2025 GMT
        Subject: CN=6946f4d3-c401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:44:05:01:11:b9:28:fe:92:96:26:3d:6e:
                    a5:96:1e:33:c1:ed:fe:24:a3:48:ca:88:e2:90:ec:
                    ab:bb:0f:f5:55:46:84:d5:3a:0b:36:e2:1a:c4:ef:
                    73:3b:9b:d8:10:e8:e0:37:c4:68:2f:d0:f9:33:15:
                    ee:4e:6d:90:87:34:c6:eb:91:01:59:0c:a1:82:ef:
                    18:a2:fa:6f:97:b2:e6:68:b8:7a:5a:dd:21:b7:59:
                    81:a7:3b:b2:b8:07:0d:36:c9:7c:8a:f1:38:4f:7d:
                    e7:d6:e9:57:46:e4:f2:9b:2a:53:50:f9:96:b8:f5:
                    67:f4:70:a5:ef:2d:e9:8f:c2:e2:1a:40:37:13:34:
                    0d:75:ce:44:ac:fa:4b:c6:db:76:bd:39:57:d2:a8:
                    6a:d3:e2:41:27:ce:02:83:22:ab:4a:b0:4e:03:84:
                    a0:01:c7:19:19:9a:6d:5c:e2:62:51:b0:c0:ef:55:
                    a7:1a:7a:e3:3b:61:e5:d5:22:2c:df:0a:c3:9d:da:
                    00:56:22:4f:92:66:65:f2:3c:06:86:4c:e7:ea:13:
                    c2:4b:89:5f:c8:4a:38:78:78:4e:7a:06:a5:32:1f:
                    b5:35:81:52:00:23:06:d7:58:aa:39:12:df:c0:46:
                    e5:a1:2f:94:f1:83:c2:79:f2:11:10:a2:a5:fa:01:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:43:0A:B8:41:7A:2B:17:64:8C:B9:60:EE:E9:8A:61:A7:C4:54:B1
            X509v3 Authority Key Identifier:
                keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:74:45:b5:ee:cb:24:78:fb:14:6e:9e:2b:bd:1a:ae:92:8d:
         82:5b:43:11:1d:59:61:b7:9c:b3:2a:ce:36:12:09:a3:c4:7e:
         0d:27:ac:7d:42:ab:92:5f:5d:18:56:03:c4:e3:12:f7:7f:4d:
         60:b6:55:18:95:6a:6f:e3:01:0d:1e:b4:51:67:b4:aa:86:18:
         10:97:0e:1d:49:96:c0:13:07:6a:c2:48:11:cd:de:c9:6c:fc:
         4a:be:b7:ef:29:fb:74:1e:12:42:44:0e:13:e2:22:7c:b6:ed:
         8f:00:48:b5:e5:4d:84:20:3f:d0:e3:c4:52:b5:6e:6a:63:e2:
         19:b1:90:0c:3d:c1:ab:8e:6b:a5:bf:de:ca:aa:a4:56:b9:29:
         0f:f6:06:1a:7f:3f:19:e0:45:b6:ea:df:68:f9:3b:2a:37:11:
         80:11:9d:68:0c:ad:e5:06:f9:d6:56:d4:f1:46:9a:10:b8:b2:
         a5:b4:10:74:06:29:64:6f:07:95:db:b0:4a:e9:f1:c4:dc:6b:
         c7:bf:f7:5a:7b:a6:38:68:a4:12:5e:cd:c8:c2:f1:cd:f2:69:
         a4:48:c3:94:40:cc:4d:5f:82:ca:3c:5d:de:4b:70:ef:a9:a5:
         90:28:4a:72:51:6f:96:8c:0f:c6:91:f5:b2:88:db:91:48:e9:
         20:95:54:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:48:34 2025 by rpki-client