This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
File:                     7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json)
Hash identifier:          0G6xb6ZGAKQZr9GMV13W5rfOn7TGLlBb7A1RO/Z7mUw=
Subject key identifier:   34:50:22:81:0B:D8:7C:8C:0C:27:A1:24:0D:44:D9:6B:DD:9B:13:A1
Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
Certificate issuer:       /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Certificate serial:       0372
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
Manifest number:          0360
Signing time:             Mon 22 Dec 2025 23:59:58 +0000
Manifest this update:     Mon 22 Dec 2025 23:59:57 +0000
Manifest next update:     Mon 29 Dec 2025 23:59:57 +0000
Files and hashes:         1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: SgvLICayeLdJowerE9HfE23pwwb+qWVHx0SOASckX68=)
                          2: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (hash: xiPrPMHOIHm8UBSboZ4b2XrL9xz0B9904AKtlAJGxpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl
                          rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
        Validity
            Not Before: Dec 22 23:59:57 2025 GMT
            Not After : Dec 29 23:59:57 2025 GMT
        Subject: CN=6949db7e-3195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:aa:13:08:83:03:8a:84:d4:e9:2f:f4:35:
                    ff:d8:1e:dc:49:f4:96:b4:68:0f:44:49:b6:27:31:
                    33:2a:56:cd:c8:21:8a:d3:49:a5:5e:c2:b6:ae:f9:
                    ae:5e:4f:40:c2:7e:b8:e4:35:63:88:92:1b:fe:8b:
                    8e:06:c0:02:46:3b:9d:ec:53:8e:35:8c:be:e5:38:
                    06:85:54:0c:25:74:66:a0:4d:0e:d8:c2:ae:7c:9c:
                    5e:f7:77:b5:b4:d7:c3:6c:38:3c:72:60:a8:19:e5:
                    6e:33:d7:6c:1a:02:ff:38:30:67:59:c6:91:4e:b8:
                    90:11:07:27:c4:4e:21:80:86:de:26:03:65:c6:95:
                    ac:85:35:46:62:73:7d:6e:b4:31:ac:ef:82:4c:f8:
                    36:22:14:67:20:76:4d:f4:be:30:a5:cd:74:f6:b2:
                    c3:c8:ba:21:54:27:79:1a:ab:81:37:ee:43:79:1f:
                    d9:57:f1:9a:1e:51:15:9d:51:20:30:ba:7f:e8:e6:
                    7b:a0:fc:04:1e:0a:0e:ad:42:95:50:8e:31:ec:d0:
                    02:63:6c:ff:b8:d7:94:ec:b6:14:eb:f2:56:f8:15:
                    69:27:bc:f9:c0:e7:29:18:1d:ce:f0:19:fd:21:e4:
                    e5:8c:4f:d6:77:88:7c:14:05:c8:6b:25:45:34:32:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:50:22:81:0B:D8:7C:8C:0C:27:A1:24:0D:44:D9:6B:DD:9B:13:A1
            X509v3 Authority Key Identifier:
                keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8c:f3:8d:52:e6:a6:9b:c1:a1:82:07:15:94:5a:98:56:ba:
         55:9e:9c:93:9a:73:9b:8f:1b:8e:27:32:b9:48:d0:3c:58:cc:
         87:85:5c:7f:65:0b:89:7c:52:54:15:4b:94:6c:1e:dd:b0:4f:
         d5:90:2e:9c:3e:9c:bc:69:06:8d:70:0f:f3:fa:58:77:46:00:
         f9:be:8e:e7:da:a2:c9:07:13:6e:6c:2a:15:ac:97:98:d8:5e:
         cc:33:03:e4:53:70:88:b6:34:d6:56:8d:b6:c2:a2:68:3b:2a:
         08:dd:b3:84:cd:4e:1a:e6:c4:43:5b:25:f3:b7:6f:83:12:34:
         ba:79:a3:cf:82:f4:18:a1:49:4b:f7:42:cb:24:50:b7:63:8f:
         2e:23:6d:e1:5a:b5:81:ae:01:57:e0:ac:40:11:c7:53:9d:dc:
         77:e8:fb:1e:05:d8:0b:28:d4:b1:49:a9:c8:a9:87:54:76:c3:
         6c:f2:57:b3:76:6a:e8:f8:44:9b:65:32:ca:ed:62:09:66:16:
         5a:49:72:5d:bf:cf:e8:74:7b:a5:07:cc:bf:53:b3:5c:ea:be:
         b4:0e:5d:4a:01:32:cb:bf:cf:04:d7:f2:c7:c6:68:4f:6f:d9:
         3e:64:4d:75:b3:13:82:9f:17:ec:af:d4:22:e3:31:c8:89:80:
         a5:27:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:54 2025 by rpki-client