This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
File:                     u7dF5o0mJdldbQcyKFARSry-_wQ.mft (raw, json)
Hash identifier:          CNlD+VkYrnrCbGVRZlvZhOw4Q8tOpl/Wgs2Tq1RcIZ0=
Subject key identifier:   9A:3C:52:E8:8B:E8:5C:4B:69:71:F1:A8:E8:F8:50:34:F7:B7:35:9D
Authority key identifier: BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04
Certificate issuer:       /CN=A9168F50/serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
Manifest number:          06
Signing time:             Wed 03 Dec 2025 06:15:19 +0000
Manifest this update:     Wed 03 Dec 2025 06:15:18 +0000
Manifest next update:     Wed 10 Dec 2025 06:15:18 +0000
Files and hashes:         1: u7dF5o0mJdldbQcyKFARSry-_wQ.crl (hash: TZZxQjnR780koOw7eNVLZrXOtYtf7JCCmMBZVJfWMvA=)
                          2: 8FD832B4C9B311F0BC2AD366C4F9AE02.roa (hash: oljPiy+Pa+471195QZXqo85lgk4Gdg8umHtl0zD2LZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl
                          rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168F50, serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
        Validity
            Not Before: Dec  3 06:15:18 2025 GMT
            Not After : Dec 10 06:15:18 2025 GMT
        Subject: CN=692fd576-694b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:63:c5:5b:e0:1e:d9:20:ca:25:c6:fd:8b:
                    de:1b:11:81:d3:d6:a1:02:11:d4:2a:4d:8a:fc:c1:
                    8e:dc:ce:5f:83:45:af:82:89:39:c9:6d:34:e6:5d:
                    f8:ee:af:17:fe:b2:93:fa:8e:5b:35:29:49:69:84:
                    1a:a3:e4:e5:e7:7c:60:ec:d7:54:ea:49:f5:93:51:
                    f1:4b:56:98:5e:04:7b:4e:80:66:f6:69:8e:12:24:
                    d4:7f:fc:7a:62:b0:ce:ac:2d:16:34:65:39:17:c4:
                    20:8b:ac:24:31:80:23:50:e0:46:d3:5f:ae:0c:19:
                    98:ed:84:8c:96:e6:bb:fe:71:52:04:cb:91:c1:e6:
                    e3:f1:79:59:c4:3b:cb:0e:db:9f:9f:ee:9b:2a:7c:
                    03:a1:84:25:21:a8:13:f2:04:21:41:d4:89:3a:f8:
                    24:d4:16:d4:23:99:78:d8:a4:ad:a6:69:5f:66:f8:
                    27:c6:7c:d7:fc:e6:90:6a:ef:ad:1a:6e:5e:15:55:
                    d0:a1:4e:54:af:13:42:26:f4:d6:7f:f1:75:e9:d9:
                    0f:19:b9:77:1e:d1:a8:1e:ac:5d:b0:ce:ee:d9:ca:
                    05:14:ed:55:1c:55:8e:a9:78:af:22:b0:40:86:fa:
                    3a:66:82:00:02:50:e3:b6:7f:9b:ac:e5:59:c5:54:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3C:52:E8:8B:E8:5C:4B:69:71:F1:A8:E8:F8:50:34:F7:B7:35:9D
            X509v3 Authority Key Identifier:
                keyid:BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9e:44:bf:05:77:de:d7:6c:26:92:a4:85:34:bf:8b:69:b7:
         27:f4:3b:cd:50:75:fc:8b:a8:d4:e2:ac:90:6a:f2:9a:d8:e4:
         37:f2:b1:13:12:3a:32:12:df:c4:98:9d:bd:ad:35:8d:5e:87:
         5b:e2:61:d9:03:26:60:80:fd:70:c2:55:48:7a:80:27:5c:1b:
         0b:52:4b:02:ae:ba:23:ac:fc:51:75:5f:36:20:32:3c:8a:31:
         08:11:75:f4:76:0c:df:d1:01:90:4d:70:00:03:0b:10:3d:95:
         a9:f9:6a:8b:3d:af:92:57:61:32:77:a5:97:91:22:ed:84:16:
         fc:88:55:77:a1:7d:0c:2d:c9:f2:c5:86:84:e4:21:25:6d:3a:
         f0:82:d7:6f:a0:7e:dd:89:fe:b1:3f:56:a6:ab:18:82:27:a1:
         e3:6f:44:f0:bc:a3:92:60:fc:b6:76:8b:d3:21:d5:da:b0:7a:
         c1:01:d7:f0:ce:da:1b:17:f3:d5:c5:a3:74:26:e3:fd:2a:7e:
         20:98:07:d3:29:60:7a:bc:71:93:d6:b6:23:70:70:b3:13:83:
         02:5e:02:85:61:47:53:10:19:2a:a1:c5:d6:d0:ca:be:a7:37:
         e6:e3:4d:3a:3f:76:e7:5e:18:46:4c:44:2e:35:93:2b:07:5c:
         a9:8b:a9:dd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
OEY1MDExMC8GA1UEBRMoQkJCNzQ1RTY4RDI2MjVEOTVENkQwNzMyMjg1MDExNEFC
Q0JFRkYwNDAeFw0yNTEyMDMwNjE1MThaFw0yNTEyMTAwNjE1MThaMBgxFjAUBgNV
BAMTDTY5MmZkNTc2LTY5NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDM5mPFW+Ae2SDKJcb9i94bEYHT1qECEdQqTYr8wY7czl+DRa+CiTnJbTTmXfju
rxf+spP6jls1KUlphBqj5OXnfGDs11TqSfWTUfFLVpheBHtOgGb2aY4SJNR//Hpi
sM6sLRY0ZTkXxCCLrCQxgCNQ4EbTX64MGZjthIyW5rv+cVIEy5HB5uPxeVnEO8sO
25+f7psqfAOhhCUhqBPyBCFB1Ik6+CTUFtQjmXjYpK2maV9m+CfGfNf85pBq760a
bl4VVdChTlSvE0Im9NZ/8XXp2Q8ZuXce0agerF2wzu7ZygUU7VUcVY6peK8isECG
+jpmggACUOO2f5us5VnFVD9/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmjxS6Ivo
XEtpcfGo6PhQNPe3NZ0wHwYDVR0jBBgwFoAUu7dF5o0mJdldbQcyKFARSry+/wQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RjUwLzBDRUREMUNFQzlC
MzExRjA5QjM0RkM3OEM0RjlBRTAyL3U3ZEY1bzBtSmRsZGJRY3lLRkFSU3J5LV93
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdTdkRjVvMG1KZGxkYlFjeUtGQVJTcnktX3dRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4
RjUwLzBDRUREMUNFQzlCMzExRjA5QjM0RkM3OEM0RjlBRTAyL3U3ZEY1bzBtSmRs
ZGJRY3lLRkFSU3J5LV93US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAB6eRL8Fd97XbCaSpIU0v4tptyf0O81QdfyLqNTirJBq8prY5DfysRMS
OjIS38SYnb2tNY1eh1viYdkDJmCA/XDCVUh6gCdcGwtSSwKuuiOs/FF1XzYgMjyK
MQgRdfR2DN/RAZBNcAADCxA9lan5aos9r5JXYTJ3pZeRIu2EFvyIVXehfQwtyfLF
hoTkISVtOvCC12+gft2J/rE/VqarGIInoeNvRPC8o5Jg/LZ2i9Mh1dqwesEB1/DO
2hsX89XFo3Qm4/0qfiCYB9MpYHq8cZPWtiNwcLMTgwJeAoVhR1MQGSqhxdbQyr6n
N+bjTTo/dudeGEZMRC41kysHXKmLqd0=
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:38:25 2025 by rpki-client