This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
File:                     f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json)
Hash identifier:          dkVljk/mDE7ritapFLSwjIrnc9qbUVAo/aL9MqK3GmU=
Subject key identifier:   AC:E1:50:A5:B7:00:C1:7D:12:97:2E:67:8A:38:66:8B:1B:1B:AD:5B
Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
Certificate issuer:       /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Certificate serial:       0376
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
Manifest number:          0354
Signing time:             Tue 23 Dec 2025 00:05:18 +0000
Manifest this update:     Tue 23 Dec 2025 00:05:18 +0000
Manifest next update:     Tue 30 Dec 2025 00:05:18 +0000
Files and hashes:         1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: 6ooInICVfYBpP5QIZNKNAPBsn6fMv8vxgw64fkGMknQ=)
                          2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: kGDq/OHD1l2DSUn6HN/fSE9IJdA1C+dG59/8ecfdLJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl
                          rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
        Validity
            Not Before: Dec 23 00:05:18 2025 GMT
            Not After : Dec 30 00:05:18 2025 GMT
        Subject: CN=6949dcbe-ca06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:48:87:76:4d:8c:b8:e2:2c:e1:5d:fc:1e:
                    89:23:e6:5b:e9:f3:f5:fc:5a:27:7c:ee:24:35:cd:
                    72:13:79:f7:99:71:39:4a:79:7d:de:fa:1a:50:18:
                    f1:6e:fc:00:2e:f0:c5:56:4e:f1:cb:81:11:7c:82:
                    b3:29:07:6d:b1:4d:91:cb:52:4f:65:b5:66:f7:ff:
                    63:5d:7b:68:7c:7a:0b:93:88:93:89:ff:27:fb:d0:
                    bd:94:4e:d3:a5:71:73:27:e1:54:00:df:af:c2:f9:
                    6b:a9:5b:ef:92:8d:92:be:fc:35:e8:b2:65:f4:de:
                    39:84:87:60:81:52:8a:3d:c6:07:c5:77:93:8a:81:
                    fa:fc:2c:1a:45:1f:7c:92:ca:27:00:f9:09:e2:5c:
                    5e:6c:e8:78:d3:28:d4:60:32:06:39:95:e4:01:f1:
                    4c:ef:b4:db:25:a9:1c:be:d5:24:87:ed:8a:35:1f:
                    f7:0c:fa:02:ca:ae:05:4c:1e:9d:4a:fd:0b:35:5e:
                    0e:2a:ab:14:10:ed:2a:6d:31:fc:1f:0e:03:81:c2:
                    6b:42:15:1f:3d:e1:8d:b3:ff:f2:4a:29:a5:f8:60:
                    3f:7d:69:6f:b3:b7:3e:9a:db:23:86:e3:c8:6f:2a:
                    47:af:eb:93:55:92:d2:59:88:c3:b8:2e:64:91:ff:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E1:50:A5:B7:00:C1:7D:12:97:2E:67:8A:38:66:8B:1B:1B:AD:5B
            X509v3 Authority Key Identifier:
                keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:f1:ca:ee:89:6e:a9:60:55:3c:be:96:37:69:7b:a6:e5:
         95:8b:a4:89:52:2e:25:54:e2:2e:7a:4c:a3:b4:7a:55:11:e6:
         68:ed:c6:b8:df:81:88:20:5e:5e:0e:35:0a:ff:bf:e3:b6:7c:
         af:c5:b0:b7:1b:69:ea:38:70:63:44:7a:7e:79:90:72:0d:55:
         0a:d7:01:20:a9:08:c5:70:56:b4:aa:73:97:2a:43:50:a2:42:
         2b:7d:2d:97:10:f0:58:ba:29:0d:62:fa:f0:0b:58:4f:f0:2d:
         21:57:1b:37:40:88:87:0e:b9:60:a7:7e:87:9d:3e:7d:d2:ae:
         fd:10:47:d3:37:75:0f:d1:60:7b:0d:c0:df:9c:42:1d:8e:52:
         ab:8e:0e:69:f1:1a:5c:96:7e:ec:4d:dc:b1:a3:90:d0:c1:5d:
         0e:e0:55:da:be:a0:b7:32:08:87:cd:33:6a:bc:12:0c:08:de:
         0e:cc:fc:ef:92:48:6b:ca:db:f9:01:0a:3a:fb:15:c0:de:2b:
         12:3a:ee:fe:05:10:35:f5:96:bc:83:e0:b1:60:77:20:d6:66:
         2f:c6:a3:64:c8:de:e0:1f:ec:35:c4:19:83:67:bb:c1:1c:a3:
         b5:c4:21:6c:61:23:c6:64:98:ec:b3:63:d8:83:a4:53:b7:fa:
         db:64:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:30 2025 by rpki-client