This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft
File:                     7LIDs03q4KEdAVCjDvK0opkdepg.mft (raw, json)
Hash identifier:          cHYPTajnrEvnAmRJPBAVF96m6KcTNbK4MmOviJ5j3WA=
Subject key identifier:   D1:CD:75:E5:FC:DE:7E:64:14:29:F7:09:1F:D2:F6:78:75:97:49:BA
Authority key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98
Certificate issuer:       /CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98
Certificate serial:       1A31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft
Manifest number:          1A31
Signing time:             Mon 22 Dec 2025 16:07:46 +0000
Manifest this update:     Mon 22 Dec 2025 16:07:46 +0000
Manifest next update:     Mon 29 Dec 2025 16:07:46 +0000
Files and hashes:         1: 7LIDs03q4KEdAVCjDvK0opkdepg.crl (hash: FNJ4hDrSu/yn01vkxGyvw5opDqpgM4nSVutCuI7aqOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl
                          rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6705 (0x1a31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189529, serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98
        Validity
            Not Before: Dec 22 16:07:46 2025 GMT
            Not After : Dec 29 16:07:46 2025 GMT
        Subject: CN=69496cd2-fa12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:61:44:18:63:87:d8:46:f3:70:67:19:bd:
                    c3:3a:0d:7e:56:2c:c2:71:99:ff:48:74:18:52:dc:
                    45:8c:e2:ee:cb:e8:31:b2:c1:cb:4e:da:12:91:3f:
                    38:04:06:ea:22:68:64:15:97:30:05:d5:7a:59:66:
                    a9:3f:60:3c:e7:17:28:ee:43:d3:9c:8f:fb:6d:e5:
                    ea:3f:74:88:25:9d:1e:c8:a3:7b:65:81:b5:2b:cb:
                    ed:7f:b9:0e:23:b5:fd:aa:aa:c3:5e:f2:6b:d1:c4:
                    fa:8a:86:92:e6:ab:cd:30:7e:d9:0d:c2:1b:c3:34:
                    8c:2f:77:eb:17:fd:4a:7e:01:48:96:ea:ec:a1:f0:
                    f7:01:95:0a:02:05:1d:6e:2b:9c:f4:87:eb:c8:cb:
                    0d:56:1c:8b:51:22:a6:10:84:b0:1d:2b:15:6c:f3:
                    f6:f1:03:f4:1a:98:af:ea:94:e0:d3:e9:70:e6:ba:
                    0a:b5:86:2c:23:f7:0a:18:93:51:f2:bb:be:94:4c:
                    21:01:df:b7:4c:d6:35:4d:fc:0c:8d:0e:50:94:c4:
                    26:7e:4a:57:18:e8:2c:82:f5:0f:f9:78:05:d0:f9:
                    54:53:63:39:0e:f6:5d:eb:6f:19:64:9b:8b:29:bd:
                    12:20:c6:8a:64:41:18:41:0f:87:88:71:09:36:02:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CD:75:E5:FC:DE:7E:64:14:29:F7:09:1F:D2:F6:78:75:97:49:BA
            X509v3 Authority Key Identifier:
                keyid:EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ca:65:b4:c5:29:e2:df:d5:17:88:24:7c:1f:c8:d7:ca:a2:
         18:13:fb:1f:4e:1b:9b:d8:91:7f:55:dd:ce:1d:f7:1a:c5:f6:
         7e:38:7b:7d:9f:eb:77:e0:e5:a3:d4:ac:1b:ad:39:30:ae:eb:
         fc:a2:79:10:85:4c:9a:99:31:31:60:8f:55:95:95:33:84:35:
         2d:c6:09:0b:f4:23:74:b7:57:26:48:c0:2b:d0:b4:71:af:5c:
         e6:78:fe:ae:2c:f5:d0:7d:68:e8:77:d5:e4:39:b1:c3:ec:dd:
         33:92:71:17:42:2e:cd:49:a0:13:20:83:79:d3:c8:bf:98:4d:
         23:f9:d3:e5:7c:1e:f2:49:d4:f1:29:90:55:58:dd:80:4a:d2:
         20:89:c3:30:5e:65:08:e4:ff:fc:24:9a:27:3e:b6:63:0a:bb:
         98:4a:8b:c4:ec:2d:bc:1a:45:55:d3:8e:70:7d:8d:c0:72:bb:
         d6:09:cd:56:3a:bd:2b:5b:3b:70:50:99:6b:20:aa:5f:95:34:
         e4:5f:26:d8:b6:1c:50:95:ec:e1:e9:c8:d6:03:c5:ca:fe:76:
         41:c2:df:ec:dc:88:a8:75:93:d6:1e:ec:1a:87:ad:7e:ac:4f:
         ae:1d:d0:7a:bd:01:7b:0f:06:bc:30:cf:2c:68:42:e7:dc:23:
         ed:0e:57:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:29 2025 by rpki-client