This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
File:                     _7jr91F1lPQetjZXPZajVwaXSbk.mft (raw, json)
Hash identifier:          qExIrDCoOzurJ5fCJiuRlBvxxBtRUWTjympkFtiEL30=
Subject key identifier:   01:D5:A4:AE:2D:26:07:01:F1:A3:66:C0:A7:09:A2:31:6A:C0:F9:D9
Authority key identifier: FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
Certificate issuer:       /CN=A9191136/serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
Manifest number:          24
Signing time:             Wed 03 Dec 2025 05:54:41 +0000
Manifest this update:     Wed 03 Dec 2025 05:54:40 +0000
Manifest next update:     Wed 10 Dec 2025 05:54:40 +0000
Files and hashes:         1: _7jr91F1lPQetjZXPZajVwaXSbk.crl (hash: hcvsqPsjaKNQo5MtZpmpPKKGJRidMiAD1PpGhs0jJLg=)
                          2: 97B512889AA911F08374FE83C4F9AE02.roa (hash: uH6Z9g6mupXrJXF3TsZUP4n4WGUuKWh4WvUq+eRHejo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl
                          rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191136, serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
        Validity
            Not Before: Dec  3 05:54:40 2025 GMT
            Not After : Dec 10 05:54:40 2025 GMT
        Subject: CN=692fd0a1-9025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:0c:a2:4a:c0:f5:98:b3:67:d5:d6:0c:90:
                    62:dc:9e:7f:8d:79:c8:46:6f:61:67:f8:57:d5:f5:
                    2e:47:aa:22:7d:d8:28:9b:f4:67:04:1e:e8:08:c2:
                    da:cd:22:ce:8d:03:48:53:44:32:06:a5:f3:d5:53:
                    ac:7b:5b:62:f2:17:2d:1e:01:28:38:e5:5e:34:6c:
                    8b:20:1c:3d:06:30:11:e6:0e:d0:65:21:a7:e2:49:
                    3e:08:61:20:4b:1a:f1:cd:fd:33:ba:28:cf:23:68:
                    29:f0:72:cb:21:0e:44:a9:34:5a:b6:5a:2c:3b:89:
                    d9:6c:38:ee:58:de:6d:85:fc:8e:3b:bf:08:46:14:
                    ee:8f:0f:00:95:26:65:6e:fe:2f:51:de:af:aa:e9:
                    88:0d:52:8d:e1:03:b5:96:6a:49:57:a5:6c:5f:6b:
                    24:7d:9f:96:d3:72:3b:dc:c4:cf:e8:73:52:36:da:
                    7d:52:bd:50:75:fe:84:e0:f2:aa:97:85:97:9f:fa:
                    f0:fd:0b:bb:e2:fc:2d:62:91:cd:6e:c3:b6:3b:85:
                    1d:ac:cb:68:88:9f:91:13:27:1d:ff:3e:4e:32:1b:
                    10:26:d9:45:25:ee:46:b5:33:e6:bb:f6:7c:bd:15:
                    b2:ef:52:58:06:a7:69:51:db:8b:71:5d:5f:4e:a9:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D5:A4:AE:2D:26:07:01:F1:A3:66:C0:A7:09:A2:31:6A:C0:F9:D9
            X509v3 Authority Key Identifier:
                keyid:FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:fe:fc:5e:b3:f1:50:58:2e:dc:4c:83:f8:c5:6b:ad:de:5a:
         b7:bb:19:ac:45:d8:87:2a:94:3c:53:8d:ce:67:7f:bc:df:12:
         dc:1a:f3:75:5e:83:a0:62:e5:81:fd:28:d0:33:5f:b9:16:69:
         cc:38:42:6c:de:c0:8b:4f:df:1d:94:48:53:b8:9a:09:32:cb:
         3d:4b:0c:24:b2:1a:50:5e:0d:ad:c2:2a:31:94:48:b4:52:f1:
         9f:57:e8:6e:04:4d:d4:b8:32:0f:06:57:1e:08:fe:77:66:3d:
         84:c7:40:23:2f:78:80:ea:e2:22:bb:d1:df:2f:85:63:cd:4e:
         ac:35:7a:96:aa:b9:a8:ea:c5:f0:03:05:2f:07:da:13:0d:6f:
         3e:09:0c:d5:f6:eb:f5:10:59:39:1a:b6:c6:30:dc:04:97:32:
         08:15:ef:78:5c:45:3b:a1:e6:cf:ba:59:15:64:dd:42:dd:08:
         99:ef:2b:d3:f6:6e:35:ad:6f:d5:59:bb:a1:8a:56:a3:75:41:
         86:34:d5:e1:2c:a1:76:fb:3b:1b:5e:65:8d:f8:bc:9c:08:62:
         52:b1:2e:a4:0c:f3:cc:23:3b:0f:94:44:b1:31:2a:e8:56:8b:
         61:c7:5a:84:37:25:4e:9a:e7:ca:aa:ba:da:0f:a4:54:8f:13:
         4f:ed:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:44 2025 by rpki-client