This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft
File:                     L7B78TYUrVoZNQr8da-wVMhrr60.mft (raw, json)
Hash identifier:          YOY2JRExu9TB4aw0L9csdN1SUtQnXmycwJwPpUr9zoE=
Subject key identifier:   26:1E:6D:B5:87:94:93:27:7C:34:DD:6A:BD:80:7F:23:32:29:A6:23
Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD
Certificate issuer:       /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD
Certificate serial:       0234
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft
Manifest number:          022F
Signing time:             Tue 23 Dec 2025 01:03:11 +0000
Manifest this update:     Tue 23 Dec 2025 01:03:11 +0000
Manifest next update:     Tue 30 Dec 2025 01:03:11 +0000
Files and hashes:         1: L7B78TYUrVoZNQr8da-wVMhrr60.crl (hash: B8zHUWVxHAVh8Xf0AaOAl+Q2030HCOJpIf97IyPbSG4=)
                          2: 3A9B909286BE11ED93DB0765C4F9AE02.roa (hash: GXQfXFZ8jth0bdOi6DqHjN+LeeVGl2tXIJaBhAaaOn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl
                          rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF6A, serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD
        Validity
            Not Before: Dec 23 01:03:11 2025 GMT
            Not After : Dec 30 01:03:11 2025 GMT
        Subject: CN=6949ea4f-12d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:e4:ee:d3:db:d9:46:e0:f5:e5:3a:56:b2:
                    0f:e6:f5:8a:f7:68:f0:1c:40:77:78:b6:94:ee:87:
                    ac:44:c6:a5:92:70:62:c3:6d:3d:7a:9f:db:6e:e3:
                    e3:2c:f2:7d:a8:b9:cc:30:6d:92:84:7a:0b:56:40:
                    c1:48:4d:cf:d8:24:2f:33:b1:eb:49:12:b1:cc:13:
                    7f:6e:38:b1:0d:53:5e:c5:e6:e1:72:5a:82:a1:f2:
                    39:c6:1e:ee:f2:0f:45:a3:16:bd:32:41:6f:5e:7c:
                    01:6f:62:78:7f:a8:04:f2:aa:e8:3b:ba:9d:ca:19:
                    85:08:e8:00:32:bf:0d:8b:34:90:f0:e5:06:64:0f:
                    af:08:27:96:be:fb:71:8b:a3:09:d3:5d:f0:24:78:
                    04:8e:16:74:e4:53:f2:e8:46:33:9b:26:52:ad:df:
                    ef:cd:f5:81:b0:a7:5f:57:98:cd:53:ee:23:64:ae:
                    23:8e:a7:61:74:8f:78:ed:08:b7:8e:b0:f4:fc:90:
                    ff:80:8c:f6:34:6a:74:dc:c0:2c:9e:08:18:0c:cb:
                    46:ba:7a:fe:b0:81:1d:59:b1:bf:ca:86:a8:ef:0c:
                    ca:82:07:2f:c8:2f:dd:27:14:7a:50:b3:e1:e5:38:
                    ee:13:ca:6c:71:3d:f9:de:c7:4c:d5:19:3c:6d:2d:
                    4d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1E:6D:B5:87:94:93:27:7C:34:DD:6A:BD:80:7F:23:32:29:A6:23
            X509v3 Authority Key Identifier:
                keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9a:49:a3:68:a1:e0:ea:0d:9f:a3:c5:70:2d:5c:00:98:28:
         c6:d7:7a:ea:68:e7:1e:0a:92:2c:a6:93:39:13:e0:03:0c:7f:
         59:a0:de:dc:cc:0a:23:1e:54:5e:58:f2:9c:e5:3d:c2:1e:11:
         ee:c1:61:a3:ad:76:d3:c4:7e:06:2c:ec:43:a8:9e:37:cc:ed:
         cb:de:ca:61:ae:8d:4b:31:f4:6c:a6:21:a6:59:21:e1:64:bc:
         aa:85:a1:b4:a1:b8:41:6d:c8:2a:eb:0e:f9:55:67:b1:9f:e3:
         4a:02:57:14:13:89:39:32:9a:12:0c:68:25:ac:ba:e0:7a:98:
         02:1f:7b:bb:5c:87:87:37:98:22:4d:40:ee:3a:e5:e4:2a:3a:
         a4:e0:49:35:92:e8:b3:94:f6:15:e7:d0:12:0f:99:53:3b:b9:
         91:d8:31:79:3c:19:b5:40:1c:29:6f:86:23:ce:3f:8e:75:12:
         8e:eb:86:f9:c3:17:ea:b1:23:61:d5:ad:e0:14:d1:34:ac:fc:
         7b:f8:9c:e2:f1:c1:d5:ba:1b:46:75:94:86:2a:f8:8e:11:32:
         04:d3:cb:bc:1f:70:38:c3:fc:20:44:42:12:86:cb:48:91:74:
         2c:09:0e:01:45:04:d4:24:90:d4:61:86:76:e6:dc:14:8b:42:
         9c:4d:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:42 2025 by rpki-client