This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
File:                     E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json)
Hash identifier:          ggJ/DfeIC06iBcVx9avAfHOjz//x8L/dMtnALPz4luM=
Subject key identifier:   29:88:DC:1C:68:90:84:F9:F8:59:AB:22:B5:65:5E:82:D6:4F:8B:A6
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Certificate issuer:       /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial:       04E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
Manifest number:          04DA
Signing time:             Sat 20 Dec 2025 23:03:30 +0000
Manifest this update:     Sat 20 Dec 2025 23:03:29 +0000
Manifest next update:     Sat 27 Dec 2025 23:03:29 +0000
Files and hashes:         1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: GTMmiJjA7IP+2RBn2xb7baAXr14qctcp+2ZG9RvO8ME=)
                          2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: sstINZbMJgCSsx+wfPe1nd2W79d/zw3rR1pM3sZFuH8=)
                          3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: SVdQW6VFhMPakkvyBDzdmVeaSxb6sTFpfoyjqJiJnDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
        Validity
            Not Before: Dec 20 23:03:29 2025 GMT
            Not After : Dec 27 23:03:29 2025 GMT
        Subject: CN=69472b42-d519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:3e:af:c9:4e:1b:1d:f1:d9:92:14:fc:09:
                    76:c8:d1:0d:ef:e6:0c:be:b7:44:4a:67:73:d4:86:
                    e5:f8:e5:6d:65:6f:49:4a:fc:e8:f1:67:6c:c9:a5:
                    91:9a:68:94:34:6e:6b:81:d4:a1:43:1a:2f:44:6a:
                    98:a9:d8:c3:da:a9:79:d5:18:4e:0e:44:c2:c4:7b:
                    1d:81:77:26:7c:d5:34:28:02:55:81:cc:34:64:7b:
                    d6:82:c1:31:25:02:40:41:45:61:45:33:a0:2a:2b:
                    71:4b:50:cd:f9:3a:5c:2e:60:bc:9f:42:96:7d:e2:
                    08:58:e9:b3:93:55:09:84:d7:42:3c:21:28:ab:44:
                    f0:64:ef:41:49:7c:31:d6:20:90:40:40:a4:a6:b7:
                    75:cd:a8:f4:29:ad:18:e1:28:eb:9f:56:f7:58:bc:
                    c3:ba:e9:8a:e3:bb:94:9e:70:ca:73:7b:43:62:9f:
                    af:95:ad:f6:ee:61:c8:20:6d:ff:b3:b5:ea:a7:1e:
                    bc:84:3a:e2:05:8b:e3:de:a3:46:aa:3a:d0:cb:70:
                    e6:f7:85:9f:5d:95:a9:b8:3c:84:f8:2e:d4:51:c9:
                    92:9c:b3:33:47:72:f1:b1:0c:d6:19:22:32:7a:16:
                    22:01:cc:15:40:fb:b6:0c:08:02:3a:74:d0:92:cb:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:DC:1C:68:90:84:F9:F8:59:AB:22:B5:65:5E:82:D6:4F:8B:A6
            X509v3 Authority Key Identifier:
                keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7d:b7:e7:fc:0f:a9:98:35:82:cf:69:d1:17:7b:92:26:9b:
         77:2a:0c:e9:a7:9b:7f:fe:52:d2:a2:31:82:ac:89:11:8a:9b:
         ff:df:40:4c:71:60:7c:c0:3c:b2:26:bb:cf:bf:33:93:ff:02:
         29:e8:98:59:e5:6d:6e:01:10:2c:3b:e8:52:08:d8:fb:41:9b:
         08:24:05:d3:f9:ab:3a:e1:c4:b7:e7:d3:b1:4c:51:22:59:c2:
         0f:72:dd:ef:56:fd:e8:0c:43:68:01:be:21:b4:52:95:b3:60:
         e8:32:d4:60:da:d2:0f:8b:2e:b5:1a:e9:52:c4:4c:ab:98:92:
         41:8e:74:9e:bb:94:f6:4f:09:ce:d5:d9:a5:75:a3:34:82:91:
         80:b3:08:81:a0:8c:ca:01:5b:de:2c:5e:2f:4b:3f:06:55:76:
         6f:80:e4:e4:28:88:c6:6d:6d:5a:51:b7:f6:5e:54:f1:00:76:
         8c:3f:c2:19:71:81:e0:eb:07:57:d8:04:6d:d2:d5:fb:6a:fa:
         2e:05:34:99:2e:09:1c:ab:f8:69:97:b3:c6:12:1c:6c:f5:92:
         95:32:db:94:ba:af:ef:76:c5:08:d1:7d:6f:a1:a2:33:11:01:
         28:0b:ea:a2:e4:42:fe:6a:fc:4e:3b:ec:28:21:60:99:c4:e2:
         12:21:d6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:48:58 2025 by rpki-client