This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
File:                     7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json)
Hash identifier:          tQNjKMmjQT68CZsIl9WQcbsUD8AtGG7A83jONG7bcqQ=
Subject key identifier:   F2:4F:7B:B4:43:A6:23:6E:59:54:18:A8:BE:3A:E7:C0:A8:58:55:B2
Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
Certificate issuer:       /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Certificate serial:       0AF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
Manifest number:          0AEE
Signing time:             Wed 24 Dec 2025 18:55:38 +0000
Manifest this update:     Wed 24 Dec 2025 18:55:37 +0000
Manifest next update:     Wed 31 Dec 2025 18:55:37 +0000
Files and hashes:         1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: fLXXGCoqq2Uy3h684alTfPsw8lfzRZz+bzx2DKSAD/E=)
                          2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2804 (0xaf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
        Validity
            Not Before: Dec 24 18:55:37 2025 GMT
            Not After : Dec 31 18:55:37 2025 GMT
        Subject: CN=694c372a-44c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:e6:13:f2:a5:33:09:9a:2f:49:d8:83:cd:
                    ea:ec:db:4f:a4:b9:75:b5:16:ea:55:fa:c5:e5:f7:
                    19:1c:31:3f:c2:a2:ee:1e:0d:fb:dc:da:39:fd:31:
                    90:81:ff:50:66:a1:02:53:84:13:18:a7:88:47:8d:
                    30:c1:15:c8:12:06:95:6c:af:f5:ce:ec:37:70:7f:
                    d4:31:e3:f2:64:cc:f1:68:2c:f4:fe:1c:96:ed:ab:
                    0f:d5:5e:2d:63:f6:e4:45:55:a3:b9:3d:79:5f:d3:
                    97:18:cb:a8:36:1c:85:61:5e:49:52:9a:ed:47:55:
                    76:8c:c7:ed:c0:9f:89:14:c3:de:a5:ef:e3:49:9c:
                    b9:47:47:86:46:2c:b4:55:1d:1c:6b:f0:f9:93:b3:
                    44:d8:a6:23:00:11:ff:dd:4a:e2:f1:e1:7f:d5:16:
                    ee:e9:99:80:07:87:bc:0b:8d:96:bb:81:fc:06:52:
                    9b:a0:0b:78:13:cf:9a:8a:87:31:fa:81:aa:9d:b3:
                    bb:a7:4a:a8:4b:7e:9b:1c:a7:41:4f:45:9d:82:7d:
                    5e:44:0e:9b:c6:08:1d:f4:91:ce:8f:3c:e8:63:92:
                    af:d8:8e:a8:42:8a:f2:0b:8f:c9:66:ba:a5:c8:17:
                    de:52:2b:cc:7b:6f:59:da:e1:44:80:00:36:4e:6f:
                    fd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4F:7B:B4:43:A6:23:6E:59:54:18:A8:BE:3A:E7:C0:A8:58:55:B2
            X509v3 Authority Key Identifier:
                keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:59:64:68:dd:9f:ea:13:0a:33:cd:09:f4:67:e9:b2:5d:9b:
         8b:2e:e4:08:77:5a:67:4e:69:e5:f4:a0:3c:7c:b3:16:51:68:
         17:bb:e4:cf:0f:46:08:42:85:5c:cb:64:18:91:30:09:0c:e5:
         22:82:22:c6:23:56:ae:52:ea:b7:02:6a:90:ec:dc:f9:d1:8e:
         80:e3:31:ae:c6:82:a6:45:c9:c5:d5:21:34:e7:a6:e2:73:8a:
         88:7d:08:e7:4f:77:2b:67:28:ec:e7:39:31:5f:e4:c8:85:be:
         0c:ac:67:24:e8:23:7e:a4:e2:00:b2:66:67:c0:6e:55:6e:6e:
         00:0f:b2:43:04:a6:1b:c4:63:93:58:34:5b:bf:fc:f5:7f:4a:
         7a:fb:17:a6:ef:30:ef:4c:08:83:5f:42:ff:6c:52:e9:45:97:
         5e:00:08:0b:d1:ff:3f:20:79:b9:24:71:c7:bb:fd:b4:2f:4c:
         12:42:86:5a:db:7e:88:9f:19:90:b4:4b:ca:d2:36:cf:47:20:
         af:83:42:b5:6d:37:c2:e8:d7:45:71:aa:d1:14:3f:5a:ca:4b:
         2a:91:f9:78:3d:20:fd:db:7a:2a:70:4e:98:06:55:54:92:22:
         e7:9b:0b:a5:88:ee:74:52:d5:5a:4e:75:42:14:8e:a3:17:4b:
         b4:e4:73:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:24:00 2025 by rpki-client