This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
File:                     78WCsqPLLBDooxZW548EvNW8UxA.mft (raw, json)
Hash identifier:          o/LEEYKMjiTS5okxhk3cBOAEnVTs+xEgDNHrxrtQXUQ=
Subject key identifier:   84:57:05:06:B3:F7:BB:C8:51:38:16:35:B4:C8:39:D3:AD:03:A3:C7
Authority key identifier: EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10
Certificate issuer:       /CN=A91D09A2/serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310
Certificate serial:       06BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
Manifest number:          06B6
Signing time:             Mon 22 Dec 2025 21:29:39 +0000
Manifest this update:     Mon 22 Dec 2025 21:29:39 +0000
Manifest next update:     Mon 29 Dec 2025 21:29:39 +0000
Files and hashes:         1: 78WCsqPLLBDooxZW548EvNW8UxA.crl (hash: IrQzqTRH+7d464m3R8wRMX7OMk43l+YdUMonvvZ//q8=)
                          2: 59AD29B88C6B11EBA286C569C4F9AE02.roa (hash: 7mKCoY5AEtshNQV8l9pmhY0mvA9jDUflCVQDRZpIa2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl
                          rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1727 (0x6bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09A2, serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310
        Validity
            Not Before: Dec 22 21:29:39 2025 GMT
            Not After : Dec 29 21:29:39 2025 GMT
        Subject: CN=6949b843-1b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7b:22:8f:eb:02:2b:af:cf:fa:98:86:dd:87:
                    a3:96:81:88:88:dd:7e:3f:e7:4d:fe:ec:0c:92:b4:
                    e4:b2:06:d7:19:09:0e:7c:d7:8f:35:5c:5a:97:33:
                    cb:43:60:ca:e0:99:10:53:0c:5f:ba:dd:d3:a4:c1:
                    9d:7b:01:36:ba:ea:2d:1b:5e:18:18:8a:36:bd:d5:
                    c5:2d:6a:7a:0e:5c:37:d2:94:ff:cc:40:9c:6b:cc:
                    8b:39:00:7d:81:b4:6c:d4:f2:38:c6:01:96:d3:a3:
                    75:86:68:6b:ee:99:39:d1:4a:12:36:fa:20:2d:72:
                    e5:1b:ba:95:82:58:ca:62:8f:f4:b1:86:5e:11:85:
                    0b:56:6b:dd:01:f5:53:fc:9f:de:09:ab:0d:ac:6a:
                    b6:ca:e2:c3:66:b4:3a:32:ae:ce:29:11:72:96:89:
                    2a:23:6e:ed:f4:20:bf:18:ac:3f:fe:8d:4e:70:12:
                    69:0e:49:35:2e:ae:b0:67:0b:e3:bf:84:08:bd:64:
                    a2:e7:c1:68:96:4b:60:a5:1d:02:f2:93:e1:9d:02:
                    43:2f:35:4c:41:ac:8f:a4:ea:22:c4:33:ed:59:a3:
                    98:74:0e:22:e3:69:dc:70:ea:32:03:96:6c:7a:8f:
                    47:94:c7:c6:36:3a:9d:72:32:3c:44:a2:b8:df:88:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:57:05:06:B3:F7:BB:C8:51:38:16:35:B4:C8:39:D3:AD:03:A3:C7
            X509v3 Authority Key Identifier:
                keyid:EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:5f:d8:b5:a1:5e:f0:6f:d9:d2:c4:28:6a:2f:6c:5c:1f:
         9d:83:7a:dc:bf:ff:bb:a5:09:01:47:4f:e7:36:cb:f8:72:2b:
         df:90:c6:aa:7e:a4:cd:e1:7e:57:81:9e:69:ab:86:e8:dd:5d:
         cd:6c:57:ab:c0:25:ae:52:8a:6b:1a:03:87:ad:f8:a3:e6:ea:
         5f:02:07:b5:a2:c8:51:8b:06:aa:aa:a0:dc:b6:7b:df:f7:0c:
         6d:6e:8e:da:a6:80:d6:35:be:af:b3:2b:76:38:fe:81:35:60:
         e6:91:4a:2f:03:92:c3:08:e1:f8:4f:30:ae:21:1d:f3:ff:02:
         f2:cf:ee:6b:92:e3:69:75:70:1f:98:48:64:2b:6f:84:32:38:
         6d:0f:0b:a6:44:b3:e6:f0:f7:59:9a:3a:84:47:2a:b2:17:39:
         aa:93:44:d4:94:f9:ef:29:c5:4c:67:d6:88:73:29:48:fb:bc:
         38:af:7f:11:d7:45:79:1c:03:02:7e:44:fa:2f:fb:47:5d:ea:
         75:02:e2:d6:7a:cd:7e:16:a4:4c:f4:fe:34:c6:4c:0d:af:4c:
         fd:f1:1a:be:8e:58:14:be:48:c1:01:19:f1:64:43:5e:34:5e:
         2b:54:c5:a2:b3:c6:dd:81:c5:ef:45:f7:2c:d1:fd:d0:57:7f:
         a5:d4:5c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:57:24 2025 by rpki-client