This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
File:                     t6ep_77HE_hOC1GAr3besW5ykik.mft (raw, json)
Hash identifier:          UFZ7uqBw9zxjfeMFuTdGh5APagPPGWU9MvekerpVJyk=
Subject key identifier:   A7:C7:39:76:09:50:BF:A1:24:F3:BD:A3:36:4E:E2:D2:A2:E9:78:48
Authority key identifier: B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
Certificate issuer:       /CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Certificate serial:       05F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
Manifest number:          05D8
Signing time:             Mon 22 Dec 2025 22:12:29 +0000
Manifest this update:     Mon 22 Dec 2025 22:12:28 +0000
Manifest next update:     Mon 29 Dec 2025 22:12:28 +0000
Files and hashes:         1: t6ep_77HE_hOC1GAr3besW5ykik.crl (hash: sk4477L7aguv1GtEkR/D3GiWx17mTslkw9toMoPBjPc=)
                          2: 42DB2A2A4E6511ECA2CED527C4F9AE02.roa (hash: 4OaxyxcTIOcabFpXdsP8S785Tabg3Ky2JZmSrcqn/78=)
                          3: B63ACB8CCB8411EC98BF6718C4F9AE02.roa (hash: 18TkKSS3Fp9iebmXUjIf6kRbKHrRVSZXSvB/JXhKsQo=)
                          4: F68AC4D84D9B11EC9CF19624C4F9AE02.roa (hash: Y+TyRCz2epQVzbUxRdYB5HCaazSHrTMoJJH/3WgfqIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1521 (0x5f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC72, serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
        Validity
            Not Before: Dec 22 22:12:28 2025 GMT
            Not After : Dec 29 22:12:28 2025 GMT
        Subject: CN=6949c24d-65e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:9b:95:72:8c:99:85:6e:97:e5:bb:18:3c:
                    cc:c3:2d:fd:b8:0e:fd:21:99:d3:d7:85:d3:5a:47:
                    45:f3:0a:80:77:33:84:8a:b4:c0:dc:ac:3f:24:98:
                    f1:4f:39:e4:9e:b6:14:30:1c:5f:59:55:51:52:f1:
                    d0:6d:e3:35:19:67:d7:5f:3b:04:4b:b0:b6:f1:7c:
                    06:92:98:b5:cb:f4:bc:cb:5c:7d:77:39:ba:f2:23:
                    57:27:52:e0:83:27:13:f0:c8:a8:44:d6:04:dc:0b:
                    73:87:f3:18:ed:05:3a:2c:ae:1e:4d:ae:67:2a:36:
                    30:d7:16:ec:28:fd:a4:43:de:35:c6:7a:d8:d8:a7:
                    60:41:07:7d:5d:d0:2c:9c:29:58:99:6c:4d:a7:07:
                    03:c1:3f:28:20:77:7a:26:ee:3f:51:61:13:7a:37:
                    0c:c1:d8:c1:e7:00:45:c4:d9:4b:d0:11:33:f5:9a:
                    7f:0c:95:9f:81:0f:82:ab:e8:2b:7e:2f:98:0b:83:
                    84:b1:a3:d4:ce:26:42:88:11:04:f6:04:a0:d6:a0:
                    e6:d2:9f:f1:a7:ca:38:37:74:d6:9f:67:17:9c:e4:
                    15:31:e3:ca:d7:94:5d:a8:b6:91:70:46:57:00:d6:
                    94:74:68:09:d7:fd:25:45:46:00:66:d4:08:55:76:
                    72:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:39:76:09:50:BF:A1:24:F3:BD:A3:36:4E:E2:D2:A2:E9:78:48
            X509v3 Authority Key Identifier:
                keyid:B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7f:b0:61:7c:4e:c1:e8:c4:d0:01:20:1d:ce:dc:49:c3:15:
         b4:36:85:8b:58:73:2b:ce:ae:c4:b1:ea:62:d8:b4:4c:a1:a9:
         18:17:70:51:57:1d:37:b4:51:23:84:73:8e:c3:be:25:a2:8f:
         ad:e2:4e:d7:52:2c:1c:e1:54:a4:58:6c:f2:a1:96:0b:4b:ed:
         20:6a:dd:1c:4f:e2:12:23:a1:a9:9e:5a:01:76:1b:88:9b:41:
         95:e4:eb:50:dc:1b:7a:00:89:59:39:0e:5e:6d:99:52:99:3f:
         cc:6d:cf:dc:9f:6d:8a:b7:49:3e:75:16:27:c6:88:ad:97:57:
         4c:8c:6f:0f:5e:00:d9:ae:09:7c:f8:71:91:8c:ab:cf:43:c3:
         b9:be:36:8a:78:f2:b6:71:c0:c1:f7:8d:59:0e:f3:bb:93:87:
         f2:44:f1:24:5c:4e:5f:df:ce:e6:6d:1f:4d:30:5d:97:55:79:
         5b:aa:2b:44:5d:41:53:9f:b6:66:6c:78:98:40:b6:56:5b:31:
         56:00:81:68:3f:22:de:c4:46:97:7c:2d:a2:d0:69:61:b9:f9:
         56:60:8b:ea:3f:88:1d:f0:92:7c:73:fd:b8:a2:3b:ed:16:d6:
         09:0b:a9:af:df:b2:90:2d:98:ec:09:eb:32:da:31:22:d4:9c:
         d5:1a:b1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 13:10:44 2025 by rpki-client