This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft
File:                     fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json)
Hash identifier:          87A5jzQ+wtTn9uYHIxjf0rsklIbyvWx0KCejyPuvMYY=
Subject key identifier:   70:D3:67:73:A6:E4:A1:63:9F:12:A7:32:20:E0:DF:DC:E8:4E:17:AB
Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68
Certificate issuer:       /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68
Certificate serial:       0725
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft
Manifest number:          071F
Signing time:             Mon 22 Dec 2025 21:07:02 +0000
Manifest this update:     Mon 22 Dec 2025 21:07:02 +0000
Manifest next update:     Mon 29 Dec 2025 21:07:02 +0000
Files and hashes:         1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: QsD8nWqsgqAaett4eCb67N2ICrHO0PLpeetjOYXaIcY=)
                          2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: jMHgt7FvNkUCkLd7vYheLEj/MpewQSbVwisjvUIDov4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl
                          rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91300ED, serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68
        Validity
            Not Before: Dec 22 21:07:02 2025 GMT
            Not After : Dec 29 21:07:02 2025 GMT
        Subject: CN=6949b2f6-6458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:7f:1d:63:c0:6c:2b:1c:a9:c5:b7:78:83:
                    a9:35:72:c3:84:81:fe:c7:aa:4b:41:3f:8e:9a:ee:
                    72:25:8a:a8:6b:04:ab:69:3c:41:7a:e4:11:c2:68:
                    b5:66:03:5b:ed:56:46:2a:26:3f:8d:15:ec:d3:59:
                    2a:ca:66:8d:2a:7f:59:5b:4b:c0:57:c0:16:e3:94:
                    81:e0:b0:5f:88:f1:4b:59:65:86:5d:29:4b:79:92:
                    e5:58:dc:49:d6:40:38:72:81:bf:ef:c0:50:57:b9:
                    9d:e9:4a:19:5c:30:f7:b0:8e:10:f2:48:44:eb:01:
                    35:47:35:52:ae:c3:3e:1f:be:c0:46:a6:09:d8:32:
                    86:f9:91:44:88:4b:ba:50:4c:e2:9e:86:ab:bc:d7:
                    04:00:d3:73:9c:d5:5e:cd:8f:89:e0:17:76:ac:67:
                    d0:70:ea:c4:67:c9:84:b5:47:b1:da:6f:e7:58:5f:
                    6b:ae:c0:c3:33:42:a5:ff:c9:35:a3:cc:30:e4:9f:
                    6a:79:c4:db:5e:da:92:3b:e3:db:52:13:3e:bc:ab:
                    54:64:1d:bc:8a:81:15:bc:b1:29:30:d5:31:a8:f7:
                    1e:93:e5:23:29:1d:47:58:7e:6d:55:5a:de:da:43:
                    82:47:a2:9d:92:16:95:c8:20:02:3a:ef:8a:a4:e4:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D3:67:73:A6:E4:A1:63:9F:12:A7:32:20:E0:DF:DC:E8:4E:17:AB
            X509v3 Authority Key Identifier:
                keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b9:43:05:d5:f5:1a:c0:f8:09:df:ba:8d:2a:29:02:92:cc:
         72:74:6e:01:3e:1b:32:4a:12:50:9f:b5:b2:f7:4c:22:7f:85:
         e6:4c:ea:96:d8:c7:79:e1:bf:3a:6e:78:7a:e6:54:1a:be:da:
         e2:e6:ae:67:ab:a9:ea:ac:5c:0d:6a:80:46:07:f6:78:c0:ef:
         40:34:a6:10:25:1e:c8:98:39:fd:68:6e:44:38:2b:7f:3b:68:
         76:94:b7:6e:af:db:bc:7f:35:a9:c5:7f:5e:1b:fa:91:fb:46:
         cc:e9:5b:8c:44:1f:70:c1:18:0b:09:01:83:69:cc:50:0c:b1:
         12:79:b1:46:ee:6d:d9:e2:36:0e:89:d2:4c:58:09:a6:c3:6f:
         fd:85:71:5c:d1:1c:5a:6a:6d:04:b3:92:7c:77:e9:13:ea:e1:
         c6:aa:cd:de:e7:19:65:e5:29:d5:39:4b:00:8a:33:cd:7c:fd:
         05:d8:cc:27:d8:b2:36:73:ad:ec:f9:b7:ca:d8:fc:89:71:31:
         44:ab:3d:d8:10:32:ad:47:49:b2:39:06:4a:22:fd:fe:28:e6:
         9f:36:5f:8f:2b:23:17:8f:20:b2:03:b4:3d:2d:c5:3a:77:13:
         fd:d8:b4:c2:c2:7f:12:c5:46:39:d2:e5:b3:84:89:2c:8c:e4:
         5a:83:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:41:12 2025 by rpki-client