This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
File:                     7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json)
Hash identifier:          AQ5iJksYIt8QYz+/7/hWimpjVU4n/9Mdh9NqTFprCyk=
Subject key identifier:   63:C0:5E:CA:69:02:24:0E:3A:A6:85:B9:CC:B8:45:05:08:60:0F:06
Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
Certificate issuer:       /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Certificate serial:       0CB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
Manifest number:          0CAB
Signing time:             Thu 18 Dec 2025 18:05:17 +0000
Manifest this update:     Thu 18 Dec 2025 18:05:16 +0000
Manifest next update:     Thu 25 Dec 2025 18:05:16 +0000
Files and hashes:         1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: ar5MiAXO5dak/CHHstw4lLBedvyRv9Hw/A5QE2whcR8=)
                          2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
                          rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3253 (0xcb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
        Validity
            Not Before: Dec 18 18:05:16 2025 GMT
            Not After : Dec 25 18:05:16 2025 GMT
        Subject: CN=6944425d-505a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:41:98:17:13:c3:f7:11:e6:3c:69:19:03:
                    c8:2a:52:97:19:16:e0:71:51:f9:b7:eb:f1:98:38:
                    cf:29:c5:08:63:32:ee:5b:3b:37:25:e8:ab:ed:cd:
                    90:7c:08:bf:8b:d1:ce:94:c9:95:ab:83:89:fe:ae:
                    d3:b0:bd:39:08:72:a8:bc:4b:28:9c:3b:30:98:53:
                    35:6d:66:32:6c:d0:4e:55:2a:36:a5:90:d3:31:72:
                    3d:b6:1d:5b:fa:00:a2:95:73:1e:46:a0:ae:84:59:
                    95:0f:1c:5c:b7:49:f3:f0:9d:d6:e6:0a:bc:0d:1d:
                    0d:ca:8a:6f:b9:0b:77:d9:48:d7:6a:22:d4:f9:ba:
                    6c:03:19:8b:c9:e5:aa:34:d9:69:63:fd:79:56:cb:
                    81:07:fc:24:c7:85:10:ad:9d:69:62:1e:c6:66:52:
                    da:28:bc:09:81:13:18:37:1e:7b:55:b4:b5:01:76:
                    f7:98:ee:39:14:dc:37:be:62:23:9e:f7:f3:e1:bd:
                    15:81:09:09:de:8e:cc:fb:95:62:f5:17:59:8e:e8:
                    74:11:b7:b7:aa:50:0d:36:6f:67:56:85:07:51:45:
                    c5:49:f8:48:0c:12:43:52:4d:13:36:01:23:81:f0:
                    8d:11:a6:86:d5:1c:0a:7d:b8:33:12:93:60:43:29:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C0:5E:CA:69:02:24:0E:3A:A6:85:B9:CC:B8:45:05:08:60:0F:06
            X509v3 Authority Key Identifier:
                keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:58:0d:de:49:2d:bd:e6:15:bc:25:1f:97:8e:4e:1a:8c:22:
         b9:b0:38:16:93:98:a0:ba:b7:32:e5:e2:de:e7:9f:c1:e0:c3:
         ab:af:25:79:03:98:df:61:69:18:e0:2e:8a:ed:5f:8d:8c:d3:
         4c:27:51:ab:25:9b:61:bb:69:df:a8:e3:68:d8:36:8c:f3:f8:
         ff:66:46:73:e7:45:fa:01:82:46:72:e1:fb:be:5b:d9:06:be:
         be:7c:26:6c:11:0e:f4:e3:bc:fb:ae:70:a3:97:83:b7:ec:08:
         68:1e:22:77:d0:c7:9c:db:95:4c:ea:27:bc:87:87:ff:ff:4e:
         be:cb:dd:33:a5:38:d8:56:15:aa:8b:27:d3:3c:8d:7c:fd:6a:
         e2:92:3a:52:ad:f4:c6:2f:f1:ee:b1:ab:14:9b:f4:c4:69:e1:
         f2:64:ad:69:94:89:17:92:aa:14:c3:8c:71:c0:13:49:ec:80:
         34:ac:97:f9:ed:54:d5:4d:65:a5:00:01:a6:c5:9d:99:20:05:
         27:03:89:a7:72:e7:71:ff:86:cc:ed:4c:f8:04:8f:d1:ea:5f:
         58:fc:f4:7e:f4:4f:15:33:b0:e1:f0:84:ca:2a:73:f4:e4:17:
         d0:56:6e:f9:e7:63:c5:0c:f7:c3:42:a1:f3:d8:e2:9c:62:ac:
         13:3b:e2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:00:16 2025 by rpki-client