This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
File:                     er7uZ6xhMToeH6izhl0_sfY090M.mft (raw, json)
Hash identifier:          5JTe/0iF19ZFsNUBUmULSc730+81Hfp0PjNxXB94gNE=
Subject key identifier:   D9:77:B2:E0:CB:AD:37:23:29:33:0F:5F:1C:C6:7A:E3:18:BE:A0:FE
Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43
Certificate issuer:       /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
Certificate serial:       0509
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
Manifest number:          0504
Signing time:             Tue 30 Dec 2025 22:50:47 +0000
Manifest this update:     Tue 30 Dec 2025 22:50:46 +0000
Manifest next update:     Tue 06 Jan 2026 22:50:46 +0000
Files and hashes:         1: er7uZ6xhMToeH6izhl0_sfY090M.crl (hash: gu1cz/VXqAMqC8mDEmcEN+TVTAmkBFIbw5kji6oSRh8=)
                          2: 449009F2387C11ECAE655C13C4F9AE02.roa (hash: 4XKTIg0bVBrjQ4gKKV2hpe4LJ1uznZVmF62ttuEN2yA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl
                          rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 22:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DFBD, serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
        Validity
            Not Before: Dec 30 22:50:46 2025 GMT
            Not After : Jan  6 22:50:46 2026 GMT
        Subject: CN=69545746-dbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:23:c1:ac:f1:2a:07:f3:3f:15:77:b3:c3:ac:
                    33:84:03:98:24:98:5d:26:c7:11:1e:2a:e7:bd:24:
                    cd:e5:79:ff:f4:96:90:c7:0c:f0:75:e6:50:c8:25:
                    a2:e7:2c:dd:da:2c:d7:dd:ba:00:04:02:b2:98:91:
                    74:43:d5:1d:df:84:d8:2c:66:e9:f6:b4:03:7c:1a:
                    c8:30:39:cd:b5:f8:04:2d:90:06:37:2b:b0:4d:f5:
                    5d:72:8e:29:67:cf:9b:9a:dd:e2:1e:ee:72:a2:86:
                    71:36:e3:0a:43:81:d9:bc:5c:db:8e:e4:1e:53:e1:
                    12:2a:d7:b1:1f:6c:fc:f0:b8:53:5a:4c:ef:0d:85:
                    60:29:30:85:4b:e9:69:09:86:c4:b3:56:5f:cf:6e:
                    15:da:bc:c5:98:28:fd:aa:ee:d8:dc:cb:18:cf:ab:
                    f8:86:71:84:d6:ab:36:36:d0:82:36:01:ed:fb:65:
                    23:9f:ba:48:d3:79:a0:fb:92:80:ac:16:11:3b:19:
                    b4:ba:21:66:82:b0:e7:d4:d1:4b:ef:1a:4b:e9:1f:
                    1a:15:67:f0:11:6a:7b:1c:45:c9:bc:df:f0:c5:01:
                    74:c3:63:60:ee:bb:d1:12:f9:ec:29:7d:a1:a1:b9:
                    3c:c5:fc:54:6e:a2:d2:21:60:0e:93:9b:d0:a1:9c:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:77:B2:E0:CB:AD:37:23:29:33:0F:5F:1C:C6:7A:E3:18:BE:A0:FE
            X509v3 Authority Key Identifier:
                keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1a:dc:e8:52:70:2f:4b:96:f6:0c:b2:29:8a:f5:50:43:06:
         20:cf:e2:b6:fd:9c:c4:3c:1d:a2:b9:4c:4b:84:73:c4:51:3a:
         8a:a5:e2:e5:70:7a:89:6b:e4:58:0d:3a:07:ca:98:b1:9c:25:
         8d:6a:d9:e4:08:ea:41:f7:3d:d1:fc:33:ce:74:b5:68:ca:45:
         8f:d6:3d:df:aa:7e:f7:95:51:82:cd:3b:c4:b7:1b:38:6c:71:
         6d:3f:48:8e:78:99:79:9a:f3:93:1c:6b:5c:80:6c:9f:5b:2b:
         a9:2b:5e:ae:ff:1c:1d:e0:b0:c3:ff:3d:5b:95:69:ec:36:da:
         95:5b:e3:92:b4:25:ac:ee:ed:25:90:67:5a:bc:2c:61:60:9f:
         df:b0:5a:9c:a6:52:9d:56:ad:89:73:24:9c:f2:b9:ac:09:8e:
         40:ae:bd:26:2f:10:01:1d:f8:00:23:52:8d:e0:61:ca:5a:f5:
         ca:46:08:2f:9c:b2:e0:74:37:de:48:f7:ba:bc:d5:c2:89:1d:
         d7:8e:87:44:7f:e4:85:7a:9a:39:4c:7c:12:37:35:45:c8:04:
         8a:d1:5f:7c:46:f9:7a:44:90:b9:89:09:36:46:cb:4d:ce:e0:
         dd:77:75:c3:f2:33:48:cf:1b:10:b3:8d:5b:46:15:74:40:eb:
         7a:41:d7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 01:59:18 2025 by rpki-client