This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
File:                     7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json)
Hash identifier:          6/GSzVoyKVA+C7s15NAHRZHb4p5KmT2ecze6Fg2wWs0=
Subject key identifier:   EF:20:80:92:3B:CF:22:AD:2E:21:C1:4E:B3:9F:29:F5:1B:FE:05:BA
Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
Certificate issuer:       /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Certificate serial:       04DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
Manifest number:          04D4
Signing time:             Tue 30 Dec 2025 23:01:01 +0000
Manifest this update:     Tue 30 Dec 2025 23:01:01 +0000
Manifest next update:     Tue 06 Jan 2026 23:01:01 +0000
Files and hashes:         1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: 8FYFbzVIfq54sGB6Uc8lahiBJs44bJo/5/aHKR/lI0Y=)
                          2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: 75+qcslrpbStlF9MBXstO6Kxv6zf8gOrBw7RkBWwZKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl
                          rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 23:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1247 (0x4df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
        Validity
            Not Before: Dec 30 23:01:01 2025 GMT
            Not After : Jan  6 23:01:01 2026 GMT
        Subject: CN=695459ad-1afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:f5:e6:d2:63:58:87:da:04:55:a7:89:ec:
                    bc:62:23:cd:a5:1e:1e:ba:91:ae:fb:f1:3c:e0:f7:
                    dd:69:ac:2a:3c:e8:3c:ec:31:28:71:6e:93:d8:34:
                    23:09:b4:41:a5:e4:07:64:2c:49:58:b7:9a:75:ef:
                    a3:61:88:9b:78:3c:65:fa:82:95:43:13:3c:85:c1:
                    1f:1b:30:b4:de:8d:15:d9:c9:2c:20:27:78:a2:89:
                    52:fc:77:d3:0d:ae:e2:03:d9:f4:d5:e9:7a:df:79:
                    2e:52:bd:25:1a:79:8a:53:10:f0:f6:48:35:32:3c:
                    60:c9:7b:fd:1c:1e:f1:b2:ce:ce:13:6b:4f:93:6d:
                    d3:e0:de:37:60:3c:0d:41:05:ed:9f:7b:aa:0c:b1:
                    ba:3e:26:70:74:72:d7:26:e7:af:79:5b:6e:80:3a:
                    13:76:bf:aa:c5:99:15:fc:c8:47:c7:37:aa:2b:e4:
                    c3:3e:2e:2f:68:c5:b4:bb:a2:68:f0:68:95:8c:c4:
                    6a:52:a4:10:5e:2a:e0:90:c8:68:c0:f4:ac:f4:93:
                    23:4a:ee:5a:e4:11:0e:1d:81:05:12:a3:e7:61:e3:
                    de:66:35:39:6f:60:56:3a:6c:c0:88:f1:5a:c3:5c:
                    a5:10:b5:b5:ef:4d:eb:ea:44:fa:74:e7:fa:d6:66:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:20:80:92:3B:CF:22:AD:2E:21:C1:4E:B3:9F:29:F5:1B:FE:05:BA
            X509v3 Authority Key Identifier:
                keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e4:ad:04:df:cd:59:c4:44:be:87:c2:8a:7b:04:76:90:35:
         ec:d6:ae:44:71:42:c3:fd:a4:55:ea:49:a2:f3:6c:51:ab:46:
         6e:f3:6a:72:22:47:3e:be:11:b5:23:60:0a:d2:86:76:c0:62:
         2e:3a:74:3d:3d:67:29:71:3a:82:e7:ba:30:20:0b:01:36:e3:
         25:f6:3f:f4:19:bd:a0:90:d3:a5:36:d1:b0:9d:df:90:c5:d3:
         72:67:10:e9:dc:32:0b:eb:94:2d:9d:93:7f:50:23:23:b0:ed:
         fa:f4:d8:6c:31:c8:95:f3:45:90:bf:d3:b0:e5:7f:33:2e:e9:
         0c:1a:56:02:40:88:5c:f7:06:3c:f2:89:e0:f1:11:dd:b8:a4:
         6b:55:49:43:40:c0:c9:a4:21:af:4f:f8:3e:31:4c:2b:5f:a4:
         8c:a3:ac:d8:5d:46:54:a2:f9:11:47:9d:6b:62:2d:26:61:f3:
         29:4b:b2:4e:26:61:e0:66:2f:45:2c:db:ea:6c:2c:76:bc:3d:
         f3:de:0d:c7:55:54:7b:9c:e3:b1:95:ee:19:b6:96:9b:0b:64:
         00:c6:bb:36:02:0e:a4:d0:8e:8a:c5:0e:72:18:17:15:20:5d:
         c0:bc:07:1e:16:4b:d0:bb:25:8c:0f:f5:91:42:17:e6:1b:05:
         fe:23:87:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 21:44:56 2025 by rpki-client