This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File:                     7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier:          5VrEMV+HwZGHmXqlsmlLdFju2xqM7st9quJKpKZ8pFU=
Subject key identifier:   77:17:B5:82:73:FC:3E:2E:7A:B5:5F:D7:A1:03:86:A1:C2:82:9A:95
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer:       /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number:          B8
Signing time:             Thu 01 Jan 2026 05:32:26 +0000
Manifest this update:     Thu 01 Jan 2026 05:32:26 +0000
Manifest next update:     Thu 08 Jan 2026 05:32:26 +0000
Files and hashes:         1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: +hYNRlz0LFjEV71fgYqhsNy/oJKmsPkhsotDOgB9+EQ=)
                          2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: WVqv1JuSt8hSNNolUiV5z8//m1vJSnq0q+Q8Ooe/S0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 05:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
        Validity
            Not Before: Jan  1 05:32:26 2026 GMT
            Not After : Jan  8 05:32:26 2026 GMT
        Subject: CN=695606ea-5e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:e4:0b:91:19:9c:f3:e5:7a:47:79:a2:bd:
                    55:2f:ec:1d:3a:d5:91:2c:97:b5:d0:a7:bc:5b:ad:
                    46:2f:a5:15:7e:d5:74:cf:db:49:87:14:14:6c:b0:
                    66:08:20:18:55:22:9e:8b:cd:a8:ce:ba:75:8f:a9:
                    e2:c6:86:9c:2e:6c:fb:0f:4d:02:0e:8c:b0:57:f5:
                    28:c4:41:4f:d9:bd:3b:a6:b6:b6:d1:0a:ad:7a:8e:
                    5e:bf:87:b7:c8:f6:b6:3a:33:7f:be:23:1c:08:dd:
                    44:7e:6a:46:66:f4:57:ad:63:14:21:c2:6c:cd:19:
                    31:e4:3e:68:ff:11:63:49:ec:96:ab:53:1e:ee:17:
                    97:6f:c4:f7:89:50:a3:88:56:b1:33:13:af:51:3e:
                    38:db:95:c0:31:78:78:96:42:8f:2c:79:c9:00:b9:
                    5a:26:c8:55:65:6d:06:f3:d5:bf:8c:d4:6c:84:ca:
                    92:34:c1:2c:a5:23:00:e3:29:78:4a:16:21:d2:a3:
                    d2:b4:78:ec:89:33:a0:5c:39:50:26:aa:05:42:30:
                    67:1f:7e:02:39:a5:1f:e7:bc:d8:11:fb:c2:f5:61:
                    02:37:7e:65:9f:da:02:bf:8a:c6:1f:2f:5f:e6:43:
                    e6:f6:52:aa:24:26:14:e9:75:9e:88:3a:b3:ce:46:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:17:B5:82:73:FC:3E:2E:7A:B5:5F:D7:A1:03:86:A1:C2:82:9A:95
            X509v3 Authority Key Identifier:
                keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:46:d1:37:d0:7b:15:4b:02:21:ff:e1:d6:c2:f1:89:25:fb:
         d8:ce:38:ef:e6:37:25:b7:6d:eb:1b:87:64:15:09:c1:ac:ee:
         30:34:9b:a5:a0:20:e2:05:7b:ff:ea:be:56:66:f5:4d:05:56:
         bf:ef:1e:9c:36:c3:d2:97:41:05:cf:b1:48:4e:77:81:7c:14:
         6b:c5:67:c5:67:ff:b7:21:fa:14:67:56:7e:84:11:cc:fc:48:
         d2:2b:3a:c8:b3:93:af:6f:2d:08:e6:18:5a:df:b4:10:d8:1d:
         47:3d:a4:92:04:b0:05:ec:69:df:29:25:6d:0d:7c:7e:80:71:
         18:4f:72:18:bd:b9:b9:85:2a:4a:58:ae:dd:0f:7b:46:df:d8:
         a3:2f:50:b2:eb:26:70:33:ad:a4:f8:d3:b0:7e:3a:2b:05:c6:
         0d:fe:2b:c7:fd:00:b6:ce:dd:21:dd:28:65:9a:02:3f:5a:f0:
         f5:56:4a:ac:f5:5f:a1:dd:89:11:db:4c:b1:a9:6c:95:e8:94:
         e0:bc:33:4d:51:5d:89:72:d3:fd:9f:ce:ac:f5:e3:e0:1b:a5:
         28:d1:00:fa:1b:7b:1f:ec:47:80:4a:f8:c9:a9:67:04:26:2b:
         02:7e:65:1e:56:a6:dd:55:d4:1e:c4:d3:07:43:4b:e6:c6:44:
         ff:00:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 00:57:01 2026 by rpki-client