This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
File:                     E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json)
Hash identifier:          ZK/EHmWQrxup5KyQrcNygdj823cxJ6Fs7gnSrftt2yM=
Subject key identifier:   F5:54:A6:3D:2E:95:AB:1D:B9:F9:3F:93:2D:05:91:59:F8:58:F7:EC
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Certificate issuer:       /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial:       04E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
Manifest number:          04DD
Signing time:             Fri 26 Dec 2025 22:53:24 +0000
Manifest this update:     Fri 26 Dec 2025 22:53:23 +0000
Manifest next update:     Fri 02 Jan 2026 22:53:23 +0000
Files and hashes:         1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: cj/kECZAorJiGCQm06/IxlyNt4R65wCxh0f4Kw13HLE=)
                          2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: sstINZbMJgCSsx+wfPe1nd2W79d/zw3rR1pM3sZFuH8=)
                          3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: SVdQW6VFhMPakkvyBDzdmVeaSxb6sTFpfoyjqJiJnDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 22:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255 (0x4e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
        Validity
            Not Before: Dec 26 22:53:23 2025 GMT
            Not After : Jan  2 22:53:23 2026 GMT
        Subject: CN=694f11e4-a827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:7b:7a:b8:3d:a0:7e:92:d2:3f:d1:92:a6:
                    3d:64:e7:84:57:1e:d6:a6:7b:b1:84:02:88:dd:ae:
                    ab:b3:47:ff:61:fc:69:69:30:ec:88:c9:b7:ae:4c:
                    37:3e:6b:36:3d:f7:8b:14:8e:02:f4:7b:65:54:67:
                    9c:d9:8e:48:c9:fd:9e:b1:23:75:de:35:95:cb:d1:
                    8a:ab:27:e6:36:42:75:e9:25:45:1e:96:fc:4b:e0:
                    54:44:b7:c5:34:33:01:8f:31:51:5a:d5:3f:5e:c6:
                    79:03:5f:78:25:c2:fd:d8:4e:1b:36:c0:5a:cd:50:
                    d6:22:51:e1:49:03:7f:3b:7a:18:f6:7f:b2:97:c6:
                    ce:30:96:77:24:bc:8e:9c:ab:2f:51:2f:ee:41:b8:
                    52:30:e8:40:17:bf:df:cc:e5:9f:f3:fd:03:f8:fd:
                    79:2e:9c:5f:e4:96:fd:ef:02:b9:f4:ca:c5:55:5a:
                    89:3f:0e:58:de:83:c0:a8:61:1f:86:b9:57:18:9c:
                    2c:82:ca:b3:2f:bf:1b:1b:4f:20:6b:af:05:51:56:
                    10:db:79:13:25:b5:2e:0e:e2:bb:25:5a:20:12:f1:
                    a9:47:14:0d:ab:28:30:62:86:d4:55:1a:b0:69:6c:
                    72:b7:93:81:2c:47:6a:ed:9b:b4:03:03:95:5a:79:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:54:A6:3D:2E:95:AB:1D:B9:F9:3F:93:2D:05:91:59:F8:58:F7:EC
            X509v3 Authority Key Identifier:
                keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:54:a5:f5:bf:63:d7:cc:46:83:dc:03:cf:d6:3f:3a:53:
         5e:b6:bc:58:2f:25:f0:5b:4e:17:19:d0:10:c3:00:81:0d:fa:
         bd:66:c2:3a:e2:96:29:6c:31:1f:fc:1b:e3:c5:91:c0:65:ea:
         01:7e:40:77:b7:e3:56:84:c4:d8:ad:42:12:5a:d5:cd:c9:8e:
         9f:d3:99:a6:41:72:57:dd:26:8b:14:db:8d:52:7a:14:34:f2:
         6e:ad:ee:51:34:4e:e9:7c:88:23:91:a8:81:3b:f3:91:52:04:
         23:bd:c1:78:1a:f4:b5:7d:f4:e1:0d:eb:ea:c5:b9:8b:a8:88:
         e2:1b:aa:16:5c:f8:7f:df:5a:cf:27:21:c1:b3:64:7a:2c:b6:
         36:78:95:6c:ee:1b:43:28:83:e0:27:e8:4a:8e:61:09:2e:73:
         9d:45:a7:a5:09:63:5d:67:1c:51:65:43:24:fa:f6:d2:d7:4a:
         a3:21:8c:91:05:c2:de:2e:4e:61:97:20:ce:77:39:bd:52:fd:
         76:99:93:06:92:03:ef:58:75:87:4a:76:25:1e:41:20:56:c9:
         ea:b7:4b:fe:f0:9a:c9:ba:b9:0e:2d:ca:36:36:e5:f4:5e:5b:
         53:f4:a4:69:c2:c0:df:6e:07:2e:47:13:d5:b6:52:f4:97:72:
         95:94:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 23:21:39 2025 by rpki-client