This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
File:                     d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json)
Hash identifier:          1QshrB/i4mYm9HdrPTobBPRW/oJKsN/qidjfbUyKlLM=
Subject key identifier:   13:1E:C9:6C:83:80:7C:5E:02:57:20:4D:E2:30:7A:D9:43:57:64:FA
Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
Certificate issuer:       /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
Manifest number:          B7
Signing time:             Fri 19 Dec 2025 05:06:24 +0000
Manifest this update:     Fri 19 Dec 2025 05:06:24 +0000
Manifest next update:     Fri 26 Dec 2025 05:06:24 +0000
Files and hashes:         1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: ZBc5V0aCavufjkpw4WBJXeTjH3Mbf7lE2vS1av7S020=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
        Validity
            Not Before: Dec 19 05:06:24 2025 GMT
            Not After : Dec 26 05:06:24 2025 GMT
        Subject: CN=6944dd50-ac1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:3b:0f:9d:d3:de:58:4b:f8:07:66:da:d5:
                    a5:53:b0:1e:07:ad:c2:b0:65:cb:5a:8a:56:d8:bb:
                    72:03:b7:15:b7:80:c6:ad:d8:4f:17:c7:81:6f:6f:
                    0e:f7:85:0f:ca:04:81:7d:7a:4a:ae:ab:c9:3d:eb:
                    df:17:cb:f8:e3:a4:6e:7e:6f:5e:19:eb:ed:e3:41:
                    e7:ea:8f:d8:af:3e:26:ea:9a:18:be:53:5a:90:e4:
                    52:b0:88:c5:39:a6:bc:ea:8e:d3:20:12:02:d8:c9:
                    e3:8d:d7:1d:b2:2c:fc:1e:c6:6f:37:f7:c8:46:3f:
                    8a:07:13:51:4f:8a:19:72:90:17:1c:05:d3:7b:79:
                    c8:9c:0e:b3:48:33:9b:c1:58:4f:ce:57:72:09:d8:
                    bc:38:0a:9a:06:ac:10:f2:64:14:c6:ef:2e:15:c0:
                    ee:6b:b4:3b:8c:1f:33:2e:86:b1:da:01:fc:c9:f5:
                    6b:c6:53:29:66:ca:4c:99:cf:29:12:8c:b8:11:c4:
                    5e:96:e1:55:11:db:f7:c8:3d:96:ab:55:1f:fb:b5:
                    33:39:48:08:9f:3c:59:bf:9a:86:60:ae:c3:da:cf:
                    2d:e9:3f:6a:25:79:7d:5a:5d:67:82:d2:95:0f:54:
                    91:75:0c:42:0a:3e:50:b7:35:7a:ff:85:36:fc:07:
                    01:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1E:C9:6C:83:80:7C:5E:02:57:20:4D:E2:30:7A:D9:43:57:64:FA
            X509v3 Authority Key Identifier:
                keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:33:85:a3:e4:1f:ad:ac:74:10:e0:0d:ca:af:ba:77:6a:c2:
         f5:1a:6b:c5:cd:ff:29:72:a0:af:3c:27:14:01:c9:26:dc:c9:
         93:e6:d5:91:f1:94:0f:71:77:99:c1:67:e4:d9:8f:1d:af:5b:
         ef:e2:d8:83:e0:fa:75:b2:a3:6d:10:bc:4a:76:56:f5:f0:e2:
         7c:ca:9d:59:6d:1a:3a:a5:bb:37:61:92:66:a4:e9:28:46:fa:
         42:b9:1d:01:0c:d7:2c:75:7f:8c:7c:6b:d6:ee:02:03:1c:08:
         2d:0e:3d:d8:1d:0a:dd:a9:8f:69:f5:d5:41:95:c0:f2:dd:83:
         40:36:36:23:61:0e:c0:16:85:b7:2a:56:5c:7c:51:80:c7:71:
         c7:80:ef:80:52:95:cb:0a:c8:1d:ea:bb:e3:02:23:b7:91:af:
         1b:eb:f6:6c:72:ea:bc:5d:0e:45:09:3d:52:ab:ef:b7:55:25:
         d5:42:b4:ab:91:d4:30:c6:36:20:d6:a1:0a:e0:b3:fb:b0:e3:
         44:e8:9f:43:39:d8:e3:48:7e:08:26:ae:5a:6c:10:b4:d3:75:
         89:ec:bb:84:12:a4:ac:0f:95:42:85:5b:95:10:4a:ff:36:d2:
         7d:68:4d:98:2b:bc:08:ae:55:d6:52:a9:b8:a8:ac:19:b6:65:
         f7:42:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:08 2025 by rpki-client