This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
File:                     F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json)
Hash identifier:          5qJCnGEr20/R2Qqs6WSTVxnkl6d1shs3CNqZ49yXJyA=
Subject key identifier:   AC:CC:27:6E:D0:0D:48:65:78:D4:DC:98:52:64:2C:BA:D6:42:8E:B9
Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
Certificate issuer:       /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Certificate serial:       07F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
Manifest number:          07F1
Signing time:             Thu 18 Dec 2025 20:35:57 +0000
Manifest this update:     Thu 18 Dec 2025 20:35:57 +0000
Manifest next update:     Thu 25 Dec 2025 20:35:57 +0000
Files and hashes:         1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: Ar5u8SRzhFWHa/rh6CtM48+s93/PDPFaq6DV64mAHtA=)
                          2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: wiuGLfhX4Abp89BeKvQrP2ym0zYLw1999qfgLcOKlHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
                          rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2039 (0x7f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
        Validity
            Not Before: Dec 18 20:35:57 2025 GMT
            Not After : Dec 25 20:35:57 2025 GMT
        Subject: CN=694465ad-75d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:88:f7:6e:3c:ed:cf:b6:8f:7e:ba:d3:44:
                    5a:87:10:e7:1b:6f:56:1b:b6:5d:10:eb:1d:ba:47:
                    6f:14:70:bf:e7:f0:a7:f9:36:73:36:42:a0:bf:6a:
                    26:81:0f:6e:25:94:75:8c:fc:da:36:d2:82:cd:0a:
                    ef:88:ce:d3:2d:c5:98:8a:6c:e2:81:7a:33:2d:61:
                    d6:cd:0f:e7:d6:d1:b0:a2:25:7a:dd:50:05:72:3e:
                    1b:34:74:70:df:59:6f:f9:af:3e:a8:55:34:b1:d1:
                    c9:4f:4d:60:c0:8d:88:91:8f:69:d3:73:a3:bb:cf:
                    fc:28:85:25:cc:68:6a:ff:f0:a0:f6:60:02:7e:b1:
                    45:01:7d:e4:bb:f1:62:65:db:96:bd:9a:ad:71:64:
                    c2:5f:26:89:59:d2:0b:61:d1:39:ab:db:f0:c4:36:
                    3c:7c:e3:08:8d:bd:d9:2a:ef:41:7a:41:20:08:14:
                    56:d2:01:81:9b:f6:b8:78:f8:90:81:95:f2:55:17:
                    8b:dc:45:38:4d:1d:4a:74:bc:0e:b3:c9:c9:a5:c0:
                    91:2e:65:02:45:b9:71:72:74:dc:7d:a2:49:b4:ce:
                    0d:1f:f1:22:20:ce:e1:a8:b4:2e:22:40:71:3c:fe:
                    c1:5c:4e:db:db:95:2f:42:69:92:c2:7f:bf:9d:ea:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CC:27:6E:D0:0D:48:65:78:D4:DC:98:52:64:2C:BA:D6:42:8E:B9
            X509v3 Authority Key Identifier:
                keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:70:ee:8f:36:3b:03:3d:d0:b3:87:89:17:aa:96:0d:c7:
         95:8d:f3:af:d1:92:9d:aa:61:79:38:41:7c:b6:c0:dc:d2:6f:
         06:18:6a:06:65:1f:76:59:cc:ba:44:8f:dd:a4:17:e8:46:9c:
         b1:29:20:a0:0f:ba:6e:28:08:50:3a:57:a6:71:64:c0:7a:e2:
         87:3c:e3:99:3f:ed:22:5e:43:b0:07:31:4e:12:01:cf:c8:7b:
         62:72:7e:76:a2:13:12:31:cb:a3:b1:0b:b1:a9:02:6a:d3:19:
         1e:fd:78:d0:40:37:45:84:cd:a5:7a:21:47:5b:b9:4f:65:01:
         53:c4:cb:66:44:39:52:ef:12:03:84:92:14:1d:a9:44:e8:9c:
         2d:95:32:d6:f8:b3:2c:70:3a:bf:7e:aa:4a:89:26:49:41:1c:
         91:37:8e:5b:d9:7e:26:26:21:c3:46:80:5b:cc:d7:ca:43:10:
         35:d3:e8:d3:be:6d:47:cc:df:f0:4b:2d:45:4d:dd:22:c6:28:
         cf:25:fc:94:d5:c1:d0:18:0b:91:93:a5:20:e9:e0:3a:a5:d6:
         28:0f:e6:18:d2:3c:bd:15:98:56:f0:66:8c:1c:b5:ee:9b:b1:
         02:41:06:e0:de:8e:f4:49:93:7c:0f:50:3a:54:59:24:e1:ac:
         9a:bf:31:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:56 2025 by rpki-client