This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
File:                     7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json)
Hash identifier:          YOQKMsgXCMbTrniZ6Cu4OMt7b38hdgrK0QeXYA9gO3U=
Subject key identifier:   B9:D4:61:79:FD:FF:AF:2D:DE:3C:DD:CA:68:2F:3E:73:48:02:9A:87
Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40
Certificate issuer:       /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
Manifest number:          023B
Signing time:             Sun 21 Dec 2025 01:14:19 +0000
Manifest this update:     Sun 21 Dec 2025 01:14:18 +0000
Manifest next update:     Sun 28 Dec 2025 01:14:18 +0000
Files and hashes:         1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: ENnsydhC0CAG7Qt/TVCmDEEdrKHNRhPm1oOKWJmZu9A=)
                          2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: ScqtXrKQFBst0F27eHzdcS8cxxg6r7Zs+kEeCrfoHcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 01:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
        Validity
            Not Before: Dec 21 01:14:18 2025 GMT
            Not After : Dec 28 01:14:18 2025 GMT
        Subject: CN=694749ea-318b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:df:76:19:c1:c8:bc:bd:2d:8d:c0:75:30:
                    7b:84:94:11:97:5c:59:1d:c1:16:df:f3:e7:52:b0:
                    c0:4e:84:7d:48:e4:67:7e:4e:21:73:fb:60:29:42:
                    96:60:c6:74:e4:fa:84:9b:dd:1a:1c:c1:1b:25:20:
                    bd:3f:8d:3e:bc:1b:a1:dd:4f:44:fa:66:8a:13:a6:
                    ff:f0:f4:9c:b3:c9:f4:48:79:d6:ec:8c:e7:6b:92:
                    f6:fa:e2:d6:a1:4f:79:ce:9d:82:ad:f5:4e:08:25:
                    35:ff:e8:3a:39:68:c3:12:20:c0:d5:e5:03:16:3e:
                    bb:01:40:b3:89:be:e8:25:6e:2a:5b:8d:7f:03:27:
                    63:dd:2f:2d:63:a2:bf:80:ac:45:2e:74:4a:67:de:
                    71:ff:e9:87:f4:49:e5:d2:b6:ec:85:bd:f4:b1:03:
                    97:82:02:dd:27:3c:87:ad:4a:eb:71:af:7b:19:1c:
                    bf:b2:18:fc:f9:e2:9e:a0:37:6a:64:18:5a:31:c3:
                    57:49:01:fe:8d:b3:07:e4:51:3a:90:1c:71:60:bd:
                    e6:db:36:c4:f6:32:0c:da:64:08:85:9f:17:5b:c8:
                    a9:06:96:d3:9e:17:31:2e:ed:52:f7:14:01:68:05:
                    34:86:39:75:e0:74:55:d1:a2:0c:a2:f8:98:f2:30:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D4:61:79:FD:FF:AF:2D:DE:3C:DD:CA:68:2F:3E:73:48:02:9A:87
            X509v3 Authority Key Identifier:
                keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ae:0a:8d:51:59:52:61:f1:fb:9f:55:d4:d9:49:d0:de:9f:
         d5:ae:8e:60:ef:e1:27:8c:81:b7:45:e1:df:ad:61:20:89:04:
         6b:6c:33:c4:79:fe:7b:76:b1:1f:a2:7a:8e:10:db:2a:a9:6e:
         f6:7b:e2:20:d9:0d:a8:6e:19:e8:ca:ab:e3:80:d6:06:c1:eb:
         6f:f4:34:a3:16:be:13:e6:73:af:a2:55:08:24:4e:b7:b4:8f:
         67:23:2f:45:09:2a:39:26:cf:1e:37:ff:b3:d4:51:a6:7c:a6:
         0d:0b:65:e4:d7:b1:96:b5:e2:47:b5:5e:8f:83:d0:64:73:84:
         a8:fc:77:7f:6a:b3:06:1f:c3:41:aa:51:bb:39:68:d8:c8:2b:
         1e:ef:a7:ce:4e:c5:0b:40:3f:ea:0b:ef:59:ab:1c:5d:09:58:
         0c:fb:10:b8:43:f5:05:f2:b3:0d:c8:7f:63:f6:86:b8:22:bc:
         de:ba:3e:74:64:fe:66:cc:36:64:2b:27:28:0f:ed:35:41:4a:
         73:3d:8b:03:5c:90:e4:9b:db:75:14:0f:a7:b3:43:7e:09:24:
         8c:49:99:c4:91:03:60:60:5f:31:07:a8:35:ec:ae:1e:e1:8a:
         47:44:f4:c4:6a:89:70:fe:85:0d:b2:c9:c8:f3:06:45:72:fe:
         2b:0f:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:10:06 2025 by rpki-client