This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
File:                     r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json)
Hash identifier:          Cvgl0YlOuwsW+ytj4pkWqNctFvxqd4nUrSZfVdR8+PA=
Subject key identifier:   E1:D5:86:50:77:80:95:07:BD:84:72:69:8E:AF:F1:C3:89:34:CE:A3
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Certificate issuer:       /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial:       14E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
Manifest number:          14CB
Signing time:             Sat 20 Dec 2025 16:37:47 +0000
Manifest this update:     Sat 20 Dec 2025 16:37:47 +0000
Manifest next update:     Sat 27 Dec 2025 16:37:47 +0000
Files and hashes:         1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: IwauhkSc8e0h3nuczmI05Pn/7dofs2FLuaznTvSLrgs=)
                          2: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: NmgnSbqhNrVMFG4Dg8/Hr5BSKbryNdhaQqVsZnbZ5iU=)
                          3: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=)
                          4: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5353 (0x14e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
        Validity
            Not Before: Dec 20 16:37:47 2025 GMT
            Not After : Dec 27 16:37:47 2025 GMT
        Subject: CN=6946d0db-61ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:b2:84:da:60:1b:96:4c:46:85:e0:38:4e:
                    6f:e6:a8:fa:a6:64:19:20:4a:3a:93:fb:eb:03:26:
                    07:8e:35:64:e2:ed:ed:eb:c8:b3:7e:97:4b:b2:85:
                    0a:a1:37:75:67:52:1b:5b:e3:e1:83:fd:0f:c1:f2:
                    ba:10:7e:ea:be:45:da:95:82:58:3b:a0:4c:1d:71:
                    f3:f9:4e:b4:a8:6c:85:cd:09:fa:37:41:d0:f7:4f:
                    63:ca:ee:23:d5:20:69:5a:2d:86:0d:1d:fe:40:7f:
                    df:40:4d:da:53:93:b1:0b:6b:f9:33:b9:a1:f9:35:
                    66:2a:d2:ac:82:a4:82:66:da:01:25:51:a6:41:e9:
                    3b:77:86:f0:27:d5:5d:2b:29:3c:5d:73:2a:b1:f6:
                    d2:26:f2:07:8d:be:59:53:25:3e:c2:18:76:c6:ef:
                    e9:e3:d7:d7:c1:57:d4:08:f5:47:83:dc:b2:f8:03:
                    29:87:be:a3:af:fe:c8:b6:53:db:86:93:07:55:d8:
                    6a:90:db:c6:5b:29:13:e2:86:98:e3:f3:6d:f5:cc:
                    88:1f:f7:83:20:c7:56:b5:ff:dc:c0:28:20:21:df:
                    4a:51:75:ef:aa:25:e6:ed:52:43:97:c9:0c:5c:79:
                    8e:14:49:ca:85:30:55:9f:46:37:d4:ce:16:1e:6d:
                    a4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D5:86:50:77:80:95:07:BD:84:72:69:8E:AF:F1:C3:89:34:CE:A3
            X509v3 Authority Key Identifier:
                keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:99:29:1c:2b:ef:2a:1f:b6:4a:8e:f4:3f:80:a5:75:89:68:
         d4:a0:81:58:69:20:a7:e1:78:f4:39:a2:76:30:98:62:e4:19:
         91:21:bc:7c:3e:2b:6e:f4:36:6d:ce:21:7c:83:e5:d9:7e:d6:
         af:90:1b:9a:80:33:e6:d3:09:39:24:89:a6:49:d6:3d:48:2e:
         ce:5e:79:88:a2:84:74:a5:3e:be:5d:9a:17:13:4d:00:7a:3c:
         80:4b:fb:12:ab:85:bd:72:49:e9:69:17:d7:10:79:b0:8c:a7:
         99:97:c8:47:3c:97:96:e6:3d:75:93:89:00:03:f4:21:f5:82:
         35:b4:a4:7d:e8:2a:20:3f:0a:87:ca:5d:fe:76:27:af:51:d4:
         47:e0:87:13:4e:5c:ce:d6:80:78:d1:43:78:82:90:3a:c8:02:
         b7:c6:3f:4f:2c:6f:5f:e2:73:7d:4e:67:09:f1:f5:8b:c8:58:
         57:03:ec:12:7c:5f:72:b1:ce:18:34:55:f3:64:d9:c5:94:b4:
         aa:0e:d9:e2:d9:57:7c:ab:97:cb:9a:03:8a:ce:57:29:4b:81:
         fa:8e:d3:14:5f:fc:5f:27:24:e1:2c:9b:bc:99:d1:fc:43:e4:
         71:e1:c5:02:43:61:f9:03:fd:35:e8:20:10:cb:e1:15:ae:17:
         a7:9f:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:27:23 2025 by rpki-client