This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
File:                     P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json)
Hash identifier:          7CA4NP9wyeERsZ/j7BREkwzmzYyb1l3yT2qPYmMXM0U=
Subject key identifier:   4D:89:C9:81:7A:5F:89:77:5C:FC:AB:29:E6:98:41:17:3F:94:53:6A
Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
Certificate issuer:       /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Certificate serial:       1831
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
Manifest number:          1818
Signing time:             Sun 28 Dec 2025 16:18:41 +0000
Manifest this update:     Sun 28 Dec 2025 16:18:41 +0000
Manifest next update:     Sun 04 Jan 2026 16:18:41 +0000
Files and hashes:         1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: RTL9qHadUoh5F8RFa80j9vNVMyZIUeiMQbJLx7q3CC0=)
                          2: 9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa (hash: WA77dp8CFAMTuFtYEp44sxYc2n+DFG5Sigw0CHNE2Bg=)
                          3: D9C4471C32D911F0B3466E0BC4F9AE02.roa (hash: kEqVolPWbZYybXeWnS2WqFsHodl52XHMAsJNtlbgCXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
                          rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 16:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6193 (0x1831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD4DB, serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
        Validity
            Not Before: Dec 28 16:18:41 2025 GMT
            Not After : Jan  4 16:18:41 2026 GMT
        Subject: CN=69515861-9c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:c4:73:d4:aa:20:2d:d3:f6:a7:56:96:54:
                    fc:13:5a:fa:df:16:8d:d1:3e:7d:8b:41:3f:ba:81:
                    6c:29:0a:f5:49:21:7d:6a:bc:cf:4b:4d:0d:9e:2b:
                    55:09:25:62:52:58:a5:a5:5c:33:84:d1:13:95:df:
                    e4:a4:d3:81:22:4b:1c:33:d2:c9:c6:59:01:eb:76:
                    e5:ea:ab:9e:86:b1:4f:e1:0a:73:56:12:78:cc:37:
                    b7:97:6e:7d:fa:c6:de:6d:ae:c0:38:87:13:3a:83:
                    a0:03:0b:2d:54:5d:7a:cb:6f:06:ee:c2:a2:91:94:
                    f0:71:35:54:77:3e:a9:c2:f3:a6:1b:8b:e5:b2:a0:
                    27:2f:14:aa:1b:1d:36:36:82:3f:4a:e0:40:5d:6f:
                    d5:2d:85:9e:41:79:b0:95:e4:0d:34:62:12:fa:0a:
                    e9:e0:0a:e2:ca:46:32:5c:8f:f4:54:cb:97:0a:ea:
                    57:93:1b:86:75:38:b7:8f:77:d7:67:1d:9d:66:5f:
                    83:5f:bb:44:e3:67:de:48:8d:5b:6e:87:ca:95:c3:
                    82:ef:37:96:33:1a:6e:11:3f:8b:49:bd:78:b7:1b:
                    3c:3a:2e:4a:50:b1:dc:c2:41:00:5a:13:be:cd:f9:
                    0b:56:20:46:da:40:c5:9f:26:cd:d9:35:e5:95:a9:
                    65:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:89:C9:81:7A:5F:89:77:5C:FC:AB:29:E6:98:41:17:3F:94:53:6A
            X509v3 Authority Key Identifier:
                keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1d:a8:1d:43:f6:15:cb:a6:25:f6:d3:72:9e:e8:4a:0a:34:
         74:86:f6:d4:b0:8d:f0:7d:34:4b:07:3e:ba:0a:fb:b3:78:34:
         eb:ae:19:ab:16:de:38:f4:df:93:1b:ae:46:e5:2a:84:09:91:
         ce:18:1d:81:13:ab:64:2b:7a:5e:3a:4a:73:05:cb:94:43:f8:
         40:b7:73:07:13:f9:d6:79:e8:db:51:ef:35:aa:72:ff:e6:b3:
         bd:e3:a0:96:82:3d:13:1e:f9:f3:ee:7f:3f:13:79:16:85:f6:
         08:bd:06:a1:80:84:53:47:03:75:cf:5a:d0:b5:f6:d2:a0:6b:
         98:bc:40:6c:17:66:22:c8:97:d6:8c:54:40:6c:1f:0c:f5:40:
         77:55:da:23:ab:e7:88:f9:9c:4d:91:07:8c:c6:61:9a:4c:86:
         3a:13:71:7f:2e:5d:0c:82:ab:b8:38:20:e2:38:6d:22:3d:4d:
         86:eb:47:8e:7c:4d:27:18:c6:ec:98:dc:42:43:2f:1e:aa:71:
         9f:d5:95:15:ab:1b:f1:c2:2b:90:43:b4:65:40:71:c6:43:01:
         1d:4e:84:39:db:14:a1:53:8e:52:79:55:81:bc:02:4d:e7:9d:
         b7:8b:b9:3d:b2:ec:08:70:34:8e:82:81:b1:ca:fc:4e:4e:1e:
         8b:e0:f6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 15:01:45 2025 by rpki-client