This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
File:                     78WCsqPLLBDooxZW548EvNW8UxA.mft (raw, json)
Hash identifier:          jkrrLDZY/H3ASXtaX5RONNOZzvjW+KQIQ4BtzrWhX4k=
Subject key identifier:   DF:E6:0B:48:C5:68:0F:83:C3:27:56:9A:F9:AD:7A:18:56:D3:B5:1D
Authority key identifier: EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10
Certificate issuer:       /CN=A91D09A2/serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310
Certificate serial:       06BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
Manifest number:          06B5
Signing time:             Sat 20 Dec 2025 21:36:21 +0000
Manifest this update:     Sat 20 Dec 2025 21:36:20 +0000
Manifest next update:     Sat 27 Dec 2025 21:36:20 +0000
Files and hashes:         1: 78WCsqPLLBDooxZW548EvNW8UxA.crl (hash: 5wi2IjFDztQsJ6yD7JGAR/pcXNEHJr+kpGg2WcFROW0=)
                          2: 59AD29B88C6B11EBA286C569C4F9AE02.roa (hash: 7mKCoY5AEtshNQV8l9pmhY0mvA9jDUflCVQDRZpIa2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl
                          rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1726 (0x6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09A2, serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310
        Validity
            Not Before: Dec 20 21:36:20 2025 GMT
            Not After : Dec 27 21:36:20 2025 GMT
        Subject: CN=694716d5-4978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:63:ea:ea:d3:24:c9:d5:99:76:c9:86:f4:
                    b4:5e:de:8e:a8:a4:e5:2c:27:63:1e:48:08:b3:29:
                    70:fb:c7:a9:a1:fa:91:6a:34:b3:f3:e1:03:f4:d3:
                    89:59:ae:30:bd:0b:b6:f7:44:3d:92:79:b9:86:df:
                    3e:02:45:77:2e:db:03:f5:b9:35:25:3a:c1:a7:20:
                    05:99:6a:af:49:6c:0b:d7:4f:bc:d5:54:b6:7b:83:
                    36:84:e9:af:e5:e4:81:14:68:4e:46:15:ba:cd:89:
                    00:5d:68:57:87:ef:de:1d:80:4e:3d:43:d5:41:5d:
                    f7:c6:7f:c5:a5:a1:02:27:0a:31:4c:3c:56:d2:45:
                    26:f5:f3:db:b5:a6:7b:da:f2:7f:a9:4a:81:a6:d9:
                    08:55:c8:ee:a1:c7:95:f5:47:10:3b:e9:60:cf:bb:
                    44:60:28:e3:18:13:74:2d:08:73:3a:1d:f2:55:19:
                    8a:a7:b1:6e:f8:a9:04:6b:e2:4b:06:c3:24:63:f6:
                    30:f7:c6:ce:8d:ed:7e:76:a8:95:7f:a5:53:88:41:
                    e3:88:0b:f1:2f:40:37:3c:5e:e2:77:56:51:5b:1c:
                    8b:13:e6:b6:d7:f8:59:fa:d8:b5:14:63:e5:30:42:
                    86:f2:ab:be:31:82:71:10:cd:4c:f8:f5:b4:53:13:
                    05:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E6:0B:48:C5:68:0F:83:C3:27:56:9A:F9:AD:7A:18:56:D3:B5:1D
            X509v3 Authority Key Identifier:
                keyid:EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:de:54:77:93:6f:84:88:70:35:71:5f:ea:55:e7:6a:f2:fb:
         27:6c:1e:79:ae:30:93:a9:66:39:de:a9:6a:be:de:f7:00:0a:
         4e:6c:4d:e2:d7:2b:12:a3:a8:af:51:06:5a:6d:36:75:e5:a4:
         0d:c1:14:ed:09:5d:03:62:fa:54:3f:2e:4c:85:62:d7:98:6b:
         c5:f6:88:78:18:12:4a:84:01:fd:57:01:23:5e:ec:dd:b1:cb:
         f6:cd:d5:13:19:5b:91:39:20:fc:39:52:e3:14:41:04:2d:b2:
         0f:f1:2d:15:a4:62:14:f2:09:19:5f:fd:20:f1:67:31:e8:86:
         de:17:bb:be:ad:3d:df:1c:4f:56:79:6d:d0:d4:94:6e:2c:b2:
         7d:20:fc:3d:bc:8c:f8:91:a4:7b:b9:8e:5a:9e:00:19:4d:0d:
         1d:ed:8d:8c:74:c9:55:a2:ef:5e:87:50:4a:2a:12:07:51:13:
         6d:53:db:6b:93:e6:d9:0a:81:b3:a1:88:55:17:77:e8:37:f8:
         0d:35:c8:93:dc:fa:1a:fe:ab:14:1c:82:ee:b8:6a:e3:76:5b:
         68:0d:4c:74:29:63:f0:15:b7:b9:7e:1d:57:dd:f7:99:20:5a:
         e0:9c:d3:ca:07:39:29:bc:52:fe:8a:b2:59:af:2d:12:e3:fb:
         54:98:4f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:33:44 2025 by rpki-client