This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
File:                     77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json)
Hash identifier:          ZRkhFdgcf5Lb48dmgX00N1vetjlmAkoOcReouA9IJLE=
Subject key identifier:   8D:6A:E1:56:E5:75:55:86:53:C6:FD:C3:94:6A:A1:E5:AB:96:D8:D8
Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
Certificate issuer:       /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Certificate serial:       0C84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
Manifest number:          0C7D
Signing time:             Mon 22 Dec 2025 18:05:41 +0000
Manifest this update:     Mon 22 Dec 2025 18:05:41 +0000
Manifest next update:     Mon 29 Dec 2025 18:05:41 +0000
Files and hashes:         1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: 5wh3SGRkINbaMaXdYcxru15iV5IcdSRC9WdU4PAjYtk=)
                          2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: WgtMqOXutoCTVgnfA2uL+HiTE6KoWpCNsapDLYeBrco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
                          rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3204 (0xc84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
        Validity
            Not Before: Dec 22 18:05:41 2025 GMT
            Not After : Dec 29 18:05:41 2025 GMT
        Subject: CN=69498875-471c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d3:3c:8b:92:47:db:23:9b:e8:81:36:39:91:
                    e4:89:c9:31:f1:d1:90:ef:47:31:61:e6:e3:05:48:
                    03:1a:fc:e8:02:3e:9f:e8:b2:18:7b:72:66:df:77:
                    54:be:ef:7b:30:bf:33:a7:1d:33:9d:b3:c3:42:e7:
                    b5:89:b7:e5:bf:c9:bb:05:85:45:9a:57:dc:d4:62:
                    a6:f2:b1:b1:ac:a1:89:4b:a5:98:0f:4b:bf:42:12:
                    fc:06:6e:65:72:a5:32:a5:b9:2b:1c:50:b0:b4:68:
                    d7:51:b9:2e:4c:93:c9:d6:45:f1:3c:6b:a3:89:4e:
                    a9:45:c6:eb:89:a5:93:db:81:bb:6c:b0:be:ee:ed:
                    e3:94:3b:aa:69:b6:21:b2:57:b3:09:f1:90:da:c4:
                    c8:c0:8e:ae:66:7e:fe:66:61:0c:36:e9:04:95:88:
                    2e:77:12:90:f1:49:15:78:89:e9:aa:3a:25:a1:f9:
                    7d:e8:8d:67:fc:6a:69:eb:4f:16:4e:84:d1:84:c7:
                    c4:d7:a5:f6:a9:25:e9:89:d7:78:2b:99:1e:0f:83:
                    d0:b0:08:2d:b9:95:b6:07:aa:26:fb:80:94:7b:b3:
                    a6:03:dc:1e:ba:95:52:ef:a6:68:70:a3:c2:0a:09:
                    ca:5c:24:ed:aa:a1:99:79:22:d7:ff:8a:39:09:93:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6A:E1:56:E5:75:55:86:53:C6:FD:C3:94:6A:A1:E5:AB:96:D8:D8
            X509v3 Authority Key Identifier:
                keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:58:52:b3:1a:c2:b3:2c:f6:ed:6e:ba:5d:39:00:e5:20:85:
         bb:68:18:c6:3e:de:7b:a5:2c:3a:0d:ee:5b:3a:d8:d7:83:ba:
         b3:80:70:83:b1:a9:70:f5:2a:58:0a:34:64:69:2b:42:7f:0b:
         f6:c4:e0:0a:bf:15:88:d3:3a:23:fb:f6:49:a5:58:c7:96:e3:
         46:89:14:8a:24:d0:c0:17:42:9e:2c:97:83:23:d9:46:03:ae:
         7b:d6:12:52:9c:f0:47:02:97:49:36:a3:5f:e4:04:79:73:ea:
         59:20:2c:2f:67:72:77:f8:cf:59:42:47:d8:ec:d5:e7:23:2f:
         2e:af:e5:2c:00:03:49:3d:f7:a5:89:6c:4f:3a:27:47:0a:ea:
         64:f4:19:62:5b:e1:a5:0f:79:39:21:92:62:69:12:13:12:7d:
         94:f2:3b:ad:b6:6b:ca:5b:01:79:d4:85:0e:22:b7:46:74:7a:
         56:96:ac:71:e4:e6:2b:c2:b5:98:54:0f:4d:24:1b:55:fe:58:
         74:0b:af:33:b7:33:22:92:33:44:4c:3e:b1:38:b5:08:bd:16:
         6b:18:51:80:94:67:70:a3:52:2b:8f:a9:2f:da:4c:34:86:cc:
         c3:d2:88:ee:10:74:a3:7e:74:56:db:25:65:6b:17:8c:64:80:
         8e:10:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:42:20 2025 by rpki-client