This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
File:                     CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json)
Hash identifier:          jkeZuQVCmj4QygyBPEwGyAp+UlnENfnbNCQlBkav2a4=
Subject key identifier:   B0:19:2D:C7:A1:DB:46:F9:3A:EB:75:76:F8:68:C6:9E:72:B9:75:A9
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Certificate issuer:       /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
Manifest number:          0243
Signing time:             Sun 21 Dec 2025 01:02:55 +0000
Manifest this update:     Sun 21 Dec 2025 01:02:55 +0000
Manifest next update:     Sun 28 Dec 2025 01:02:55 +0000
Files and hashes:         1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: hNUn6vvHxDBkBDKjBaNvuSX9Rg1TOz2H/qsxuukM46A=)
                          2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: 8+VuZ7fIxTmaLVYpnHMJUk/ecoQHiqToC0QiVIOWMis=)
                          3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: UKZjo7nlv5xaEfM2Q5iGETEP+0bko/kMccsOgiKgCVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
                          rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 01:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
        Validity
            Not Before: Dec 21 01:02:55 2025 GMT
            Not After : Dec 28 01:02:55 2025 GMT
        Subject: CN=6947473f-5bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:19:37:91:87:8e:6d:65:4f:59:29:45:85:
                    0d:b2:04:ee:cf:93:d1:79:60:c2:41:f9:69:f1:52:
                    82:d2:cc:9f:9d:1d:a3:dc:86:50:c3:b9:bb:bc:a7:
                    a7:d8:f6:87:cb:6e:dc:ac:f8:6b:87:9c:e7:43:8d:
                    e1:10:b8:fa:d9:6a:12:15:0e:f3:9b:fa:29:0c:f4:
                    64:c4:19:84:50:2a:1a:ed:8e:ca:6a:b4:b5:61:fb:
                    9d:48:71:16:17:cc:bd:be:1d:08:6f:4e:7d:95:dd:
                    05:a5:13:8a:21:b8:e5:fa:d2:0d:31:fa:0b:e6:8b:
                    11:b2:cb:3a:50:46:76:47:c8:7d:80:fd:54:2d:81:
                    da:f1:27:a1:fa:36:72:d9:3f:05:8a:c3:fb:4a:ac:
                    0a:da:a1:06:ec:09:a1:6e:7a:d1:72:59:b6:b4:63:
                    cc:d1:83:be:50:95:7e:bd:ba:5a:61:88:6d:b8:d1:
                    ac:f3:31:cf:e0:7f:67:0a:8e:75:c7:b2:5a:66:e2:
                    cf:b7:0f:58:8b:03:4f:ca:f8:68:c3:ae:54:3b:a4:
                    eb:a2:01:40:75:58:e2:e5:2d:72:5a:28:b1:21:33:
                    5b:e2:39:62:0a:5f:9a:69:93:73:74:6a:df:00:35:
                    19:e4:c7:93:ac:71:1d:18:c0:28:3a:35:07:50:2b:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:19:2D:C7:A1:DB:46:F9:3A:EB:75:76:F8:68:C6:9E:72:B9:75:A9
            X509v3 Authority Key Identifier:
                keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6e:7c:31:f4:f0:d5:3f:db:a8:7e:73:f3:92:71:af:bd:84:
         31:83:ed:52:33:e3:45:02:1c:e7:11:38:16:6c:05:5e:ba:ee:
         69:a3:b2:b0:38:ca:e1:a7:2f:cc:65:f6:9d:09:c4:89:51:81:
         da:04:73:c3:3a:ab:f3:bb:50:3d:fc:89:fc:cd:17:14:57:c3:
         14:e2:0d:f8:63:4c:dc:69:43:01:32:e7:22:55:de:e7:29:58:
         0f:9b:18:ad:08:8f:81:b1:67:4c:47:6f:7c:a8:ee:01:0f:23:
         26:26:5b:d0:a5:e5:d0:80:11:84:9b:3f:64:9d:1f:5c:f9:8b:
         d0:44:26:df:1d:7a:b2:46:c7:37:df:19:25:2b:ad:68:b4:46:
         df:b8:f0:4b:1a:a5:5f:fa:31:28:5e:c0:d6:b3:55:39:ab:12:
         79:89:7e:a9:74:41:66:47:e6:93:70:a6:25:4e:d8:51:ec:48:
         9f:1c:12:10:7c:03:11:1c:3f:fc:1b:73:d0:7f:77:89:90:33:
         08:de:f1:13:91:13:24:7e:6a:ca:2c:14:73:cf:f9:ed:da:2d:
         1c:81:0a:fd:de:9b:88:9e:41:e5:e6:a2:af:1c:e7:9c:b4:60:
         78:f1:a3:b8:6d:8d:d4:9a:93:fa:76:8a:f3:93:01:03:8f:f9:
         c3:84:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 16:03:02 2025 by rpki-client