This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
File:                     e3T7MiZmknZU8foeyLcJwwU1UOM.mft (raw, json)
Hash identifier:          zjS+aQfnH3xlOyxndnnlMbY/qSgPD+f6NK8iGNMb9ak=
Subject key identifier:   64:B4:49:62:16:B4:0B:6F:D0:B3:FE:68:33:2E:84:8D:B8:38:00:D1
Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
Certificate issuer:       /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
Manifest number:          0E
Signing time:             Fri 19 Dec 2025 06:57:57 +0000
Manifest this update:     Fri 19 Dec 2025 06:57:56 +0000
Manifest next update:     Fri 26 Dec 2025 06:57:56 +0000
Files and hashes:         1: e3T7MiZmknZU8foeyLcJwwU1UOM.crl (hash: 6vx3ggjEQWc/nF4PKVZ91rhjefABjlrdPLfcFqWKh50=)
                          2: AC465D48D02211F0A5535D5AC4F9AE02.roa (hash: 0Su3Xy3ETeqv2p9otS7nhMUjS14WdCWUwds8sCIua50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
        Validity
            Not Before: Dec 19 06:57:56 2025 GMT
            Not After : Dec 26 06:57:56 2025 GMT
        Subject: CN=6944f775-37cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:a1:86:88:73:79:39:52:05:92:06:e9:86:
                    05:44:f4:ed:df:33:7c:dc:2a:47:80:62:3c:b6:52:
                    64:c6:e0:9e:ad:59:ce:5f:48:ed:87:cc:74:dc:4c:
                    6f:ce:02:cf:90:7f:18:8f:94:73:0c:68:76:a8:75:
                    02:e7:33:ad:4c:f0:2d:1e:60:44:85:93:4f:08:69:
                    54:69:35:ae:56:ae:6b:2b:22:7c:3c:88:5c:73:b1:
                    c5:03:ec:a1:3d:6d:97:2a:73:cf:2f:60:17:aa:b5:
                    0f:ff:31:e8:75:d7:20:e2:04:b4:b4:20:2d:38:89:
                    ef:29:0c:fb:8a:17:13:9a:1b:6e:05:45:b7:a7:a6:
                    a2:09:f3:db:7f:7d:65:2d:4d:3a:62:98:1d:1e:22:
                    23:76:b8:24:45:2f:d8:2a:56:1d:09:f2:04:a1:10:
                    e8:7e:02:09:95:61:72:22:f4:7c:b2:51:61:38:ce:
                    9e:65:e2:30:db:c7:3d:3a:7a:d8:b0:46:96:bf:61:
                    6d:5f:c7:e3:4b:fb:70:f5:10:d2:1f:12:5e:60:5b:
                    c8:b8:fb:d6:f7:2c:81:80:12:8a:c6:5f:f3:8f:59:
                    30:f8:41:43:67:fc:23:bb:44:30:ef:9e:68:c6:e1:
                    e1:af:58:7b:ab:c8:7a:71:bf:f4:59:db:c8:73:09:
                    65:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B4:49:62:16:B4:0B:6F:D0:B3:FE:68:33:2E:84:8D:B8:38:00:D1
            X509v3 Authority Key Identifier:
                keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:ed:36:2e:1e:31:b0:fa:ce:a6:0d:19:c5:cc:54:a5:d9:d5:
         b9:d7:41:9a:28:f4:6b:17:4e:49:2c:9e:2f:88:d2:dc:91:43:
         e3:5b:97:de:4e:89:8a:4a:0e:4d:3e:0c:ab:15:c5:00:2d:3c:
         f6:57:e1:14:8a:a5:91:94:99:52:91:85:49:af:fa:13:7a:31:
         7e:41:0f:da:6b:c3:1e:c4:69:b9:71:46:24:67:c0:f3:29:4c:
         09:7b:70:78:9e:71:53:b4:1a:53:5d:9d:de:52:1b:51:3c:13:
         12:9b:92:00:0b:5a:26:06:fd:a1:09:a7:9b:ce:a6:38:9e:66:
         a6:8f:48:3f:6d:64:fb:d3:34:cd:0e:7f:4b:b5:ad:7d:02:9c:
         0a:bb:02:29:ba:34:8a:5a:22:58:7c:a0:50:ed:7b:0a:da:bf:
         35:3d:63:54:5b:85:85:5f:c5:9e:9c:50:b7:70:01:5b:a9:8a:
         ad:48:cf:e9:98:e0:0f:df:d4:b3:c0:5d:6f:18:1c:bf:09:f2:
         c2:4d:05:ac:9e:51:22:a3:49:c4:cb:9d:e5:d8:e3:58:a3:a5:
         d0:f8:38:71:8a:64:be:0e:47:f7:d5:44:19:54:b2:cf:6f:f7:
         ef:29:67:cd:31:7a:6f:03:41:25:06:d5:91:26:ee:1d:f9:d0:
         d2:1a:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:02:24 2025 by rpki-client