This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
File:                     u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json)
Hash identifier:          o8bLKlPlJ81YQWWf9alKl2a0+9nzzY+Bgyj0tCWCGw8=
Subject key identifier:   10:76:2C:98:DB:CD:10:11:A2:6E:CB:8A:72:D2:ED:AB:43:02:F3:0D
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Certificate issuer:       /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial:       06D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
Manifest number:          06B7
Signing time:             Thu 18 Dec 2025 21:23:24 +0000
Manifest this update:     Thu 18 Dec 2025 21:23:24 +0000
Manifest next update:     Thu 25 Dec 2025 21:23:24 +0000
Files and hashes:         1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: MY4xVBCorrxSiFvk0OVbLGFnzYncSIETpyKqT1eheHQ=)
                          2: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: 70dih3UbetFDHhvzgAW5HRGe9IoAJJpZ82sRIP7Wgmg=)
                          3: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: vlCfRwuEXWpklGTw9mykTEtjyJtV17L++aLuE6IkKdM=)
                          4: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: rzIFmJRJok4EYg0aJC0SnHdEv8CwANX+fTfQwm//Y1c=)
                          5: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: AfszR+FVK1ZkM+F0m7smimwn7uc2MrGS1mNtadoKTyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
                          rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747 (0x6d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
        Validity
            Not Before: Dec 18 21:23:24 2025 GMT
            Not After : Dec 25 21:23:24 2025 GMT
        Subject: CN=694470cc-de8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:10:50:ee:92:76:4e:a6:2a:4d:ff:55:a0:
                    c8:62:2e:c8:ff:34:b5:8c:f8:47:ad:70:ec:21:97:
                    d3:39:5c:52:2e:7a:52:4e:de:2d:ad:90:e6:e4:71:
                    c1:6b:79:d5:28:1d:48:66:09:c0:5e:d1:b5:58:1a:
                    fa:40:62:98:6a:15:75:30:72:4c:a3:4b:46:b0:76:
                    01:2d:a0:dc:88:cb:a1:c3:27:6e:f0:3f:c2:66:8d:
                    82:62:ff:d3:4f:52:60:dc:10:53:14:65:4e:33:3e:
                    3d:cd:7b:df:23:fb:04:d1:c3:e8:b7:f8:11:fb:39:
                    09:04:2f:7b:0b:5f:f8:0a:2a:f9:a8:76:6b:0f:8f:
                    41:31:d5:02:39:dc:60:c6:b5:31:6a:4f:5c:0c:77:
                    de:49:06:08:1e:88:29:59:27:75:9f:4c:d9:b0:6d:
                    0e:6b:01:cb:f6:f0:20:fa:9c:de:17:cb:a4:d1:7a:
                    56:91:ab:8e:25:60:3e:7e:f6:ba:ba:d4:d8:f0:82:
                    cf:d3:75:c7:da:fd:4d:5f:f8:7c:12:d6:3e:c2:0f:
                    42:30:fd:db:c4:b0:27:e1:a0:68:b5:8e:6c:27:06:
                    0a:68:70:48:79:61:50:5b:37:f5:07:35:2c:3e:da:
                    df:df:dd:73:41:b7:19:6e:02:9a:ab:bc:ee:18:28:
                    ec:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:76:2C:98:DB:CD:10:11:A2:6E:CB:8A:72:D2:ED:AB:43:02:F3:0D
            X509v3 Authority Key Identifier:
                keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:10:21:70:b4:fd:50:90:1d:4d:f5:6f:38:84:23:3b:d4:
         cd:3c:ad:2f:22:c6:22:b3:56:b5:c2:2f:c5:a6:2a:d4:ac:83:
         20:30:3b:7e:6c:4e:6a:13:de:bc:c8:bf:1e:b5:8c:dc:23:72:
         fc:84:09:bf:ea:42:0b:c7:dc:28:f0:f0:4c:40:48:1c:0f:25:
         93:cd:12:82:80:dc:6d:7b:43:93:74:07:d3:11:c6:f9:80:85:
         28:58:21:cb:34:4a:4b:5a:bb:9b:4b:9f:08:5a:69:91:ce:cb:
         52:8f:00:b4:fc:13:43:0d:e7:b4:fe:e9:fa:3f:b9:16:a3:10:
         68:96:2f:dd:0b:dc:8f:e8:f4:98:2e:3a:60:3a:ef:65:a4:cd:
         1d:c5:bb:54:d3:3c:13:d8:99:b9:35:e7:76:b7:99:df:88:8e:
         1b:6b:3e:d2:57:7f:13:70:53:71:ff:ee:5f:a4:cc:c6:a4:9b:
         da:df:4e:6d:c4:94:d7:56:c7:ee:ff:55:12:40:d5:89:41:f2:
         c8:4e:c9:3e:31:ce:a6:1c:2e:fd:43:48:24:1f:fb:d6:dc:19:
         4b:65:4b:cf:8f:48:ef:31:bf:af:68:42:d3:92:d5:76:a5:4d:
         3d:8d:19:b9:a6:7e:f0:92:41:5d:61:af:1f:d2:71:a1:16:0e:
         54:7b:b2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:27:37 2025 by rpki-client