This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
File:                     eLec-CdRhh8nml-lBJMVONrc2vo.mft (raw, json)
Hash identifier:          sqs+A0Ja9Emzv95fSXQgZOMd4kQA14Mr4tdUEA/JFfM=
Subject key identifier:   D4:AB:E8:CF:44:D8:A1:AC:71:B1:1C:50:E8:49:5D:EF:A6:CF:32:71
Authority key identifier: 78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA
Certificate issuer:       /CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
Certificate serial:       0398
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
Manifest number:          0390
Signing time:             Thu 04 Dec 2025 23:12:33 +0000
Manifest this update:     Thu 04 Dec 2025 23:12:32 +0000
Manifest next update:     Thu 11 Dec 2025 23:12:32 +0000
Files and hashes:         1: eLec-CdRhh8nml-lBJMVONrc2vo.crl (hash: sgP1zr0gI2RJr9az5vCmkOe8Xs5AEfmAmsMve7F55xE=)
                          2: C9445C48D54F11EF96DECA53C4F9AE02.roa (hash: aLju+AHmS9XyuF/jfNYBLdmqAJhvekhXBg4MZKL2R8g=)
                          3: 424653EEC6CB11ECB185E43EC4F9AE02.roa (hash: Pdt4SfTxuAaSTej4Nlx3fawAITW5S8qvG/E/FsJzkJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl
                          rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920 (0x398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110650, serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
        Validity
            Not Before: Dec  4 23:12:32 2025 GMT
            Not After : Dec 11 23:12:32 2025 GMT
        Subject: CN=69321561-6140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:82:9c:e7:a8:e4:b8:6d:32:7d:29:b6:31:
                    de:cb:1d:00:e7:b7:be:8a:60:37:ae:28:44:47:fa:
                    16:73:b7:66:f7:86:87:b9:84:52:cf:59:51:60:55:
                    16:db:ac:e3:90:84:0e:82:f2:02:fd:00:d9:c5:90:
                    05:fa:c9:c2:48:c2:0d:94:66:4c:ad:b0:40:8d:98:
                    c5:9a:ae:91:3d:51:57:c9:6c:b7:9a:88:f5:19:63:
                    07:4d:c4:d3:48:83:4c:29:dd:b4:01:7e:8b:07:63:
                    84:ef:54:ed:a5:38:6e:dd:17:6e:b9:a4:d5:de:e6:
                    46:d8:df:34:ef:73:0b:35:db:e2:08:cc:d4:71:dc:
                    82:e8:53:95:9a:86:b5:ae:b8:bf:9f:37:7b:49:d9:
                    a3:d7:af:f2:d1:81:17:28:73:c4:07:94:8e:9f:4a:
                    66:9e:fd:e6:92:1a:0c:77:53:3e:f1:b9:3f:02:d5:
                    70:ec:6a:75:70:36:d5:14:77:9c:d5:36:bc:36:d0:
                    0a:50:f2:e3:88:6d:b1:08:2d:b5:bd:9a:87:08:c0:
                    78:1a:35:77:be:7c:97:27:1b:f5:1e:e3:1e:f3:5a:
                    7b:96:ab:14:67:cb:6b:d0:89:3d:fd:de:97:ef:36:
                    3d:c7:3f:18:b4:57:bd:76:52:26:00:1b:3c:5d:93:
                    33:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AB:E8:CF:44:D8:A1:AC:71:B1:1C:50:E8:49:5D:EF:A6:CF:32:71
            X509v3 Authority Key Identifier:
                keyid:78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d1:0f:44:ce:be:da:a9:ab:42:7e:a0:c6:0a:97:bc:71:1c:
         28:7b:6a:91:46:ee:61:b7:00:29:39:56:32:9c:b3:4f:62:e0:
         a6:30:70:c6:e4:8e:a8:54:0b:96:2f:e5:51:ca:8f:5c:6d:c4:
         20:00:f5:04:ed:bb:4f:cb:c9:95:43:c0:4c:1a:11:67:f2:b0:
         e2:b7:cd:f2:87:a3:b5:79:bb:60:aa:88:01:7a:7c:9d:16:90:
         a3:d3:04:5e:e8:01:23:03:75:bb:f5:44:c0:68:14:06:b4:79:
         fc:d2:c8:5c:c1:64:bb:af:7e:b0:e5:2b:ab:a8:a0:26:7e:da:
         e6:f9:7d:54:00:59:26:be:60:a3:9f:dc:62:52:d1:5a:1b:24:
         8f:d4:3c:80:98:3f:17:58:fc:7c:b2:26:a2:6a:ec:23:29:ef:
         86:e4:88:81:e1:23:e1:fa:ee:65:f0:c8:1d:de:18:ec:1e:e8:
         c9:bb:a4:79:d2:49:ff:40:97:ba:ff:b9:7b:ee:55:fb:f6:02:
         3c:60:15:1c:9b:19:64:8d:93:33:d7:6c:81:05:22:c9:33:6b:
         4e:46:8a:cc:30:b9:34:f4:70:9a:fd:b3:51:2a:d0:09:e5:d3:
         cb:e3:41:d1:d5:a1:80:8f:b5:04:cd:b1:0a:52:0a:ac:70:57:
         b8:6d:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:31 2025 by rpki-client