This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
File:                     eiygmoVxKbGAQoJJIxJDPat15sI.mft (raw, json)
Hash identifier:          GegZlGdj+uyoJFYIyucagPZ/FptRWmluRSaS9XSfkB4=
Subject key identifier:   AA:4A:51:CA:19:87:42:8B:9C:F5:BF:B7:85:46:7C:B7:E4:44:A1:4D
Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
Certificate issuer:       /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
Manifest number:          0243
Signing time:             Sun 07 Dec 2025 00:21:50 +0000
Manifest this update:     Sun 07 Dec 2025 00:21:50 +0000
Manifest next update:     Sun 14 Dec 2025 00:21:50 +0000
Files and hashes:         1: eiygmoVxKbGAQoJJIxJDPat15sI.crl (hash: DSZR9+1NUlbofYZRwsD+da9f8y2x452IKNrpIwM+UC0=)
                          2: ECDFCD86656711EDBED7F511C4F9AE02.roa (hash: 8GAnqF7qkvBcRLnOyvdfMkTZTaujvV44HcYbxiEDYyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
                          rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112571, serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
        Validity
            Not Before: Dec  7 00:21:50 2025 GMT
            Not After : Dec 14 00:21:50 2025 GMT
        Subject: CN=6934c89e-6c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:7d:92:7a:4a:bd:98:75:05:58:23:64:58:
                    74:a5:93:c2:0e:5f:98:18:96:d8:b2:6e:ec:f2:ec:
                    f1:07:cb:6b:43:d1:1e:e5:99:30:e8:f1:04:96:55:
                    ec:86:39:29:89:11:11:e8:f3:2c:fd:e0:51:fc:ad:
                    f4:c2:32:ee:85:b3:a7:7b:bd:23:51:77:1f:47:8f:
                    a5:3a:ab:46:d1:32:5f:e8:55:5d:70:db:f7:12:14:
                    46:af:7e:18:2a:ca:da:4a:93:dc:72:58:ee:55:f5:
                    a5:80:4e:94:ff:f6:b5:7d:26:e6:b8:af:2e:87:22:
                    d7:16:bd:a7:72:4b:be:f5:b1:cb:7a:d7:78:35:20:
                    05:be:4f:23:55:6a:4a:07:18:4f:37:8e:8b:78:f9:
                    b4:e1:ac:06:60:f8:10:50:a3:f4:cc:43:7b:95:27:
                    5a:f8:a0:ef:49:2c:ab:6b:9f:68:0c:6d:80:fb:11:
                    6c:8c:ee:54:f7:bd:bf:15:f2:30:eb:5c:92:a5:b4:
                    bf:0a:5a:7d:f5:1a:1d:44:bb:6e:a8:d4:cb:4e:b2:
                    da:fc:f3:b0:92:98:87:df:7c:55:7c:63:a5:ac:3a:
                    4e:06:0d:f3:a2:93:1c:46:78:c5:ec:6e:42:d1:1b:
                    53:83:40:1f:55:b5:4d:f7:b1:aa:16:49:84:2a:40:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4A:51:CA:19:87:42:8B:9C:F5:BF:B7:85:46:7C:B7:E4:44:A1:4D
            X509v3 Authority Key Identifier:
                keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f6:cb:47:29:0a:76:fd:5f:60:db:a4:f0:2b:cf:d3:28:70:
         5f:71:09:ff:fa:88:d0:a6:b0:50:99:13:a5:98:e7:f5:1f:18:
         0e:ea:93:06:e1:2c:e1:36:25:64:a1:b6:e0:4d:50:4e:84:2a:
         82:9d:d7:10:8d:45:b5:c4:4c:ab:de:9a:1d:f1:2d:12:b8:32:
         86:6e:f2:d9:3f:12:35:dd:65:b1:e0:bb:da:a7:7e:1c:21:54:
         86:9b:b9:f2:5b:a9:e4:14:27:30:f4:6b:11:bc:85:70:76:f4:
         be:e4:c6:c3:1f:8e:75:d1:df:81:e7:86:70:11:8e:c1:78:ad:
         d1:6e:74:3d:c0:6a:bc:75:74:46:8a:d2:e1:79:d2:bf:2c:bc:
         fa:bf:7c:a9:89:24:7c:96:71:04:e7:dc:37:9a:25:0c:8e:de:
         14:f9:d3:78:f9:a2:74:e9:17:a0:1c:66:8f:89:57:6c:3c:c2:
         cf:26:5e:98:24:ac:65:0d:5e:24:af:2a:4d:5f:46:8c:47:15:
         47:0b:8a:a5:db:88:f8:13:e4:b5:2b:d6:7e:3b:9b:13:77:2c:
         7f:a1:31:0e:a0:09:d9:b2:5c:01:ca:1f:53:16:08:eb:c4:4f:
         16:32:5f:14:2a:5b:54:db:fa:4e:ed:61:88:04:60:52:d3:23:
         c5:83:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:29:25 2025 by rpki-client