This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
File:                     ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json)
Hash identifier:          G6mlI5B1cs2+tcYKkIzXwu9fkgbHb2r7KhZ7Jlssz4o=
Subject key identifier:   E7:C7:87:2E:7D:33:39:5E:CF:47:DE:74:23:03:2D:18:7B:CD:4A:61
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Certificate issuer:       /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
Manifest number:          01DC
Signing time:             Fri 05 Dec 2025 01:04:37 +0000
Manifest this update:     Fri 05 Dec 2025 01:04:37 +0000
Manifest next update:     Fri 12 Dec 2025 01:04:37 +0000
Files and hashes:         1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: yOb4fHcqKqA3je1j6i7VqoEvQOJnS2U/iuvNbHOMc2E=)
                          2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: cgIQr0GieCik6XIQ9DuWPAAcXd8eAWq6OJRsIDCYebA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
                          rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
        Validity
            Not Before: Dec  5 01:04:37 2025 GMT
            Not After : Dec 12 01:04:37 2025 GMT
        Subject: CN=69322fa5-b01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:a6:01:52:84:db:c2:57:6e:0b:6e:47:ba:
                    ac:26:cb:3f:1f:46:66:30:15:2d:ab:12:43:ef:61:
                    39:51:24:a5:17:34:7d:60:54:ab:f2:9e:5e:94:f3:
                    36:db:52:40:1f:8e:b0:bf:df:3a:70:af:30:3f:03:
                    2a:a9:b0:be:27:56:93:74:ee:bc:1a:21:15:da:f3:
                    c7:8c:06:e7:83:0a:75:ba:26:68:9a:7a:fc:b8:5f:
                    20:2a:5e:8d:70:58:ab:01:c6:5b:fb:44:63:61:ac:
                    61:be:21:7d:e8:33:af:2a:64:58:58:c0:4d:b0:1a:
                    8a:8f:dc:58:32:a2:f3:5a:42:6a:21:d9:d3:12:36:
                    4e:13:af:e3:8a:b5:ff:3f:b4:a4:fb:1f:6c:9d:9a:
                    48:45:74:e4:c9:c6:b0:68:f5:72:6b:5a:b3:37:33:
                    63:11:05:87:8b:e9:7d:3e:1a:54:09:01:9a:fb:d2:
                    b5:bf:41:f1:e5:2b:68:26:2a:d7:f7:7f:e9:9a:9d:
                    c9:92:e9:f5:16:47:b4:b7:95:7e:ba:90:d7:1b:f3:
                    6d:03:92:15:bc:3f:17:74:8a:2b:8a:5f:21:58:1a:
                    28:3f:f3:7a:a7:a3:6b:e5:e2:7e:64:ff:52:72:7a:
                    2a:2b:b3:f5:41:8d:39:73:c3:e6:be:a1:b5:67:6b:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C7:87:2E:7D:33:39:5E:CF:47:DE:74:23:03:2D:18:7B:CD:4A:61
            X509v3 Authority Key Identifier:
                keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:0a:a0:a6:97:fb:e2:74:7e:ea:3a:63:c9:91:a1:c6:aa:
         ea:9c:53:f2:5c:fc:b5:e9:08:c9:3b:f5:41:a1:94:35:56:5e:
         82:91:87:10:11:be:8f:c6:47:6f:1c:61:86:1e:5b:bc:dc:45:
         fb:68:5e:5d:82:a6:78:39:5c:8c:80:cf:4c:43:6c:d8:66:3a:
         89:f7:37:40:06:a7:1e:80:ff:22:25:63:1a:54:7a:de:5e:32:
         a6:e4:7e:e3:68:0b:6f:ef:99:88:fc:32:ee:ac:ad:2e:bc:24:
         c0:45:b6:2b:f2:04:00:8a:90:2c:18:4f:1c:f8:c0:24:6c:b5:
         1c:6d:9d:91:21:7a:e5:b7:e1:28:97:7b:84:41:55:40:a6:0d:
         df:bd:20:7e:8d:93:19:be:12:6d:c6:6d:33:d7:ea:c1:0e:bd:
         98:7e:ce:c4:93:81:45:71:81:4d:5d:ba:4f:81:74:01:fb:e4:
         bc:50:d9:4f:f3:ef:7c:66:d4:f3:a4:b9:94:a0:15:3a:29:1c:
         0b:e9:ae:a6:dd:75:3a:c1:51:aa:a5:9f:a6:cc:39:43:fd:ad:
         3e:d4:72:9a:ab:7a:b0:8e:10:da:cc:f8:a7:95:92:d4:91:61:
         13:5f:2b:b4:92:85:54:1a:d4:52:17:63:0c:b6:f9:d6:17:5e:
         b0:e7:10:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:01:08 2025 by rpki-client