This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
File:                     IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json)
Hash identifier:          Nn21CoAFDQ4RiNUPn3mbB4WthWfsKj/OtWHtGrmiYzQ=
Subject key identifier:   60:81:29:4B:41:32:C6:9F:48:72:75:5B:7C:1D:13:40:4E:79:C9:E4
Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
Certificate issuer:       /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
Manifest number:          0215
Signing time:             Fri 05 Dec 2025 00:35:24 +0000
Manifest this update:     Fri 05 Dec 2025 00:35:24 +0000
Manifest next update:     Fri 12 Dec 2025 00:35:24 +0000
Files and hashes:         1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: 3a9rB5cslWA0jcD4nja8N9SBt1EzfSx5NeSMLJATqvE=)
                          2: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: d/kODO73Q/KifMio6xDH+g4+aS9A4hPWbQYW6hwYowo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl
                          rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912905D, serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
        Validity
            Not Before: Dec  5 00:35:24 2025 GMT
            Not After : Dec 12 00:35:24 2025 GMT
        Subject: CN=693228cc-deb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:04:69:19:d3:57:27:75:87:18:9a:16:19:
                    5b:85:cf:19:6b:96:d4:d1:ec:84:26:5e:a5:57:65:
                    c6:0a:a5:88:da:12:ab:c7:ab:af:91:1f:2d:89:df:
                    fb:cb:ee:66:fe:e8:ac:e3:a0:68:51:3f:0f:3c:cf:
                    ca:4b:f7:1b:d8:d0:be:45:1d:20:bc:75:b4:c5:72:
                    89:20:7a:f9:9a:3a:0d:8a:90:0f:6b:56:67:9b:a3:
                    41:85:40:cd:9f:33:3e:d8:f6:9f:cf:ed:a9:f2:31:
                    5f:b5:e2:7c:f4:40:1b:2c:63:82:db:06:ce:73:a8:
                    5d:13:90:aa:5e:83:89:04:de:73:8e:14:f0:ee:f6:
                    fb:79:47:8b:9a:71:c8:70:8b:ce:85:f7:64:9a:11:
                    4f:ec:42:5f:77:2c:3c:a1:8f:50:df:15:95:f4:56:
                    78:16:1e:3f:fb:10:cc:d3:19:57:84:1b:ef:99:32:
                    d3:6c:72:ba:a1:52:55:88:bf:68:37:b0:37:49:c8:
                    9f:ea:94:0c:b0:e9:d2:1f:d3:3f:7c:2b:9c:b2:73:
                    45:31:e1:e1:11:5b:46:b5:e7:fd:30:e6:fe:1a:64:
                    d3:f9:70:e1:dd:46:10:1f:8a:a8:ab:ec:92:e9:71:
                    03:cf:2f:a7:f3:f8:f4:f9:2b:b2:02:54:b1:13:8e:
                    d4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:81:29:4B:41:32:C6:9F:48:72:75:5B:7C:1D:13:40:4E:79:C9:E4
            X509v3 Authority Key Identifier:
                keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:09:fa:bf:98:83:ba:fe:1c:d5:aa:df:1b:7e:2e:b7:d8:64:
         83:d3:7e:c0:8c:0d:0a:24:3e:5e:73:3e:09:6a:a5:4b:78:6e:
         d7:02:27:65:72:2c:bb:ee:dd:62:3b:f8:7a:19:b9:28:9b:76:
         f2:ca:59:07:b0:de:9d:7a:ca:f9:5f:d9:d7:7e:c0:58:41:c5:
         d8:80:07:d3:c4:fa:bd:6c:87:01:93:d2:9e:f2:fd:0d:8d:db:
         5a:5a:29:e5:2a:a5:e8:a0:1c:96:d3:e0:19:19:d1:d2:36:67:
         54:e4:96:87:52:f6:16:0e:4f:83:9d:ae:3b:8c:26:e5:08:05:
         a6:0e:47:77:23:bb:21:c8:62:52:e3:a7:fe:b8:b9:01:2d:f3:
         80:08:67:60:63:f4:a0:54:ce:7b:26:2f:5a:18:dd:92:af:fe:
         97:f6:d8:15:d9:aa:2e:08:f7:f6:31:eb:10:2a:18:87:bf:0a:
         c2:30:f9:f8:b5:b2:95:3a:39:77:f7:57:cc:34:30:7b:f9:91:
         03:c5:09:93:09:86:e4:81:c9:b4:17:bb:4d:8a:e9:04:ea:15:
         ad:8b:60:04:1e:26:cd:05:64:26:99:44:ef:ab:3c:01:c2:33:
         a5:2e:dd:4b:0f:31:80:d7:30:ba:88:8e:a8:aa:60:6a:a1:49:
         77:84:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:17:39 2025 by rpki-client