This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
File:                     EOFLjOUpYxKozRGO6q9tt-Rup9s.mft (raw, json)
Hash identifier:          HLqQbPxQ3cudLBr2xiEv/yPxqIIhZ6SrOvRs+gsY+wA=
Subject key identifier:   48:DD:BF:62:7A:5A:99:AD:E4:BF:6A:F9:96:C1:76:DA:7E:45:39:03
Authority key identifier: 10:E1:4B:8C:E5:29:63:12:A8:CD:11:8E:EA:AF:6D:B7:E4:6E:A7:DB
Certificate issuer:       /CN=A913914F/serialNumber=10E14B8CE5296312A8CD118EEAAF6DB7E46EA7DB
Certificate serial:       0329
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
Manifest number:          0322
Signing time:             Sun 21 Dec 2025 00:19:29 +0000
Manifest this update:     Sun 21 Dec 2025 00:19:29 +0000
Manifest next update:     Sun 28 Dec 2025 00:19:29 +0000
Files and hashes:         1: EOFLjOUpYxKozRGO6q9tt-Rup9s.crl (hash: PnYhmKwF8yRnzpm7nrODEJOHeJUnlxui6TiPZrjDkUI=)
                          2: 8D57BBAAC0B811EEA3B71039C4F9AE02.roa (hash: WiH1FUNL9JStyDVza2qR9pAjLEVBVipRErQnDykrPNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.crl
                          rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 00:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913914F, serialNumber=10E14B8CE5296312A8CD118EEAAF6DB7E46EA7DB
        Validity
            Not Before: Dec 21 00:19:29 2025 GMT
            Not After : Dec 28 00:19:29 2025 GMT
        Subject: CN=69473d11-ebdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c6:3a:b2:b7:01:ef:46:29:61:a1:b5:07:ea:
                    dc:b3:88:33:da:94:f4:7d:db:e2:bc:8c:d7:50:23:
                    52:26:78:4f:97:87:5e:5a:36:bf:61:b9:d1:a7:99:
                    3c:4e:26:09:7a:f7:1e:05:46:a4:65:2b:3e:41:2b:
                    cd:9b:26:8a:08:fd:97:41:bb:87:72:ea:26:c9:e9:
                    8c:d4:d5:e8:5b:f5:e9:3a:67:cd:e1:ba:04:41:23:
                    2e:32:88:ab:5a:95:1c:5f:ef:a1:f1:4e:74:ed:4f:
                    6b:9e:16:e0:93:ac:3c:45:6d:18:2e:7b:1e:98:62:
                    e9:d2:a0:78:e3:3d:8b:74:f5:78:71:07:a2:45:da:
                    d6:13:93:3a:32:dc:7d:a7:52:3a:fd:5b:50:1c:7a:
                    d5:e1:f1:c2:73:d8:c0:61:c8:5d:b2:7f:1a:fd:70:
                    e4:bf:21:33:7c:08:d1:f0:46:4c:83:ca:ed:c2:35:
                    18:cf:45:9b:32:24:9d:e0:58:cb:5c:87:3f:ff:57:
                    09:aa:7b:16:ff:75:15:a9:62:6b:26:54:58:81:32:
                    da:a8:65:1f:b7:94:55:ed:29:bc:9f:a1:b3:e2:58:
                    1d:1d:9e:e2:73:df:9d:c3:12:bb:36:01:7d:43:b2:
                    e8:b4:bc:d1:e3:e2:86:5d:b8:d4:16:3c:c9:a6:40:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DD:BF:62:7A:5A:99:AD:E4:BF:6A:F9:96:C1:76:DA:7E:45:39:03
            X509v3 Authority Key Identifier:
                keyid:10:E1:4B:8C:E5:29:63:12:A8:CD:11:8E:EA:AF:6D:B7:E4:6E:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:dc:a9:ef:b3:c4:d2:d8:ef:8e:2d:41:85:c6:4b:c7:f5:
         f5:aa:0e:f3:f0:0e:26:20:43:f8:38:ba:60:e3:43:3c:d5:3b:
         28:bb:eb:a2:5f:27:52:eb:1b:82:90:8a:a4:ee:a1:78:a4:24:
         4a:fc:a2:b2:3f:51:d8:17:95:e9:03:17:f5:3b:51:4c:5f:fe:
         92:b4:bb:92:ad:64:07:8c:e9:e5:30:8c:05:51:99:c3:2f:f8:
         3e:db:bd:41:0e:ef:9c:9d:08:17:29:26:d9:94:5e:24:e4:61:
         4a:a1:1e:7d:ca:fd:09:ff:4b:7c:27:59:f5:cf:0b:d6:6b:4d:
         99:fe:6b:b1:ea:41:8c:a7:54:69:d8:05:9c:27:bf:77:12:04:
         12:44:c4:da:8c:33:88:3f:a3:4f:cb:fb:b9:bc:fa:44:99:4a:
         80:ff:37:b8:22:f7:95:6f:7e:7d:25:30:14:1f:39:02:e7:9c:
         f3:cb:37:85:bb:2f:9f:57:33:a4:4e:63:05:86:65:24:71:ba:
         dd:a4:e7:41:c4:c6:f2:23:3e:d3:ac:6a:85:23:6c:3f:70:5f:
         dc:e0:df:46:af:83:a8:34:ef:80:10:4a:bd:53:68:85:c2:9e:
         af:26:d9:35:c5:74:7f:46:6a:12:0b:fd:65:37:00:48:ff:aa:
         48:67:32:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:59:29 2025 by rpki-client