This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
File:                     EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft (raw, json)
Hash identifier:          SE43R/XHDpYHatRuSMSyn4D4KJ/MBKPqp7ayfnbZXGs=
Subject key identifier:   4D:22:27:5E:03:DC:9E:74:D2:0D:90:A1:1A:EB:15:1D:D5:2B:47:84
Authority key identifier: 11:43:4E:13:D2:A7:0B:13:51:82:F5:C9:CE:0E:59:95:BB:84:74:3C
Certificate issuer:       /CN=A913D208/serialNumber=11434E13D2A70B135182F5C9CE0E5995BB84743C
Certificate serial:       04C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
Manifest number:          04C3
Signing time:             Thu 04 Dec 2025 22:24:18 +0000
Manifest this update:     Thu 04 Dec 2025 22:24:18 +0000
Manifest next update:     Thu 11 Dec 2025 22:24:18 +0000
Files and hashes:         1: EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl (hash: u1B0QasD0H9wqAjw7AYSOYvdPXj2fkhNJ2HEpB7L/Sg=)
                          2: 9C0D9C2C4DF211ECB01A1042C4F9AE02.roa (hash: GHnF6i7M1wJiMCIU6p9YZwqjjEAkSVWafMM0uIW4wUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl
                          rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1225 (0x4c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D208, serialNumber=11434E13D2A70B135182F5C9CE0E5995BB84743C
        Validity
            Not Before: Dec  4 22:24:18 2025 GMT
            Not After : Dec 11 22:24:18 2025 GMT
        Subject: CN=69320a12-b786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:99:54:a6:6b:92:b8:14:29:7e:ad:77:1f:
                    86:7a:1c:c4:d6:40:d9:6e:d7:e6:39:01:de:07:29:
                    74:1f:39:3c:19:8a:78:60:a6:42:4c:45:a1:ef:b6:
                    9e:c9:70:3b:c0:f9:de:06:4b:9b:8e:c4:b3:32:be:
                    4b:35:90:7e:86:53:ed:3a:64:26:f0:d3:6a:74:e1:
                    61:99:4e:d0:f1:d3:19:20:d3:44:4a:c6:cb:ce:b0:
                    15:a2:fa:50:d2:ce:b2:b4:a5:bb:8f:09:69:ed:c4:
                    cb:5f:5c:66:4f:19:ea:90:f1:a1:d8:4d:ff:3a:e6:
                    23:9f:d7:8c:20:3f:69:4d:d3:3c:59:fa:3b:29:61:
                    13:40:60:3f:93:27:59:92:d9:7a:ed:1a:4e:32:01:
                    ca:92:a3:c5:21:99:da:03:6d:a7:04:f4:da:1b:18:
                    63:ef:7a:58:d9:cc:d2:0b:07:1a:c8:5f:e9:bd:ed:
                    a1:dd:b9:d0:ca:60:03:7c:f0:22:a6:52:4a:ec:19:
                    25:df:4d:bc:ee:e3:4a:9a:28:5e:61:87:7d:50:50:
                    52:0f:c9:f2:04:60:3f:9c:02:f4:4b:02:99:60:a7:
                    7f:1d:4b:ea:9f:d8:09:b2:68:08:49:d4:f3:54:a1:
                    89:78:02:1e:20:75:ea:36:aa:2a:7b:04:c1:ee:12:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:22:27:5E:03:DC:9E:74:D2:0D:90:A1:1A:EB:15:1D:D5:2B:47:84
            X509v3 Authority Key Identifier:
                keyid:11:43:4E:13:D2:A7:0B:13:51:82:F5:C9:CE:0E:59:95:BB:84:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:86:45:9e:0a:04:d7:2f:b9:08:dc:74:4e:3d:b4:f1:9c:
         86:54:7e:c0:a8:a2:24:0f:80:cd:4c:59:7f:a7:85:a4:3b:6b:
         a7:01:ef:8d:c1:90:49:66:43:bf:f4:36:fb:b7:76:61:77:63:
         cb:5d:60:62:eb:76:8e:00:89:55:5b:1c:c7:6f:e9:5b:79:84:
         a0:94:41:bd:96:ce:38:9b:6f:a9:aa:15:53:21:ff:5e:a3:82:
         65:31:24:94:a6:1d:86:f8:6f:9f:8e:fd:1f:e5:ef:14:b6:67:
         af:7c:7e:be:83:b3:d2:b0:5a:ee:f1:0e:46:dc:31:d9:36:ca:
         98:48:0c:68:67:20:ca:4e:64:3f:16:61:6e:bc:3a:44:0e:fa:
         a0:c4:3c:11:96:85:ce:b2:80:83:4b:35:1d:e8:1d:be:3b:de:
         62:98:55:4c:2e:10:e7:a9:2c:78:d8:d2:14:2c:7d:2b:00:41:
         7b:73:c0:da:58:b1:3c:be:5c:63:99:d8:b6:3b:47:46:28:e7:
         db:e5:67:70:c5:a0:4f:27:14:a1:d9:cd:9f:dc:fb:75:c3:bc:
         71:08:c5:b2:3f:0b:84:e7:9d:99:b1:c3:49:90:4a:95:6c:b5:
         b4:94:60:0d:1d:dd:b2:ec:19:e8:d3:3b:51:95:32:8b:1b:fc:
         50:0e:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:08:00 2025 by rpki-client