This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File:                     eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier:          k6SP4JVGaFUZ3IuldfxrCpUrLGwTrx9z3r8+tuS9N0I=
Subject key identifier:   A6:BD:ED:EE:BF:40:50:7C:90:86:E6:30:11:F1:8A:E5:F3:AB:38:DB
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer:       /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number:          D5
Signing time:             Fri 05 Dec 2025 03:43:50 +0000
Manifest this update:     Fri 05 Dec 2025 03:43:49 +0000
Manifest next update:     Fri 12 Dec 2025 03:43:49 +0000
Files and hashes:         1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: PBP9InUzMVqX8IbUzeXxpUDkVTPTTvScazAp+LUhpVY=)
                          2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: MvYbkMM7qX+K3Cl1XMK5DsKY9VO54145P/lZVkIO3Zo=)
                          3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: CBRfaNleeLhQbkhZ9Y/Gyu8j+qS/vePZy+tfvqG3Iy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
                          rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
        Validity
            Not Before: Dec  5 03:43:49 2025 GMT
            Not After : Dec 12 03:43:49 2025 GMT
        Subject: CN=693254f5-65ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:81:ad:64:3f:98:d6:27:a4:41:f8:d6:cd:
                    ff:a0:e0:de:d2:35:26:73:f0:73:5d:10:8b:e2:dd:
                    9a:0f:5d:96:f1:90:03:6e:90:44:a3:d7:b4:0a:84:
                    f9:67:2f:3f:b9:41:ec:97:8a:6a:30:46:1b:7c:43:
                    3a:a8:72:a8:36:16:73:91:3e:75:34:9e:5f:06:42:
                    3f:84:46:1c:3b:b6:e9:d0:b2:ad:01:de:67:9c:6d:
                    d8:0c:16:df:7f:0b:85:0a:0c:37:51:c6:8c:07:a4:
                    2f:15:3d:c0:5d:11:05:eb:0d:1e:6d:4e:87:40:02:
                    b2:8f:50:a1:23:8d:c6:c4:af:39:0a:95:47:71:7f:
                    2a:1c:b7:34:bd:dd:e9:45:f1:47:cb:32:70:98:ae:
                    99:a9:f7:75:7b:9c:ca:2b:fd:26:ed:49:06:d4:e8:
                    84:6c:0a:7b:73:c2:66:81:66:99:bd:2c:ac:01:2b:
                    c0:c0:c1:14:70:b9:2a:bf:46:af:75:20:cc:9f:aa:
                    d3:75:47:24:82:1f:f4:57:ac:72:31:97:6d:c8:a2:
                    25:dc:fd:55:2f:80:a1:cc:83:a2:e4:28:2a:7c:20:
                    12:0f:a4:6e:e2:12:78:3e:d9:3d:81:2d:b5:be:34:
                    8d:fa:54:13:e0:39:2c:7e:d4:b3:72:92:c2:38:c5:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BD:ED:EE:BF:40:50:7C:90:86:E6:30:11:F1:8A:E5:F3:AB:38:DB
            X509v3 Authority Key Identifier:
                keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:de:79:57:5f:22:d1:74:28:d4:dd:7e:a2:3d:78:f0:e1:65:
         91:c5:b2:8d:8c:bc:a7:2d:c7:59:0c:21:fd:48:38:b4:d3:ab:
         62:14:eb:80:12:6f:13:6d:08:e7:9f:3d:a9:82:18:ac:70:4c:
         0f:d5:82:47:8b:10:30:15:a2:a4:ab:30:77:db:76:c3:75:13:
         a4:a8:08:c7:c1:2b:17:cc:7d:73:98:34:67:d1:b3:a9:8c:a1:
         59:26:b9:7c:6f:26:2d:93:7e:5f:06:38:65:46:fa:cf:40:35:
         af:37:77:b3:f0:3d:e4:f4:01:77:93:04:34:ad:e1:0b:b7:8b:
         2b:82:f3:ed:1e:21:83:c6:75:17:5c:93:d1:ca:fa:a6:f1:87:
         a9:21:83:b7:f2:eb:ae:72:b2:b5:18:d2:0b:ba:26:f4:88:59:
         3c:6c:9b:fa:12:7e:2c:0c:a0:9d:1e:3d:2d:5c:1e:17:bd:c9:
         0e:28:18:42:ff:89:e1:a1:f4:a0:87:07:03:ff:42:6e:e0:2c:
         0d:6f:c8:e7:64:52:c0:b9:0b:e8:0d:55:d2:9d:30:9c:9a:58:
         d8:6d:9c:b3:b5:09:6d:ab:5d:30:cd:d1:74:01:bd:07:1b:8c:
         25:b0:7d:e4:cf:12:19:47:2a:89:cc:01:6e:93:b5:b6:34:77:
         53:ec:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:28:08 2025 by rpki-client