This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
File:                     eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json)
Hash identifier:          I/HZq56svVTAECi1B31hoI17b55F5aiawXwWZ4I9h4k=
Subject key identifier:   7D:31:77:85:3E:27:64:8C:10:05:9F:88:4F:00:80:DB:E3:F9:F0:72
Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B
Certificate issuer:       /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
Manifest number:          C7
Signing time:             Fri 05 Dec 2025 03:52:03 +0000
Manifest this update:     Fri 05 Dec 2025 03:52:03 +0000
Manifest next update:     Fri 12 Dec 2025 03:52:03 +0000
Files and hashes:         1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: 8LRxBc4QcA6LNOV6L1p25/uKe2+wox97X/W4MtuOOlE=)
                          2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: uf3h7x4X3w9L0qxsA/csqdSdJ4iieOaLJOms8tSWtWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl
                          rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
        Validity
            Not Before: Dec  5 03:52:03 2025 GMT
            Not After : Dec 12 03:52:03 2025 GMT
        Subject: CN=693256e3-c004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:77:0c:69:8c:69:07:d9:f2:56:93:46:fc:a3:
                    ad:8b:fd:20:0e:99:de:5e:c7:7d:c8:50:d9:4e:88:
                    89:4c:0f:5f:e5:45:f8:c0:f9:65:c0:f2:a8:75:4d:
                    8d:f4:9e:b5:52:c9:9f:04:5c:f8:1b:25:d7:a2:2a:
                    de:28:69:da:4b:14:fb:e2:8c:c0:fc:00:3a:30:19:
                    b3:47:f4:7a:10:08:13:69:56:15:1a:b3:43:52:5f:
                    7a:3a:bc:b4:d8:c9:b7:8f:92:5f:67:91:e0:47:b6:
                    7d:75:e5:fa:1c:fc:3c:79:78:8b:b2:f3:32:58:dc:
                    0f:c3:44:2f:d3:94:93:f2:9f:b0:62:2c:56:d8:fc:
                    5f:1f:88:2f:29:bf:18:c5:39:ec:90:1a:ff:05:cd:
                    98:c0:66:57:e9:2d:3b:aa:42:0d:50:72:f3:eb:df:
                    cf:e5:3a:2b:45:d8:56:53:12:42:d6:f1:78:65:5f:
                    f2:f0:4f:ce:71:fc:dd:ba:2b:28:87:f3:ba:58:9c:
                    a8:10:5a:19:e5:61:33:5c:87:75:36:98:f5:29:03:
                    89:21:71:63:1f:2c:c9:e9:49:40:7b:e6:f1:cd:4f:
                    f6:85:87:67:9d:73:ca:e2:51:57:70:da:5e:36:bd:
                    20:d8:8c:54:b3:ee:7b:aa:4a:0e:f4:91:c3:f7:2b:
                    62:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:31:77:85:3E:27:64:8C:10:05:9F:88:4F:00:80:DB:E3:F9:F0:72
            X509v3 Authority Key Identifier:
                keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:e3:2f:f4:84:f6:0a:1d:28:a9:60:3a:07:67:12:f0:66:
         d8:53:2f:34:59:b4:7a:1f:28:2f:b4:f4:97:e2:78:90:49:92:
         4e:42:28:74:15:dc:45:6d:48:3f:0e:fe:6d:49:f0:66:f3:6a:
         70:30:92:5e:e1:5f:f7:9b:c8:61:72:23:a1:ac:1a:e6:d2:66:
         32:85:39:f9:86:ba:8f:bc:2c:fe:a4:8b:23:bf:c3:6a:27:e3:
         cc:47:e6:1a:b4:c6:30:59:84:4f:e3:5b:13:5f:e8:66:74:cf:
         ac:76:e2:ae:0b:f9:c3:4a:96:d3:35:fa:50:f7:e0:b1:d8:da:
         22:95:88:b5:74:f8:88:19:0e:ce:98:95:f5:98:3f:51:b9:e4:
         68:99:0c:a8:85:f6:89:f1:42:04:11:88:75:ec:d6:4b:cb:54:
         9d:92:92:ba:a3:3f:22:48:74:d7:29:8b:d7:34:d6:ae:5b:29:
         4b:fc:4a:b4:10:8e:0a:8c:13:c4:c1:24:42:70:29:5d:1c:b3:
         a7:70:40:71:11:a1:24:b2:b6:ca:ad:3a:b5:e9:85:2b:34:8e:
         b3:af:f6:63:db:10:1e:49:d1:d4:c2:1e:2c:08:d1:70:f5:8f:
         f9:dd:50:22:df:7f:8b:9d:e3:2b:fe:aa:7a:4e:ba:98:c8:34:
         8e:8b:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:47:48 2025 by rpki-client