This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft
File:                     EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft (raw, json)
Hash identifier:          eIY1Tq4zDLOvIlquSnkhJ2l3EfnI+WGtJBWbgOrZm2I=
Subject key identifier:   ED:88:3A:76:E4:15:E8:AB:DB:AB:6E:FB:1F:9C:DC:70:BB:8A:3B:0C
Authority key identifier: 12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D
Certificate issuer:       /CN=A914B46A/serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D
Certificate serial:       05D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft
Manifest number:          05D2
Signing time:             Thu 04 Dec 2025 21:44:25 +0000
Manifest this update:     Thu 04 Dec 2025 21:44:24 +0000
Manifest next update:     Thu 11 Dec 2025 21:44:24 +0000
Files and hashes:         1: EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl (hash: zpcU7052ciBWIuDq4p6Ady9L0ERD7QtY+zI/JC3f4lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl
                          rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B46A, serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D
        Validity
            Not Before: Dec  4 21:44:24 2025 GMT
            Not After : Dec 11 21:44:24 2025 GMT
        Subject: CN=693200b9-d60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:a0:14:e3:02:d4:36:47:9a:8a:90:8d:24:
                    da:40:77:2a:95:f6:30:88:93:91:27:53:cb:04:c1:
                    20:a8:94:e4:cc:b7:d1:24:6d:8e:72:04:1a:ed:88:
                    54:c0:51:5f:81:cd:16:26:1c:00:38:03:b0:1f:e8:
                    3d:b3:54:f9:58:25:55:51:24:99:69:e0:1a:cb:6b:
                    c4:21:00:43:d9:1f:f0:09:d7:91:50:3b:a9:b6:98:
                    b7:b2:7a:e2:3b:63:58:be:60:47:ff:86:57:cc:c5:
                    f6:2a:80:49:d9:30:0d:6e:f7:c9:df:55:0b:3f:e1:
                    81:94:91:0c:10:bc:39:cd:70:c6:59:0b:72:73:96:
                    22:35:da:da:3e:ab:2a:93:f5:49:a3:7f:ff:6f:3f:
                    30:4a:a0:19:b7:7e:f3:71:47:ba:d7:54:80:89:af:
                    fd:e3:79:f0:57:f0:5e:ab:06:25:e5:13:54:f2:17:
                    58:11:56:71:be:65:47:27:9c:f2:2f:71:5d:ec:73:
                    89:49:7a:da:92:a7:2b:d6:e5:dc:53:9e:94:26:2b:
                    fa:b3:ef:91:d4:25:2b:a6:e1:f8:4d:2e:17:f2:39:
                    b2:4f:b1:a0:cd:be:48:33:87:60:fe:ab:bc:ba:1a:
                    bd:0b:15:c6:2d:a6:55:74:d6:f0:14:c2:7e:7b:e4:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:88:3A:76:E4:15:E8:AB:DB:AB:6E:FB:1F:9C:DC:70:BB:8A:3B:0C
            X509v3 Authority Key Identifier:
                keyid:12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b0:52:f5:75:0b:ac:f6:9d:b5:dc:b9:a6:f5:0b:9d:bc:ca:
         d6:ba:cc:fa:f1:44:a1:56:f3:1d:3d:eb:f8:00:72:82:b7:84:
         d3:56:a7:3b:69:56:a1:b3:65:5d:03:49:80:7f:56:f2:8d:24:
         ee:d8:2b:c8:1d:b5:8a:9c:56:5e:aa:99:02:f8:97:10:07:5b:
         c8:6d:98:65:7e:96:4c:4b:5b:b6:35:92:53:8a:2d:de:35:95:
         6d:e4:8f:c6:16:7d:f7:38:ac:c2:05:13:52:21:57:5e:a0:af:
         75:89:92:c6:02:9f:6a:04:2a:26:33:50:29:20:41:d6:84:22:
         5a:c9:0c:a3:99:7b:8b:19:91:9e:4c:8e:7f:db:9a:08:46:81:
         90:b2:bb:8a:ba:a0:04:08:1a:20:80:73:56:b0:fd:59:a2:c9:
         54:0f:4b:27:a1:9d:c0:0e:ab:c5:9f:e1:c9:28:71:1f:e9:da:
         3a:54:6f:3f:66:a2:48:36:14:2e:9f:a6:a9:18:1d:2f:31:73:
         2c:99:55:fa:48:58:fb:a5:f3:63:02:78:b9:c0:19:1f:ba:8d:
         64:55:15:f8:cb:98:f9:43:cf:79:11:d2:d3:78:d8:be:c5:91:
         7b:49:36:00:ee:ef:0a:16:5b:e7:58:02:50:74:7c:6f:c5:df:
         9b:32:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:27 2025 by rpki-client