This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
File:                     eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json)
Hash identifier:          O77Ci9rXw0yJGEM/rkb+YgO9vgEcuAlDYjQQscoXSgs=
Subject key identifier:   9A:3F:E3:5A:C5:8F:0D:D3:AF:C9:29:C7:2C:0B:1C:14:6C:1A:74:70
Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
Certificate issuer:       /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Certificate serial:       34B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
Manifest number:          34B0
Signing time:             Thu 04 Dec 2025 15:08:09 +0000
Manifest this update:     Thu 04 Dec 2025 15:08:09 +0000
Manifest next update:     Thu 11 Dec 2025 15:08:09 +0000
Files and hashes:         1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: Rt0HJyX7s5ljQdpq9EnBKrhaRk6Yxnj748mHZFoRt4U=)
                          2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: TVZFCFvktJ5OxkCoipiRWo+QWTbjibg23BZncqtSlRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
                          rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 15:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13497 (0x34b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
        Validity
            Not Before: Dec  4 15:08:09 2025 GMT
            Not After : Dec 11 15:08:09 2025 GMT
        Subject: CN=6931a3d9-579b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:1e:9c:60:32:bd:1c:0d:ef:4b:09:76:4b:
                    a2:45:4d:97:a9:7d:72:28:f2:f6:de:41:53:cb:46:
                    fb:a5:dd:fd:57:f9:13:ae:d0:f3:b3:58:6b:b7:d5:
                    bc:53:d1:4a:af:36:71:a1:99:21:69:2a:4d:73:da:
                    28:7c:23:4e:fb:61:cc:52:e3:71:6f:b5:15:6a:fe:
                    42:1a:c0:39:fe:7b:a8:f8:c9:ad:3a:c8:38:cb:11:
                    ff:86:53:6c:a2:9d:99:44:61:a8:d8:19:11:08:5d:
                    44:26:77:e1:f6:5d:e4:74:ba:b8:8a:3d:7f:fd:17:
                    a6:9d:35:9b:79:4d:c1:40:c1:73:3e:56:ac:55:f8:
                    01:31:bc:eb:25:e9:cb:d4:95:53:4c:c0:ba:a2:f3:
                    ba:c1:25:a7:c1:68:f8:e0:95:43:89:53:7a:00:8a:
                    90:61:46:78:18:09:ab:c4:a6:69:21:69:e6:dc:8c:
                    7b:d2:ac:92:d9:57:76:47:cc:4e:38:50:3c:9c:2f:
                    61:da:d9:5d:52:96:fb:61:38:c6:49:0c:87:b2:44:
                    bb:43:c0:89:b6:af:d5:b7:82:e6:22:20:c1:57:cb:
                    d6:44:93:7a:82:1e:f9:4d:74:e9:3f:90:f4:d8:f3:
                    d5:52:9c:ea:11:fc:be:2c:17:76:d6:f9:7b:f0:85:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3F:E3:5A:C5:8F:0D:D3:AF:C9:29:C7:2C:0B:1C:14:6C:1A:74:70
            X509v3 Authority Key Identifier:
                keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:35:b6:b7:55:ac:c3:6b:ea:73:03:c0:5c:49:3e:2e:95:49:
         7e:56:b2:ba:18:6c:a6:fa:56:26:e9:05:e7:86:ba:a2:e3:5f:
         d0:52:17:b9:a0:b9:45:6c:e4:2d:ad:2e:80:bf:f6:cd:c0:3d:
         a0:6c:ec:76:27:af:c2:bb:40:98:48:27:cb:63:70:45:eb:4c:
         b3:86:26:65:1e:eb:6b:37:7b:a0:3e:5b:c1:b6:d0:c5:ad:61:
         5c:9d:cd:7f:f3:1d:34:0b:6d:87:5a:02:c9:fd:91:38:82:5f:
         e5:e0:32:63:68:af:a5:17:d8:58:1c:8e:69:7c:03:93:cf:cb:
         3b:48:3a:d8:3f:0a:61:d0:73:21:42:98:f2:e1:62:5a:5f:af:
         2d:f3:61:d3:d3:50:70:d5:f7:2d:6f:fe:7a:20:05:c6:85:f0:
         cf:51:f3:c2:71:3b:72:ff:9b:28:fb:18:77:b6:6f:f0:24:21:
         68:11:59:02:17:25:f0:b2:8e:e4:69:6a:8b:58:e4:71:56:5b:
         0d:d1:23:ee:f4:61:13:7f:95:bb:57:62:b3:64:c9:ed:5b:33:
         49:d6:85:1c:96:06:c0:01:9e:4f:1e:8f:66:6b:97:11:d1:18:
         12:3f:9e:5e:76:38:7d:61:a8:0d:9a:41:3c:37:8a:d9:63:88:
         f8:3d:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:13 2025 by rpki-client