This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
File:                     EU3kpq3-T6GGFcVHcV67T_WUbvY.mft (raw, json)
Hash identifier:          bN7ppkWNSppm54u8Q9cG4lS8VIn37MiCaK0w14hws2Y=
Subject key identifier:   0A:7B:5D:03:AB:17:0E:A3:0F:11:63:BE:39:19:E0:46:D6:C5:41:B2
Authority key identifier: 11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6
Certificate issuer:       /CN=A91530ED/serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
Manifest number:          01AE
Signing time:             Fri 05 Dec 2025 01:25:10 +0000
Manifest this update:     Fri 05 Dec 2025 01:25:09 +0000
Manifest next update:     Fri 12 Dec 2025 01:25:09 +0000
Files and hashes:         1: EU3kpq3-T6GGFcVHcV67T_WUbvY.crl (hash: wfm6PQhg5JFWSPWr1HuYo1ElLidWqJSfZmiDDIhVDFw=)
                          2: AA15C0AEE84311EE8683D32CC4F9AE02.roa (hash: gYHV3KOXPY5t1RxYeQj8LMR1j99M6/FvNYKxReKdcYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl
                          rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91530ED, serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6
        Validity
            Not Before: Dec  5 01:25:09 2025 GMT
            Not After : Dec 12 01:25:09 2025 GMT
        Subject: CN=69323475-f3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b6:54:a1:c5:52:d7:e1:c9:a1:0a:b4:66:ce:
                    7c:5f:4a:d4:3c:f0:d0:fd:3f:72:e1:61:0f:ac:aa:
                    76:79:74:3b:82:82:6e:bf:28:d2:9a:49:22:85:34:
                    b9:e4:2f:e0:41:22:31:ea:44:01:63:43:57:a7:68:
                    4b:b7:b3:27:0a:98:af:86:bc:79:11:a5:02:ca:76:
                    62:84:fe:6f:68:20:2d:93:93:ee:ef:9c:19:a3:56:
                    c3:56:43:ea:5b:2e:f0:de:e1:1f:e4:7f:63:f2:61:
                    2f:20:79:6e:32:66:ef:f7:01:c5:36:68:57:65:f3:
                    07:2b:5c:e3:42:7f:77:ce:d6:0f:69:d6:ff:29:91:
                    3b:6f:97:18:63:1d:83:fa:e2:e5:8b:9d:a0:0f:ea:
                    a0:c4:8d:13:9d:9c:ba:52:1c:b3:45:7a:9d:ea:34:
                    6a:cf:32:19:27:57:2c:3f:08:ff:f2:2b:2f:26:3e:
                    4a:b4:87:0f:ab:8b:f2:6c:19:57:15:e2:1a:e0:87:
                    9f:b2:df:b0:c9:3f:89:2a:80:c0:63:09:b8:a5:04:
                    76:46:99:b0:27:9e:61:ec:c6:d6:8c:d3:71:23:58:
                    2a:fc:7b:f4:15:ed:9b:60:22:e4:98:e0:02:93:ce:
                    7b:46:8c:9c:2c:86:a9:73:a8:15:aa:3e:69:97:7e:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7B:5D:03:AB:17:0E:A3:0F:11:63:BE:39:19:E0:46:D6:C5:41:B2
            X509v3 Authority Key Identifier:
                keyid:11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c1:cb:45:d8:9a:ff:13:a5:b5:a7:55:ec:17:ce:f1:10:f5:
         70:29:af:8a:15:f3:1d:46:d5:3b:fc:0b:99:2b:bd:df:51:f3:
         e3:d7:68:03:69:05:a7:a0:c3:bf:89:d6:f8:17:9f:23:e2:fd:
         4e:fd:c0:c9:74:d0:9a:fe:74:1a:d8:57:28:d7:56:a6:ad:01:
         a6:53:62:53:32:98:14:ad:56:68:fa:c0:84:41:aa:67:99:f3:
         7e:ff:ac:41:45:c6:ab:5e:22:56:ea:b9:25:96:bf:f3:2a:7e:
         50:4c:3c:35:b4:61:a9:d4:4e:3f:3d:39:b2:e1:b5:af:10:bd:
         5a:61:84:66:91:bf:be:a1:18:e9:e5:d8:40:23:95:76:0a:ad:
         4b:16:50:07:2b:60:a5:67:ba:81:d2:03:5a:34:c6:4b:e1:f7:
         ed:6b:8c:40:d4:fb:36:81:e0:e8:6a:65:90:e6:6a:53:b4:5b:
         47:f5:93:16:39:1d:2d:16:4b:d0:15:0c:f1:c0:c3:14:c8:54:
         dd:42:7d:bf:a8:c6:9e:bf:e5:dd:77:67:ba:cd:ed:01:b6:09:
         1b:f1:5b:42:72:d6:6d:2b:48:03:6d:dd:51:95:84:3b:34:dc:
         a3:d8:6d:43:0a:78:07:07:ba:0c:0d:17:00:5d:5c:e9:42:39:
         a6:82:af:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:48 2025 by rpki-client