This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
File:                     eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json)
Hash identifier:          shqSxIDaXxUG+0dV3MiM4Tr6VYKh8rXPxEFCyfKzwww=
Subject key identifier:   E0:A5:9A:C3:B1:FC:A8:36:A0:2F:EC:3E:48:5F:C7:CC:A5:C9:3D:38
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Certificate issuer:       /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial:       07FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
Manifest number:          07D7
Signing time:             Thu 04 Dec 2025 20:18:00 +0000
Manifest this update:     Thu 04 Dec 2025 20:17:59 +0000
Manifest next update:     Thu 11 Dec 2025 20:17:59 +0000
Files and hashes:         1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: GnECLC/WZblOE77lwhz9wMP8UClt//vemCRBbzk9U/I=)
                          2: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: 68DPPkIx3TMycMvhxJ/OJZVSsCBVKZGTA7YjwfeBQOY=)
                          3: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: ULpDjDQWqs4ItvC1i6NuU7QsQ6pk8dYjef/smDJ1Zeg=)
                          4: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: GWLk3JarDTPL/Nuw5ExP7ZtwCD4NJBGph70xGsQwiUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
                          rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2046 (0x7fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
        Validity
            Not Before: Dec  4 20:17:59 2025 GMT
            Not After : Dec 11 20:17:59 2025 GMT
        Subject: CN=6931ec77-1504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:f3:f1:51:df:6f:21:db:40:e9:b9:b3:10:
                    6c:e2:84:a1:89:a2:3c:64:54:aa:99:0d:eb:a1:4d:
                    a2:f1:a0:df:a3:20:88:b1:37:66:ee:cb:16:cf:49:
                    50:61:8c:0d:4e:fb:d6:bd:5f:ed:8c:d2:a2:3c:df:
                    81:2c:48:4e:20:b9:f7:31:a1:dd:9d:02:f7:59:1f:
                    3e:7d:5f:d5:09:2e:cb:6a:1e:8b:ed:62:c4:e1:aa:
                    e2:15:99:af:c7:8a:dd:e9:a3:8f:83:99:e8:ab:f5:
                    c4:ae:4b:44:35:79:a1:96:74:0f:1b:98:e4:e2:cb:
                    02:4e:c6:ab:eb:94:b5:ea:b7:87:9d:a1:47:1c:fa:
                    ca:84:10:7e:47:83:51:f6:04:cb:b7:c0:ee:45:ee:
                    63:45:3c:62:89:05:9e:43:29:3b:f8:f6:58:23:2d:
                    3c:f5:5f:ad:a1:d4:28:0b:0f:86:db:1b:c6:e6:43:
                    77:1a:67:49:44:c4:2f:4d:1f:47:f4:8c:37:5d:5c:
                    b8:dd:47:4d:2f:a3:26:9a:c5:a0:03:57:fa:59:97:
                    18:04:f4:e2:b3:48:5e:4f:97:b0:6a:c8:35:4d:b7:
                    c7:57:5f:d9:bf:dd:a2:7b:31:05:be:47:cb:59:aa:
                    ba:39:cf:77:9a:c9:1f:cc:66:62:73:d0:82:18:fa:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A5:9A:C3:B1:FC:A8:36:A0:2F:EC:3E:48:5F:C7:CC:A5:C9:3D:38
            X509v3 Authority Key Identifier:
                keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:41:7a:72:60:64:e6:45:b7:1b:9c:2e:88:87:ff:f1:ea:43:
         df:38:80:58:9d:d7:5e:c9:c6:0a:e6:ba:49:f2:36:06:87:65:
         fc:7d:b5:d6:c3:bd:f5:d9:ae:ce:70:db:6e:8a:4b:09:4b:d4:
         cc:8a:cc:a0:a6:58:f7:e0:a9:36:69:89:4a:7f:89:7b:6e:2b:
         16:02:c6:bd:09:35:ac:10:62:a4:df:19:a7:a4:b5:a2:57:58:
         a5:22:d8:58:da:5c:34:ed:06:ba:ef:d0:a7:70:0c:1b:43:f5:
         56:e0:45:1b:8b:ea:6a:66:2a:6b:8b:42:ea:b6:cc:f4:3a:dd:
         34:41:74:43:b5:c2:c8:07:b6:30:85:9c:07:11:55:3f:aa:33:
         2e:2b:30:de:34:e0:2d:39:73:94:02:8c:42:d9:8c:fd:0b:6e:
         a8:3e:55:48:d5:26:8f:c7:16:35:6b:e8:8b:b9:39:15:fe:d8:
         25:b1:4f:9b:1d:8e:fe:a6:de:dd:a1:f3:67:27:e5:de:ea:4a:
         e6:ac:35:58:bf:a6:53:da:fa:ba:fe:be:a7:dc:c5:73:cd:44:
         b6:af:c4:91:dd:54:6d:50:af:36:91:7d:f6:5a:b4:e2:54:fd:
         7d:8b:04:11:99:6a:3b:d0:83:26:6b:2f:78:93:70:19:e2:25:
         c1:3f:dd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:04 2025 by rpki-client