This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File:                     ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier:          eX/vUXNFsnJ8UYPp3QSrLLHK4Xhd4laoJ1GFKUkoslw=
Subject key identifier:   78:1B:05:B7:42:09:C1:EB:78:FD:F0:39:F0:13:AD:54:E8:AA:CC:13
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer:       /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial:       0EE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number:          0EBF
Signing time:             Thu 04 Dec 2025 17:14:30 +0000
Manifest this update:     Thu 04 Dec 2025 17:14:30 +0000
Manifest next update:     Thu 11 Dec 2025 17:14:30 +0000
Files and hashes:         1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: u8Zofd828U5uuRNbzH14IJz3c+xK4n3QrUtAj6Vk9qA=)
                          2: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: ETZXfLUU8V3KJwKDLSCPK2awgHX/8QZCXq5mNJZzacU=)
                          3: 93713A1442F311EDA8889068C4F9AE02.roa (hash: EzMv5lO9o81NCglSMIqMm+Knptd/vLNcXJNN5+fG3pg=)
                          4: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: 60vuOkQynjGzHB5ZlHpi78kSHRwd9T4kwsOABZu9eBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
                          rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3810 (0xee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
        Validity
            Not Before: Dec  4 17:14:30 2025 GMT
            Not After : Dec 11 17:14:30 2025 GMT
        Subject: CN=6931c176-a37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:bd:91:5c:05:0b:2c:d4:d9:42:e7:47:2d:
                    2a:bd:95:40:9a:13:88:ec:d5:a2:88:5a:0c:8f:20:
                    b9:e8:9f:27:a2:40:0a:44:3f:7e:f7:1e:9f:6b:55:
                    3c:22:93:1c:63:f9:d8:eb:51:c3:a1:fa:1f:e8:cb:
                    8f:22:de:bd:d7:fe:8e:a8:5b:55:f3:4f:53:86:7b:
                    87:c6:83:07:24:ed:9f:5a:41:7d:f9:10:6a:c6:be:
                    fe:f8:24:91:3a:20:d5:2f:95:3c:31:61:eb:f5:5d:
                    c1:a7:fe:e5:91:21:2f:c3:6b:86:a6:fd:e0:12:cd:
                    f7:b1:09:49:c6:ba:19:0d:8e:89:3d:ff:7e:9b:1e:
                    99:1d:6f:6a:b7:57:77:a5:f8:d2:00:ff:ff:e7:2d:
                    4e:70:30:39:ec:b1:f9:9e:0d:41:b0:bc:c5:95:5c:
                    aa:fc:3b:7f:4d:7f:fc:37:89:20:e9:bb:bf:13:2c:
                    e3:49:e6:d1:84:4f:bc:8c:6c:b1:ab:4b:a6:b0:71:
                    2d:86:1b:54:e7:79:65:3b:51:dc:e9:5d:5b:ca:f9:
                    8b:ea:71:6c:b9:c6:03:6a:f7:72:7e:c0:69:95:a7:
                    13:e8:db:e7:83:a6:7f:42:76:59:14:88:52:d4:1e:
                    d6:33:9b:ea:03:11:1e:0a:f2:88:03:6f:e5:f6:15:
                    e6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1B:05:B7:42:09:C1:EB:78:FD:F0:39:F0:13:AD:54:E8:AA:CC:13
            X509v3 Authority Key Identifier:
                keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:31:bb:8b:09:7c:6d:47:27:05:9e:8e:b8:20:7f:4e:82:ec:
         0f:f9:81:53:93:00:82:0c:29:c2:8c:cb:8f:bf:d0:6a:3c:07:
         18:fe:30:3b:15:9a:56:8d:b0:61:c4:da:b5:2e:07:36:86:04:
         f4:40:bf:f3:41:50:97:6a:47:21:e9:27:40:6a:5c:ca:ba:d0:
         6f:e2:f8:31:34:fa:21:83:9c:07:dd:d9:49:e7:2c:28:2a:31:
         50:f8:14:e2:86:53:e4:50:bd:35:66:5c:b4:ea:56:bd:f4:65:
         36:1d:23:f1:da:81:da:c1:2d:d7:aa:53:4d:12:59:52:74:1e:
         83:c2:d2:d5:4b:d6:2a:a5:1e:a5:a1:d0:ee:eb:bb:67:51:f8:
         35:34:01:87:9e:a5:46:6a:49:9c:73:42:c5:19:af:fb:46:bf:
         47:b3:d5:d1:98:79:74:35:cf:b7:33:01:82:7c:97:9e:7b:dc:
         95:a5:56:8d:31:b2:86:ba:e7:fd:67:44:a3:c1:f8:50:cd:29:
         60:cf:ac:11:40:8b:8d:77:57:5c:5e:7f:b1:78:af:af:a4:f1:
         42:9f:d9:01:14:ae:4f:0d:77:39:dd:b4:a6:2b:42:63:4f:3a:
         e1:b4:39:3c:c1:80:3d:65:d5:bd:35:7e:cd:6d:b6:e9:c7:47:
         c0:da:ac:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTUxRDcxMTAvBgNVBAUTKDExMzYxOEIwRDQxMDY4MkFDMDZBOTAxRDY1QkI5QUM5
NTVFRDg5RTAwHhcNMjUxMjA0MTcxNDMwWhcNMjUxMjExMTcxNDMwWjAYMRYwFAYD
VQQDEw02OTMxYzE3Ni1hMzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArn29kVwFCyzU2ULnRy0qvZVAmhOI7NWiiFoMjyC56J8nokAKRD9+9x6fa1U8
IpMcY/nY61HDofof6MuPIt691/6OqFtV809ThnuHxoMHJO2fWkF9+RBqxr7++CSR
OiDVL5U8MWHr9V3Bp/7lkSEvw2uGpv3gEs33sQlJxroZDY6JPf9+mx6ZHW9qt1d3
pfjSAP//5y1OcDA57LH5ng1BsLzFlVyq/Dt/TX/8N4kg6bu/EyzjSebRhE+8jGyx
q0umsHEthhtU53llO1Hc6V1byvmL6nFsucYDavdyfsBplacT6Nvng6Z/QnZZFIhS
1B7WM5vqAxEeCvKIA2/l9hXmrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgbBbdC
CcHreP3wOfATrVToqswTMB8GA1UdIwQYMBaAFBE2GLDUEGgqwGqQHWW7mslV7Yng
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTFENy82OEYwOTI5MjlF
MkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFDckFhcEFkWmJ1YXlWWHRp
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VUWVlzTlFRYUNyQWFwQWRaYnVheVZYdGllQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTFENy82OEYwOTI5MjlFMkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFD
ckFhcEFkWmJ1YXlWWHRpZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfMbuLCXxtRycFno64IH9OguwP+YFTkwCCDCnCjMuPv9BqPAcY/jA7
FZpWjbBhxNq1Lgc2hgT0QL/zQVCXakch6SdAalzKutBv4vgxNPohg5wH3dlJ5ywo
KjFQ+BTihlPkUL01Zly06la99GU2HSPx2oHawS3XqlNNEllSdB6DwtLVS9YqpR6l
odDu67tnUfg1NAGHnqVGakmcc0LFGa/7Rr9Hs9XRmHl0Nc+3MwGCfJeee9yVpVaN
MbKGuuf9Z0SjwfhQzSlgz6wRQIuNd1dcXn+xeK+vpPFCn9kBFK5PDXc53bSmK0Jj
TzrhtDk8wYA9ZdW9NX7Nbbbpx0fA2qzO
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:05 2025 by rpki-client