This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
File:                     eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json)
Hash identifier:          URRrJwL5M/Q3i5KR0tjbl2JWeY4nqqTXJYYh45EaLcg=
Subject key identifier:   E0:B7:1A:F1:6F:65:D5:21:7C:B4:79:AE:74:1A:6F:9C:99:52:67:76
Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
Certificate issuer:       /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
Certificate serial:       0482
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
Manifest number:          047D
Signing time:             Thu 04 Dec 2025 22:36:43 +0000
Manifest this update:     Thu 04 Dec 2025 22:36:42 +0000
Manifest next update:     Thu 11 Dec 2025 22:36:42 +0000
Files and hashes:         1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: yt1s295Kg6BO8Tr9mPhzCFUylqoGIqk2B4JC3vbKAHo=)
                          2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: hAIkEeLEWcB2wcEGanDh+e9b0MM5CnTkz5SOu7dH+to=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
        Validity
            Not Before: Dec  4 22:36:42 2025 GMT
            Not After : Dec 11 22:36:42 2025 GMT
        Subject: CN=69320cfb-07bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:f3:9b:f3:9e:5e:30:a6:a2:c3:c4:4a:c5:
                    fa:21:1f:7e:65:bf:ab:8b:38:dd:7b:ef:26:c3:07:
                    ef:79:72:49:85:01:a4:f0:7a:4d:ba:ea:83:84:9e:
                    ee:36:25:a8:90:29:a2:10:91:03:26:36:00:38:d2:
                    33:16:23:c7:02:fb:d5:b4:e2:aa:78:14:ec:6f:c7:
                    de:c2:d5:1c:bc:76:b2:e4:93:03:b0:44:c8:c8:44:
                    aa:42:7a:1b:a1:d7:4a:15:ea:7e:b4:ba:a3:42:5f:
                    97:68:a4:8c:cd:a1:e6:42:10:ef:2d:e3:f3:77:99:
                    db:fd:9a:6f:86:5e:fa:eb:cf:0b:f5:be:5a:d5:db:
                    0b:f9:f5:b3:10:af:87:1b:20:22:c9:77:ff:0b:f5:
                    3e:75:62:7a:79:35:0e:dd:76:88:b2:b3:8b:dd:30:
                    46:f1:82:9f:8d:40:aa:a5:92:de:2a:d7:21:87:5c:
                    12:87:a6:1c:d9:fd:ca:31:81:a0:61:bc:48:bd:fd:
                    74:15:56:86:38:9e:0f:4b:d2:ba:09:c6:0a:06:9e:
                    f6:c1:2c:12:84:3c:3c:05:4a:9a:e8:ca:04:9b:3c:
                    aa:27:bc:04:57:c8:48:cd:01:34:ea:49:9a:55:ed:
                    12:3a:a7:c7:5e:fb:66:7a:c7:e8:99:bc:69:48:c7:
                    fa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B7:1A:F1:6F:65:D5:21:7C:B4:79:AE:74:1A:6F:9C:99:52:67:76
            X509v3 Authority Key Identifier:
                keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:03:3c:89:f9:d6:7b:fa:9a:cd:74:05:63:e6:e0:99:21:19:
         b7:94:19:a9:67:44:cc:04:16:c4:2b:d3:12:3f:20:62:74:53:
         72:79:32:5b:f4:7e:00:4a:70:8e:f2:a2:3a:0f:32:ff:48:89:
         6e:cf:a8:f4:05:81:38:3c:c0:11:3a:0b:22:5a:ac:65:4f:65:
         3f:ba:66:34:d7:a9:0f:a1:7d:b0:36:f8:eb:0b:f7:29:c7:54:
         6a:3c:36:6d:77:1f:b3:09:4d:b9:82:21:e6:a5:12:9e:a1:08:
         5b:88:43:07:52:d2:7a:71:f3:1b:9a:ec:57:9f:e3:5e:cd:01:
         c0:b4:52:54:56:21:c6:0d:dd:2f:ec:d2:47:b8:e3:24:3f:54:
         96:c7:c3:57:ca:44:d7:ff:22:2c:f8:6e:36:6d:5e:96:e4:15:
         40:4f:f3:50:82:35:bd:8b:d8:91:03:22:21:f0:0e:99:08:cb:
         39:e6:86:c3:dd:33:0d:73:e1:70:dc:90:6b:50:c0:bc:06:bc:
         b9:51:c7:18:f1:16:f4:15:09:b3:37:0c:92:74:df:b3:28:92:
         48:03:72:bc:3f:bc:cf:77:f0:35:1c:04:5d:7d:df:23:b4:da:
         b3:f2:6a:e5:72:36:15:c0:13:1b:5a:a5:ac:2b:da:e0:01:71:
         1c:a4:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:56 2025 by rpki-client