This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
File:                     eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json)
Hash identifier:          M4UqAIxa6/qsLey6NzCv9R/Ty6vEVJamWW6wiQdZqS0=
Subject key identifier:   BC:1D:F7:BC:E7:C1:67:9D:2E:BC:55:BF:8B:EE:13:2E:D5:81:59:53
Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56
Certificate issuer:       /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
Manifest number:          C8
Signing time:             Fri 05 Dec 2025 03:50:01 +0000
Manifest this update:     Fri 05 Dec 2025 03:50:01 +0000
Manifest next update:     Fri 12 Dec 2025 03:50:00 +0000
Files and hashes:         1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: HRi2sr61fsOWpd+IXcWL1m7lZXS+X9mlFBh02O1gI+Y=)
                          2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: Wt4oaLtuBJ4fgLPX/SsvtzixRgQ01RXrk2kes3e+Yok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4A5, serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
        Validity
            Not Before: Dec  5 03:50:01 2025 GMT
            Not After : Dec 12 03:50:00 2025 GMT
        Subject: CN=69325669-12f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:5e:9c:93:bd:ff:f0:a6:e0:36:42:b3:ed:
                    d6:ab:1d:ae:8a:e6:d5:4c:50:eb:5d:77:e6:2b:13:
                    9e:9e:ae:13:9e:09:a1:52:66:4b:d8:f0:74:fb:a9:
                    94:74:ea:82:d5:d2:6a:de:a9:1c:56:1f:2d:ac:5f:
                    1c:6a:1e:38:bc:c6:5a:4b:15:fc:68:36:68:38:1f:
                    31:7e:f7:84:ad:5f:f7:c3:ad:21:4e:c6:d5:87:94:
                    a6:93:e3:2d:21:77:13:e7:75:87:4d:b0:66:57:84:
                    b6:14:18:c8:c2:a6:5a:36:f6:38:f4:f7:6e:e2:50:
                    f4:eb:fa:60:36:87:8b:23:50:ac:cc:aa:0b:7a:74:
                    7e:8e:f8:b0:d8:43:ca:d5:45:ce:a3:97:7d:02:de:
                    9a:86:1d:68:dc:8b:f2:33:44:11:32:4b:af:06:2f:
                    cd:ab:47:b6:7d:d5:d5:f7:d7:f1:df:2f:49:cb:b5:
                    10:f0:65:a9:f7:7e:c9:67:5e:3e:d8:a2:e9:a5:46:
                    87:61:a8:d7:f0:5e:d3:07:2f:f6:3d:f0:83:d4:ed:
                    68:3b:d1:ce:21:60:a6:b5:2d:f2:05:7a:4f:20:e3:
                    1c:8d:a3:5b:ae:bf:77:a9:3f:68:0b:d0:7f:d5:ea:
                    82:45:4f:7b:74:d7:98:bb:27:25:0a:ad:31:b9:2f:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:F7:BC:E7:C1:67:9D:2E:BC:55:BF:8B:EE:13:2E:D5:81:59:53
            X509v3 Authority Key Identifier:
                keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:2f:4c:7e:fa:c5:fc:f9:c1:81:79:d6:ef:f8:ba:77:8b:
         2b:dc:ae:5a:8f:db:f5:05:d3:e4:7e:21:d7:3e:22:0e:b8:a5:
         86:d2:ae:f3:b8:77:7c:f1:6c:36:3d:e3:d7:61:8d:a7:ec:09:
         7e:1e:90:86:a9:93:ec:2a:ef:28:11:0b:8c:7f:21:b7:90:6a:
         e4:63:f2:a8:48:97:fb:1b:0e:9f:76:84:a2:fd:1c:01:10:7a:
         2e:32:ed:37:02:b0:20:d2:a2:17:bc:3d:cf:53:f5:66:17:a8:
         70:70:00:44:96:94:dd:9d:a8:ab:5c:9f:00:36:cf:90:e6:46:
         be:55:aa:18:ad:b2:ce:d2:d4:a0:d7:8a:e7:37:25:8c:19:ee:
         73:43:13:95:bd:d4:d7:f6:b2:b6:83:64:e3:c0:70:61:d4:bf:
         e3:ed:f2:f8:8d:c5:9d:71:87:b4:05:ac:3e:af:95:40:a0:24:
         06:9d:40:5d:f1:2f:c0:6a:f1:6c:53:e7:07:c9:ac:4f:29:df:
         20:16:4f:86:90:43:2f:e6:69:3d:9d:f2:0d:42:88:75:90:30:
         a0:a0:81:ae:0b:05:24:81:1e:f6:57:07:e9:31:8e:fa:18:c6:
         4f:f9:94:37:28:da:b1:da:b7:fb:d2:4b:b9:5b:16:da:b0:b0:
         95:c8:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:22:11 2025 by rpki-client