This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
File:                     esbv-wTCtYD1pWtqdGzf4FOvap4.mft (raw, json)
Hash identifier:          8pq9GaYNLviiADz4Q5wpucud/JpYQtcDgZgx/SWjZ5E=
Subject key identifier:   3E:05:02:A6:EC:D5:A9:1E:7C:EC:3E:7C:58:1D:0C:19:4C:13:D7:DD
Authority key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E
Certificate issuer:       /CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E
Certificate serial:       0B57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
Manifest number:          0B42
Signing time:             Sat 06 Dec 2025 18:31:40 +0000
Manifest this update:     Sat 06 Dec 2025 18:31:40 +0000
Manifest next update:     Sat 13 Dec 2025 18:31:40 +0000
Files and hashes:         1: esbv-wTCtYD1pWtqdGzf4FOvap4.crl (hash: MWKQltuwMfml2GzfRi9OBfW8zITiTnVXYmv6h/TThiQ=)
                          2: D9C33050560B11EDA1636E52C4F9AE02.roa (hash: 9/2XCNctQ1f+o95ZaKqd5kOwv2Isg2/Z/qwhLlbN/dM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl
                          rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2903 (0xb57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91747E1, serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E
        Validity
            Not Before: Dec  6 18:31:40 2025 GMT
            Not After : Dec 13 18:31:40 2025 GMT
        Subject: CN=6934768c-06cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:ac:dd:77:cd:c6:1e:93:82:af:42:35:28:
                    de:e1:2f:f0:74:4d:62:b7:6f:05:5a:17:de:61:5d:
                    08:bf:c1:54:82:4b:24:29:9d:0f:c2:e7:c4:7a:7c:
                    33:8d:93:f7:8b:7c:3b:e7:2c:91:62:ab:13:e4:ab:
                    a0:a4:6f:ff:24:38:09:b6:95:1e:fe:9e:60:ff:0d:
                    d3:95:01:8b:97:7e:f3:50:c8:6a:2d:a4:99:58:8e:
                    86:e6:22:c2:20:de:b3:5a:fc:00:ec:c8:c8:c1:ea:
                    f5:22:b7:05:35:c2:0c:87:b2:c5:4a:49:6c:d9:11:
                    ba:31:47:5f:02:4f:ee:26:89:cf:a2:17:0d:d6:ba:
                    5a:52:2b:5c:c8:a5:ae:4e:89:e7:9f:c9:5c:a0:52:
                    32:e0:59:bf:6e:57:6c:83:f7:36:22:83:82:fc:9d:
                    25:cb:ec:8f:68:1d:b5:20:79:4a:9a:7d:7c:5f:bb:
                    68:47:ce:11:b7:43:49:4d:56:ca:65:72:02:51:5b:
                    a5:96:85:8a:12:6c:4d:e6:cb:a8:05:41:ae:cd:55:
                    4f:60:98:03:30:c2:b0:d4:6d:d1:7e:47:bb:e6:23:
                    a3:b8:5c:5b:db:54:9e:65:aa:b7:aa:a1:07:50:58:
                    70:51:b6:2e:86:4d:3a:1c:16:e3:83:9c:29:ba:fc:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:05:02:A6:EC:D5:A9:1E:7C:EC:3E:7C:58:1D:0C:19:4C:13:D7:DD
            X509v3 Authority Key Identifier:
                keyid:7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:9e:3e:fe:22:30:d8:6d:b6:7a:2d:e2:16:34:da:1b:7e:
         00:d3:e7:8d:35:7d:a3:8b:61:d0:9d:c2:6d:6e:5b:a5:c6:e5:
         3c:37:a5:ec:1d:92:7e:e3:d1:bb:b4:85:db:70:91:f8:a6:41:
         eb:3d:4b:b1:41:fe:33:a9:d8:90:93:a3:8d:55:c3:dc:d7:51:
         81:55:e0:7b:23:0e:38:d9:13:41:87:d4:de:0f:1a:70:17:da:
         90:8d:8a:e8:be:79:90:8a:a1:ae:68:13:bb:bd:66:e4:04:7b:
         72:61:89:cf:23:ce:aa:4f:36:d1:21:53:24:ba:51:07:6a:f7:
         86:b6:77:a6:21:bf:1f:2c:df:aa:a4:c5:47:2c:85:c9:56:e5:
         e7:56:4f:0c:51:42:9e:9b:e9:85:00:d8:90:5b:a5:2c:7d:66:
         ef:50:61:0d:d7:27:f9:2e:ab:70:38:4f:63:d4:eb:ae:de:82:
         5b:64:b1:8f:8f:32:69:c4:ee:6b:f6:73:d3:45:da:ac:8f:2e:
         bb:f9:53:79:37:bd:13:fa:06:e5:40:d7:8f:96:e6:e8:cc:a3:
         5f:c1:6d:25:4c:ac:15:c0:bb:e1:ac:58:1b:79:02:5f:98:c4:
         47:6e:31:77:2b:2f:77:86:43:9d:41:ce:3c:d0:37:23:fc:aa:
         28:08:f9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:23:48 2025 by rpki-client