This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
File:                     EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json)
Hash identifier:          jaxVrs4/+nEkBTN/slCGBNZEm3O334YzGk9NWjVTJFY=
Subject key identifier:   B3:5E:9B:2B:D0:C9:22:DD:E2:06:47:8B:C3:39:F4:24:51:D4:50:60
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Certificate issuer:       /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
Manifest number:          F6
Signing time:             Fri 05 Dec 2025 03:15:32 +0000
Manifest this update:     Fri 05 Dec 2025 03:15:32 +0000
Manifest next update:     Fri 12 Dec 2025 03:15:32 +0000
Files and hashes:         1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: mnhWiTTmQD5lf+nMi+o83X/l9Q2nym6IzbIggPmIx74=)
                          2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: UXnC/XoVUkLq/3kEuo54UNzjcpY8CVmcAHE/kWC3Jds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
        Validity
            Not Before: Dec  5 03:15:32 2025 GMT
            Not After : Dec 12 03:15:32 2025 GMT
        Subject: CN=69324e54-d0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:07:be:a6:65:ba:d0:71:6b:3b:4a:28:17:
                    5d:5f:5d:6b:43:84:7f:7d:36:70:09:1c:72:f4:07:
                    da:71:68:d1:1e:1c:b2:20:9e:3f:6a:4f:cd:d4:bb:
                    31:dc:ce:e0:52:40:d3:ea:e9:af:b5:a2:d5:08:a6:
                    eb:fe:ba:38:02:51:be:37:12:e1:aa:4b:b8:61:ec:
                    0b:09:01:d9:0c:1d:93:be:12:fb:02:5c:c6:22:7e:
                    8d:39:d2:e8:d5:b0:86:93:38:bd:81:ed:ad:d7:73:
                    b5:f4:1b:a4:7e:1a:57:73:34:1a:4e:e6:aa:66:b2:
                    a1:95:2c:66:17:85:40:88:88:af:66:0f:fd:74:77:
                    5d:41:1d:01:e6:fd:67:10:16:2b:9d:5d:4c:29:f1:
                    58:b4:50:79:ab:c1:27:da:51:0c:b4:50:72:ce:67:
                    89:62:52:ab:5d:84:90:bd:7b:b0:cc:de:e3:7a:36:
                    ca:6b:43:f8:74:07:92:70:be:0f:23:7d:64:74:89:
                    16:66:e7:a0:39:72:05:4a:ef:3e:8c:51:6f:60:00:
                    0a:e4:7e:6e:29:df:e2:ce:75:a6:7f:ac:ce:f2:fc:
                    f4:d0:77:65:16:2d:7d:bd:64:11:30:47:36:50:73:
                    5c:cf:a8:88:eb:d6:ff:92:1f:df:25:6b:a4:7e:4b:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:9B:2B:D0:C9:22:DD:E2:06:47:8B:C3:39:F4:24:51:D4:50:60
            X509v3 Authority Key Identifier:
                keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:8c:3f:d5:92:a0:52:32:b0:44:0c:88:19:ce:77:b9:f7:
         00:67:ac:38:e0:02:30:22:20:e4:26:da:82:26:43:f8:c5:44:
         23:5b:5d:e1:60:36:e7:3e:e7:2f:84:79:6d:eb:63:76:29:e5:
         28:d3:24:b4:b2:a4:dd:b6:6d:c7:67:c7:ab:db:9b:26:7f:84:
         49:20:d0:4b:6c:66:94:39:3d:29:9a:6f:ce:7d:03:a3:ad:c3:
         42:f1:17:d6:e6:67:c8:90:62:67:ff:dd:ef:80:ab:b6:52:7c:
         dd:cb:78:2a:99:6b:a6:50:4e:fa:a6:8c:33:6c:58:73:f3:d6:
         67:e1:b7:45:a3:88:87:d6:97:06:12:14:f2:6f:76:fe:05:15:
         71:25:b6:2e:05:b9:91:7f:9a:86:90:ee:36:ef:72:e3:48:ad:
         36:28:96:1a:ea:52:f5:a6:51:57:67:77:a4:65:c6:52:47:33:
         be:3f:d1:89:fa:e8:c9:72:14:c2:37:a5:3c:63:be:9c:56:d9:
         05:28:e7:f8:d9:e9:34:79:0c:f8:0a:4a:29:88:d7:b5:8d:ea:
         18:b0:9a:95:37:23:17:aa:77:9a:86:ea:50:af:ce:48:a8:27:
         2d:5e:97:27:55:6d:00:af:56:44:15:cf:5e:93:0d:0a:40:da:
         8f:c8:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:11 2025 by rpki-client