This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
File:                     eo-Oag5Y9XX8feHNg4R51_c_4nk.mft (raw, json)
Hash identifier:          whWP5sh6SsHEqaewg1ErrZnxmtCWSYzua1OJitXV2BI=
Subject key identifier:   1B:E0:72:1B:59:F1:E9:77:51:67:39:4E:C7:46:2F:8F:67:5C:B4:33
Authority key identifier: 7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79
Certificate issuer:       /CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279
Certificate serial:       3504
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
Manifest number:          34F6
Signing time:             Sat 06 Dec 2025 14:58:08 +0000
Manifest this update:     Sat 06 Dec 2025 14:58:07 +0000
Manifest next update:     Sat 13 Dec 2025 14:58:07 +0000
Files and hashes:         1: eo-Oag5Y9XX8feHNg4R51_c_4nk.crl (hash: sH7lAmNa69bI+Wdfe6sBkBIXEgMsV5sCCrRqVeWUcOA=)
                          2: 92210D6AB66711EC86445C11C4F9AE02.roa (hash: X9eXSdNteijjOyH5Tq4HYgNjanvwxWhbUObPceXYMyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl
                          rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13572 (0x3504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91775B7, serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279
        Validity
            Not Before: Dec  6 14:58:07 2025 GMT
            Not After : Dec 13 14:58:07 2025 GMT
        Subject: CN=6934447f-5a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:30:41:57:39:b2:ce:70:77:94:7c:3e:da:
                    55:03:a3:3c:be:ae:65:12:f5:57:fd:4c:96:0e:37:
                    d4:36:da:f0:e1:ce:66:04:b8:e8:79:e3:28:e4:a1:
                    4b:36:e3:53:7f:66:d3:33:a8:66:c3:7d:d9:8c:09:
                    0c:a8:bc:dd:73:5c:d0:22:12:0a:b8:02:72:58:9e:
                    a4:ff:0c:0e:89:40:2d:ad:d7:b6:9f:f7:80:35:b4:
                    44:fd:b5:96:7e:fc:50:a9:f9:08:a8:4a:2c:2b:34:
                    6d:ad:5a:52:4a:e2:66:c4:d6:5e:b6:89:65:c6:ff:
                    cf:04:af:be:b1:54:bb:d8:cd:ec:19:75:89:6c:cf:
                    64:a0:a7:36:26:33:80:21:1f:5a:e3:ad:d7:ae:4a:
                    69:11:9b:c6:75:93:b5:75:dc:8c:11:c6:5f:72:81:
                    59:5c:0d:00:54:65:ed:cc:2c:ba:e2:39:52:9d:a7:
                    3d:04:7d:eb:17:2b:22:76:0f:8f:72:32:a8:d2:fe:
                    8e:d6:f1:61:48:b7:bd:0f:eb:81:cc:17:22:0f:df:
                    ca:d2:8e:71:98:67:21:8d:79:8b:0f:02:01:6f:00:
                    35:de:f3:5c:0e:b7:0c:e5:20:d0:a2:ca:bd:3a:63:
                    a9:22:6b:3d:28:c1:39:1c:d3:c2:45:52:e6:7e:d1:
                    57:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E0:72:1B:59:F1:E9:77:51:67:39:4E:C7:46:2F:8F:67:5C:B4:33
            X509v3 Authority Key Identifier:
                keyid:7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:72:2f:38:8d:ff:74:f5:55:7a:e6:15:83:59:a9:fa:58:af:
         80:0f:5c:a5:59:39:8f:9e:de:c8:f0:5a:3a:1a:1f:44:26:7f:
         4e:b7:b7:ff:9f:4c:96:76:21:d8:e3:a6:ce:61:ce:45:1e:9b:
         44:2b:9b:2a:af:02:d3:bb:50:db:a2:05:a6:fd:87:35:e1:ff:
         22:78:34:2e:b4:a2:80:1f:ff:37:86:17:4e:83:10:c4:37:99:
         7b:dc:15:5f:70:ff:99:61:8e:43:72:44:a1:87:bc:a1:57:aa:
         b3:54:f6:49:02:48:bf:ae:ad:20:ef:8d:fd:6c:70:50:2b:16:
         5c:a7:48:cb:a7:97:ce:4f:3e:7e:2e:33:b0:0b:ce:e7:26:26:
         a8:5c:9f:4b:21:6c:17:1e:b4:e1:87:ca:79:6e:94:1b:5f:f1:
         6a:06:dc:7c:28:16:dd:bb:72:a3:6c:ce:05:3b:22:84:64:49:
         22:b5:b1:90:27:e3:c0:26:ed:d8:92:e3:53:99:fe:54:89:2a:
         0b:60:7b:b0:1a:53:8b:fd:38:36:51:73:04:7b:12:05:ed:56:
         96:6b:66:1e:8d:9c:57:79:ca:d3:58:62:72:49:06:e5:97:e0:
         aa:0a:21:b0:66:36:5b:3f:33:12:19:64:41:6f:b2:0e:84:ff:
         60:ee:a2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:19:16 2025 by rpki-client