This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File:                     EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier:          EGjiFJp8DPCLvboY2g1sH9od+nRaQDJSvkZoKSWmc6c=
Subject key identifier:   12:00:F2:80:25:90:23:88:20:0B:32:2B:D9:FA:E3:DC:81:BF:FF:68
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       0418
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number:          03B0
Signing time:             Wed 17 Dec 2025 00:22:20 +0000
Manifest this update:     Wed 17 Dec 2025 00:22:20 +0000
Manifest next update:     Wed 24 Dec 2025 00:22:20 +0000
Files and hashes:         1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: sYoXstPW6lovJEV+ftd+v/ozxVTNYnQkZfudkzA2dM4=)
                          2: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: ABW3By8YU2W6olwHz1/qOoSOHNFidR8eMB8CQ1rCUFk=)
                          3: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: KY39ZDloooDTLSWdSYEfYOluFdXRey3d+9IwjJV7kvw=)
                          4: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: BC1XUzBkjyQzlz4GvtxH81hMdlkimJB+lU8F+PmiFVI=)
                          5: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: O+w5tLUYY2vDAPyyihGdNaVeLcPrzrretQfcUAVViMY=)
                          6: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: PO28TqT7JFAgsJS4OG8H4ivCR2vG+AQUGdE3hSyf+fM=)
                          7: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: q0o0blyQ81NictXAsmCb5KMZ0BzFrp/mj7hc480MWyw=)
                          8: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: QdBFtLVQnvTC0U8ce4xfWA4Knfofq/bGhnYdWQPREvM=)
                          9: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: R17w/Fkdvp/1oePeXfLYVtvseH7RLcT+pcv0SXzugK4=)
                          10: 7CCE329266F711EF86880681C4F9AE02.roa (hash: 6anx6+tUYpCyea4W0BqwQSGkyUCAr4k+8K9NAhmwsJE=)
                          11: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: rjo+bi3dT0jsXGyAaC/7THKFQ/vbxvn37jUfycsRuPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 00:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: Dec 17 00:22:20 2025 GMT
            Not After : Dec 24 00:22:20 2025 GMT
        Subject: CN=6941f7bc-3741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:ba:ad:a0:3a:e7:9a:06:a8:7a:a7:b4:ea:
                    21:06:67:96:b7:e9:d3:21:ac:5e:dd:4d:61:0c:62:
                    cd:4b:41:05:7d:ef:48:6d:0b:3f:e4:b3:c9:2d:b6:
                    40:fc:3c:70:c0:43:6e:e1:cf:a3:26:66:d4:30:63:
                    b9:70:71:ed:77:15:37:44:2f:ec:dd:e1:01:4e:1e:
                    4d:7e:6c:40:a2:69:7f:40:ce:fa:6f:cc:28:bb:af:
                    c6:2c:92:d0:ee:a6:67:04:b1:ee:91:77:63:55:be:
                    0b:d3:20:9f:8a:24:72:63:b5:b3:21:9d:4f:3b:41:
                    83:a3:05:13:f1:53:ae:2d:24:ab:99:53:9f:a5:ff:
                    dd:ed:cb:99:43:e0:97:84:52:fa:e2:5b:21:5e:ca:
                    8a:01:6a:f0:29:15:e6:48:24:6e:d6:3d:1c:7a:f6:
                    78:f0:3a:d5:7a:a3:62:5c:93:8b:5a:54:e0:6d:85:
                    9d:dc:76:96:14:cb:b9:f0:db:81:00:3f:ae:a0:90:
                    96:f4:2b:66:0a:94:32:4d:a6:80:33:7e:22:e6:14:
                    6a:55:c6:7f:c7:9f:f5:ed:7b:fa:9a:fb:29:77:ed:
                    50:49:76:e3:ad:ce:ca:43:be:a8:91:93:d1:91:74:
                    89:ca:79:4d:fa:85:15:7f:aa:73:3d:51:59:34:ff:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:00:F2:80:25:90:23:88:20:0B:32:2B:D9:FA:E3:DC:81:BF:FF:68
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:56:52:bf:ae:d1:15:4a:c2:66:63:68:07:15:ca:f4:39:14:
         ad:ba:5e:aa:4b:41:36:0e:39:08:5a:ff:09:ef:c9:a4:49:a3:
         d3:f5:84:5c:b0:49:a8:1c:cd:86:af:26:7e:c0:5d:52:c7:14:
         73:ec:45:a3:de:84:ae:94:d5:da:7b:34:60:ec:72:ff:16:3a:
         a7:3d:2c:ea:b3:e0:de:ba:08:40:5f:5c:1f:ab:31:f0:c7:e4:
         11:3d:3f:62:e4:ab:12:30:39:e7:c9:a2:70:df:ca:9e:0c:3a:
         59:47:f1:e3:d6:f6:08:32:60:a2:26:a9:df:ff:a0:c9:96:a5:
         1e:90:56:dc:a5:0a:ba:e6:fa:7d:68:63:b5:13:12:6e:be:23:
         c1:62:fc:6d:c4:6d:f9:8d:c2:d3:fb:36:16:05:49:ea:9e:7f:
         71:c3:fd:05:26:80:af:b7:d6:79:78:e5:34:9b:67:42:fd:73:
         14:ff:d1:c7:a0:4d:53:5c:6f:06:30:a4:95:a0:93:fa:03:4f:
         49:ec:31:43:9b:02:da:59:9d:8e:90:35:cb:89:2c:60:00:1e:
         5a:55:9f:36:07:82:4f:e0:65:ee:d6:d3:ce:68:b7:f3:81:36:
         16:87:41:b9:bc:0e:18:0d:7f:d3:6f:3c:ec:1a:c7:65:47:24:
         16:5e:4c:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4
RjEzRTQxNzIwHhcNMjUxMjE3MDAyMjIwWhcNMjUxMjI0MDAyMjIwWjAYMRYwFAYD
VQQDDA02OTQxZjdiYy0zNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkxS6raA655oGqHqntOohBmeWt+nTIaxe3U1hDGLNS0EFfe9IbQs/5LPJLbZA
/DxwwENu4c+jJmbUMGO5cHHtdxU3RC/s3eEBTh5NfmxAoml/QM76b8wou6/GLJLQ
7qZnBLHukXdjVb4L0yCfiiRyY7WzIZ1PO0GDowUT8VOuLSSrmVOfpf/d7cuZQ+CX
hFL64lshXsqKAWrwKRXmSCRu1j0cevZ48DrVeqNiXJOLWlTgbYWd3HaWFMu58NuB
AD+uoJCW9CtmCpQyTaaAM34i5hRqVcZ/x5/17Xv6mvspd+1QSXbjrc7KQ76okZPR
kXSJynlN+oUVf6pzPVFZNP9ltwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIA8oAl
kCOIIAsyK9n649yBv/9oMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw
NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q
dXByZFBTZjRYYU9QRS1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjVlK/rtEVSsJmY2gHFcr0ORStul6qS0E2DjkIWv8J78mkSaPT9YRc
sEmoHM2GryZ+wF1SxxRz7EWj3oSulNXaezRg7HL/FjqnPSzqs+DeughAX1wfqzHw
x+QRPT9i5KsSMDnnyaJw38qeDDpZR/Hj1vYIMmCiJqnf/6DJlqUekFbcpQq65vp9
aGO1ExJuviPBYvxtxG35jcLT+zYWBUnqnn9xw/0FJoCvt9Z5eOU0m2dC/XMU/9HH
oE1TXG8GMKSVoJP6A09J7DFDmwLaWZ2OkDXLiSxgAB5aVZ82B4JP4GXu1tPOaLfz
gTYWh0G5vA4YDX/TbzzsGsdlRyQWXkwm
-----END CERTIFICATE-----
Generated at Thu Dec 18 22:03:58 2025 by rpki-client