This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
File:                     EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json)
Hash identifier:          4bsh0qCqpkfxJ35/LCNonZj01mhg112N9iJRrCU4mdo=
Subject key identifier:   C1:5A:68:53:25:7A:09:9B:86:3D:06:CD:CC:8A:F6:96:AA:A9:89:F3
Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
Certificate issuer:       /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
Manifest number:          0718
Signing time:             Sat 06 Dec 2025 21:56:06 +0000
Manifest this update:     Sat 06 Dec 2025 21:56:05 +0000
Manifest next update:     Sat 13 Dec 2025 21:56:05 +0000
Files and hashes:         1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: I7fj3tYuwBzyHwJT2F6Iri+WPxgzh+Unl8HsMO4rUE4=)
                          2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: HpV9alDLFaENoEQRBDM1U8HrLENNv7Hd/Jy118wd7FE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
                          rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
        Validity
            Not Before: Dec  6 21:56:05 2025 GMT
            Not After : Dec 13 21:56:05 2025 GMT
        Subject: CN=6934a676-eef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:64:25:90:f4:71:19:4c:3f:ba:de:d8:34:c7:
                    4e:35:24:be:8d:4a:68:3c:e4:91:4b:98:f2:1e:56:
                    a6:22:28:66:68:67:55:e3:4a:41:f6:82:c1:5d:bb:
                    46:9c:eb:a5:02:2a:f1:8e:e7:49:e6:51:43:32:40:
                    85:6f:0a:f3:b7:a7:04:8c:2a:78:9d:64:0a:da:c5:
                    62:1b:7c:e4:36:ba:74:1c:13:8c:91:a4:05:b5:a3:
                    3d:09:c2:3f:97:34:48:47:43:ff:14:cf:8b:8d:79:
                    d6:e8:69:df:0b:d3:69:a5:13:97:24:20:aa:5c:b4:
                    3e:bb:ab:4f:9e:e7:58:54:71:dd:60:a2:bf:74:fd:
                    20:e1:ef:83:32:bf:12:19:3a:b3:5a:39:ed:b6:2c:
                    c7:15:44:bc:c8:32:7e:1f:4e:95:33:60:2a:90:b6:
                    93:a8:c6:10:06:4c:4c:91:a5:28:a2:54:7f:8b:f9:
                    ac:78:c6:82:8d:80:50:18:a2:cd:8e:a0:13:43:37:
                    42:32:6d:6c:d9:45:13:d7:6b:9a:42:8f:84:f0:4a:
                    e1:9f:b9:d1:86:d7:ee:4d:e9:5f:f7:a9:a3:1b:ef:
                    57:6f:a5:6d:f6:5d:28:14:c4:92:ba:5d:c3:f5:1b:
                    af:54:40:0d:88:88:40:b6:35:e0:ba:cb:02:5b:fd:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5A:68:53:25:7A:09:9B:86:3D:06:CD:CC:8A:F6:96:AA:A9:89:F3
            X509v3 Authority Key Identifier:
                keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a4:fc:59:9d:43:ca:57:39:76:29:a4:3c:38:2c:46:1b:6c:
         57:4b:a2:b9:bf:86:bf:28:b4:24:6e:a7:f6:5e:01:c0:f7:7b:
         6e:3c:85:6f:53:23:8a:35:78:11:e8:65:b0:5b:05:08:a3:da:
         6e:d2:28:21:a5:41:31:1c:13:d0:db:a4:4e:1c:6c:1f:d9:22:
         11:cd:48:04:6c:eb:9f:79:d8:8f:0c:4a:06:cf:b1:95:ee:c6:
         f0:f2:63:d8:ea:e5:42:af:50:04:6e:31:8a:15:e2:b4:2d:b8:
         30:30:6d:3d:43:bf:6e:47:80:2c:6b:ff:1b:ac:be:c1:0f:e6:
         db:8d:63:cb:ed:cb:ac:9e:d8:32:d9:44:a3:de:15:ff:95:f1:
         e5:2c:97:68:d7:62:25:52:34:a9:bc:6d:1f:42:91:33:32:05:
         5e:37:0d:cf:39:83:73:33:41:f9:dc:6a:14:f5:7a:c5:94:30:
         aa:6a:5a:2a:b5:d9:e3:0b:e8:e9:b2:b2:58:63:72:3d:bc:1f:
         1a:2e:be:3a:f0:dd:82:24:31:23:cb:d1:b3:e4:83:eb:f5:a3:
         ba:1a:4f:f3:ff:b7:19:de:4d:7a:c8:db:b7:d1:e1:0a:2c:9e:
         d5:dc:9c:0e:b8:16:99:41:65:b1:bf:3f:74:9b:08:20:6a:12:
         f3:7b:f4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:11:53 2025 by rpki-client