This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft
File:                     e5GosBHWGcQnHUUgOg4z2Rhe94E.mft (raw, json)
Hash identifier:          5OtxjGaBc1UxApaLpGlhV5/1D8wpHh6UqS2sMfJQqjo=
Subject key identifier:   98:CD:FE:A1:4E:22:99:E3:5D:F6:C1:D6:91:88:FC:AA:E8:68:A4:8B
Authority key identifier: 7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81
Certificate issuer:       /CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft
Manifest number:          01C9
Signing time:             Fri 19 Dec 2025 02:12:54 +0000
Manifest this update:     Fri 19 Dec 2025 02:12:53 +0000
Manifest next update:     Fri 26 Dec 2025 02:12:53 +0000
Files and hashes:         1: e5GosBHWGcQnHUUgOg4z2Rhe94E.crl (hash: bxF2nNc+9NrRSza3yBTSNavSLoAQocjn6y6cZjTNutM=)
                          2: 1468305C31A811EE939F1D33C4F9AE02.roa (hash: dz+eMFL8jhyEuvX0L5AAkhWL05erMvJityZS8nH7Mjo=)
                          3: 113D35904DD611EE8F798349C4F9AE02.roa (hash: 401GOC507oNb8wNBDGoprYPYOuaGGrd1bMHeb0eeAbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl
                          rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EFA9, serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
        Validity
            Not Before: Dec 19 02:12:53 2025 GMT
            Not After : Dec 26 02:12:53 2025 GMT
        Subject: CN=6944b4a6-9b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:7f:37:88:15:11:71:e5:f2:c8:0d:43:89:
                    47:8b:40:ec:78:b7:5a:0a:43:62:a1:c1:7f:a7:73:
                    39:e6:e7:f1:74:81:58:7c:37:59:ce:22:85:75:a7:
                    55:29:f3:e2:ad:3a:eb:c3:5b:49:2f:6e:be:a3:d2:
                    05:58:f3:f6:21:7e:d0:d6:46:11:ce:d5:0c:f5:81:
                    1e:8f:89:c6:bb:65:4f:69:1f:60:7a:b4:10:ce:9f:
                    98:c3:71:5a:7b:da:44:84:04:fe:37:2c:60:b9:67:
                    0c:8c:16:b0:f7:e6:b8:35:97:bc:ac:34:de:e3:16:
                    15:98:18:e0:b4:7f:31:61:f9:62:6e:ff:5d:5e:8e:
                    46:b9:71:a3:73:39:9e:bf:cf:8e:ed:75:df:33:31:
                    0b:aa:c2:1d:79:35:92:6c:12:58:3b:01:32:fb:45:
                    a2:c5:b2:37:c6:31:1a:7c:00:6c:87:ee:d7:3f:2c:
                    80:84:3e:36:29:59:5a:a4:b5:92:66:8b:f6:4c:0b:
                    c6:ea:28:f8:38:70:39:18:a2:19:fa:68:69:f5:58:
                    f9:ad:a6:73:a4:ca:77:8f:46:4c:81:21:da:0b:4c:
                    a0:8c:2c:6f:25:6b:6c:77:78:4e:07:7b:60:e1:df:
                    bb:e9:2c:70:2c:38:f7:f7:46:d9:9f:4d:35:a5:09:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CD:FE:A1:4E:22:99:E3:5D:F6:C1:D6:91:88:FC:AA:E8:68:A4:8B
            X509v3 Authority Key Identifier:
                keyid:7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a6:bc:2a:2c:75:f2:40:74:54:59:42:68:3c:18:ac:71:fc:
         9c:f0:28:52:ee:ba:c4:53:fa:d7:94:f4:ef:d8:ab:a8:fb:4a:
         f2:92:16:98:84:d2:61:c9:22:ff:a6:06:2b:81:7a:d1:64:4f:
         87:03:95:5e:d5:21:c4:74:4c:49:0f:d7:67:46:4e:eb:9b:c9:
         d9:d8:fd:be:c2:d7:99:9b:7b:e7:1e:76:4e:68:0d:70:16:75:
         02:bc:7f:8f:3b:78:56:48:b3:84:50:08:3f:c7:32:dc:c0:e8:
         70:03:9a:6d:bc:a4:89:2e:be:c1:77:35:3b:15:e4:fb:29:cc:
         98:01:a4:09:25:51:0c:41:a2:ef:9b:16:8b:97:c6:89:d7:9d:
         8b:c1:c2:3f:77:12:09:45:14:a1:31:b3:aa:21:72:b2:e6:83:
         a1:95:67:26:27:25:64:b1:a4:72:c5:6b:b0:52:dd:5d:37:e7:
         5c:85:4b:b9:ec:ae:d9:0f:12:b3:59:f8:4a:ef:d9:fa:c7:93:
         5b:c6:a8:63:e0:0f:56:06:a8:37:aa:a5:ec:01:81:fd:d6:a1:
         44:3e:8b:dd:05:10:ba:9e:9b:b1:cc:da:12:88:20:65:a2:4e:
         f8:4d:c9:5d:18:95:66:99:81:85:02:79:54:40:d6:6d:a3:47:
         12:81:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 05:45:04 2025 by rpki-client