This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
File:                     0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json)
Hash identifier:          jjONHkr97VE1T1KbS1gYyc5gbjtfFBJlCqNCrBNo9g4=
Subject key identifier:   17:29:7B:3D:28:98:26:12:E0:77:CC:C3:26:8C:39:12:DD:FE:C3:74
Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
Certificate issuer:       /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Certificate serial:       01F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
Manifest number:          01EF
Signing time:             Fri 05 Dec 2025 00:55:16 +0000
Manifest this update:     Fri 05 Dec 2025 00:55:15 +0000
Manifest next update:     Fri 12 Dec 2025 00:55:15 +0000
Files and hashes:         1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: dm0MV77gX/0rWO/6Jy4VEUR+JGA4f0vsFJQn/X1ixU4=)
                          2: AD9C1DEE9E2311F0A35D7D1FC4F9AE02.roa (hash: 2AFvxOgERN6IP1ghZwOz+nDsY9qU1LoYMzKU7ME8H9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl
                          rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
        Validity
            Not Before: Dec  5 00:55:15 2025 GMT
            Not After : Dec 12 00:55:15 2025 GMT
        Subject: CN=69322d74-8863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:d0:2b:e7:81:bb:91:be:7f:17:10:6d:bd:
                    aa:8b:ed:b0:ea:fe:72:55:28:b6:a7:e9:87:29:c6:
                    83:e7:77:7e:77:09:80:79:31:4e:99:68:86:50:16:
                    df:f8:71:2c:02:b5:19:61:08:0f:62:32:ed:a4:c5:
                    52:16:86:36:d9:81:68:f2:1a:42:76:49:ba:93:71:
                    fd:bd:79:36:73:53:d1:6b:c2:88:86:c1:f9:67:a1:
                    f4:fd:2f:c6:cc:4e:da:aa:54:fc:8a:a1:2e:8f:ad:
                    5d:f3:f9:06:cd:dc:13:78:33:7f:16:d5:41:47:e9:
                    fe:38:49:81:45:ac:33:b8:59:45:7e:da:5e:b0:a0:
                    92:e1:e6:ad:c1:86:e4:6b:65:87:21:7f:87:e2:17:
                    e1:64:1d:20:2e:90:08:f5:6d:ee:37:ca:ca:3b:41:
                    09:11:4a:37:b7:44:67:5c:61:51:a9:27:b1:50:d4:
                    ab:54:b1:67:2a:e3:7e:21:bf:f4:e7:c6:b1:af:8b:
                    5b:ec:c3:a0:59:8a:46:21:eb:dd:22:78:de:a4:04:
                    a0:43:08:f2:56:c5:d3:98:02:86:7c:e6:7a:ac:06:
                    43:aa:d2:c3:01:a9:a5:2a:35:07:3a:02:41:ea:1f:
                    b1:4d:32:2d:6d:45:d4:44:5c:9e:fd:9d:65:72:a4:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:29:7B:3D:28:98:26:12:E0:77:CC:C3:26:8C:39:12:DD:FE:C3:74
            X509v3 Authority Key Identifier:
                keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:98:53:42:47:1f:67:78:91:b3:8f:fa:a0:e9:b1:92:39:a6:
         c7:64:d6:39:51:55:fe:92:a7:62:fd:87:a5:9b:f4:ed:7d:74:
         1f:4b:d1:36:e2:e5:f3:7b:82:b2:53:e5:f1:f1:54:79:25:82:
         94:6d:27:b6:e3:c0:11:6e:57:98:62:7b:4b:a3:20:52:22:d9:
         ae:75:82:b4:64:20:7b:d1:8f:40:32:7b:5f:e8:8b:30:d4:fc:
         5d:63:96:c6:bd:8a:19:35:a3:01:30:fa:26:94:db:8f:cb:75:
         08:b4:16:35:a7:9a:28:f4:49:af:2b:3b:86:6c:ff:22:80:74:
         36:81:95:77:c2:28:07:09:fc:1c:d7:9e:95:8b:65:0a:b2:e8:
         a7:18:9a:ae:d4:65:36:e2:20:cf:41:48:71:a8:b1:92:3b:81:
         79:b5:f6:62:0b:bc:d0:b4:ec:80:05:c6:b1:9b:a4:f4:fa:73:
         1c:54:a0:c6:ac:8f:db:79:d4:ad:20:96:23:b5:91:37:f4:c6:
         3a:a9:ef:b8:fe:fa:e6:6d:80:b2:8e:f0:47:2c:c0:1d:2c:71:
         56:cd:13:32:f5:bd:62:87:c6:1c:0f:f6:b4:c3:f9:95:df:0a:
         a5:88:3a:88:94:db:7b:ed:d6:92:e3:44:97:d6:8b:23:87:c8:
         21:48:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:59:17 2025 by rpki-client