This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
File:                     eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json)
Hash identifier:          lZxKziPIOuzQGnR9cnZQL+0ar0601mA5coM/dGaAPp0=
Subject key identifier:   47:8E:2F:E1:5C:72:EC:8B:48:BC:F8:10:3E:C5:F4:A2:7E:0D:F4:51
Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
Certificate issuer:       /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
Certificate serial:       111B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
Manifest number:          1110
Signing time:             Thu 04 Dec 2025 16:52:55 +0000
Manifest this update:     Thu 04 Dec 2025 16:52:54 +0000
Manifest next update:     Thu 11 Dec 2025 16:52:54 +0000
Files and hashes:         1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: lz/AYAsEQftfYkFHYJdkuYhpnjDW0P8ey1rkj1bZqVw=)
                          2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl
                          rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4379 (0x111b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
        Validity
            Not Before: Dec  4 16:52:54 2025 GMT
            Not After : Dec 11 16:52:54 2025 GMT
        Subject: CN=6931bc67-729e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:36:3a:4e:99:62:10:07:a4:24:c7:88:f9:
                    39:fa:ad:34:c9:ec:a9:83:05:49:b9:9c:59:49:8c:
                    b5:64:6b:cd:58:fd:fc:bb:2c:58:ce:65:07:f5:34:
                    1e:19:be:b3:30:31:36:16:19:e6:17:1c:d0:ca:13:
                    19:ed:c9:29:14:cb:ae:8e:d7:cf:22:54:b7:58:41:
                    81:9a:48:95:6a:d6:23:30:9e:42:ea:4c:a2:9d:56:
                    d7:c3:75:62:04:a7:24:43:3a:79:a6:0e:3c:b5:e0:
                    cd:d5:91:cc:e3:1c:23:53:17:4f:d2:c5:a8:d4:17:
                    fe:e5:dc:63:ff:26:91:5f:80:33:bd:91:f6:3d:3c:
                    a4:4e:1d:29:3d:42:cb:f8:e5:a9:f5:1d:f4:be:7f:
                    33:20:0c:ba:12:09:2c:fb:ec:b9:56:7c:fa:56:9b:
                    1b:df:5c:77:4a:5e:3b:c5:f6:a2:8b:8e:ef:7f:40:
                    14:08:2e:f1:11:c9:3b:39:a0:47:db:6d:67:4a:1a:
                    62:09:21:9d:33:f0:92:6d:27:2a:75:ab:50:77:a8:
                    7c:db:13:c3:d3:d9:42:3e:ec:8b:c7:56:60:f5:41:
                    b4:77:05:2e:6d:58:ce:fb:07:46:de:a2:e8:90:5e:
                    29:90:02:cd:e2:40:63:67:a3:37:cc:1a:f0:31:fc:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8E:2F:E1:5C:72:EC:8B:48:BC:F8:10:3E:C5:F4:A2:7E:0D:F4:51
            X509v3 Authority Key Identifier:
                keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:02:65:cb:22:77:1e:7d:ea:f7:9b:74:ea:4e:cd:f7:66:fc:
         0c:d7:69:73:9d:4d:48:e2:0c:57:82:6e:3e:9d:87:65:4c:34:
         7e:be:56:d5:ff:cf:2d:0c:3b:16:65:94:5f:4e:2c:65:a7:9b:
         45:f4:4c:8b:84:95:99:89:09:c2:f1:3e:47:67:ad:6d:e1:f7:
         c7:d8:83:42:9d:18:f0:ee:d8:cd:9c:f5:f2:99:b0:5f:be:d2:
         50:c6:4e:4f:89:31:e5:73:02:25:aa:97:65:0c:f8:de:39:77:
         bb:6b:78:d8:0e:7b:a9:24:8c:93:18:87:8f:58:84:03:b7:42:
         59:f7:80:13:1b:17:30:ac:b7:81:87:df:de:de:31:39:20:9c:
         32:ba:f4:89:1f:06:93:4a:bd:71:7b:40:34:ae:3f:a8:08:d3:
         9b:d4:0e:11:6d:4d:d5:26:35:a1:87:7d:e4:c6:97:94:2c:4d:
         0b:ad:ae:89:5d:41:10:e1:ee:da:cf:56:d0:4f:1b:dc:a7:be:
         64:24:0e:2c:60:0e:7e:c8:cf:6f:25:a1:e0:d2:00:bb:91:ce:
         52:b2:b2:40:e0:ae:0f:31:e7:8d:fe:29:ff:c2:eb:03:a6:7f:
         77:24:6b:56:a2:f3:3b:7b:c0:f5:55:8e:d8:2e:74:1e:e3:fb:
         ad:04:ba:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICERswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDRTkxMTAvBgNVBAUTKDc4NUFCMEIyMkRDRTVBMTI2NjUwMEMxMDY2QjRGNkIw
NUY3NUNBQzAwHhcNMjUxMjA0MTY1MjU0WhcNMjUxMjExMTY1MjU0WjAYMRYwFAYD
VQQDEw02OTMxYmM2Ny03MjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqY2Ok6ZYhAHpCTHiPk5+q00yeypgwVJuZxZSYy1ZGvNWP38uyxYzmUH9TQe
Gb6zMDE2FhnmFxzQyhMZ7ckpFMuujtfPIlS3WEGBmkiVatYjMJ5C6kyinVbXw3Vi
BKckQzp5pg48teDN1ZHM4xwjUxdP0sWo1Bf+5dxj/yaRX4AzvZH2PTykTh0pPULL
+OWp9R30vn8zIAy6Egks++y5Vnz6Vpsb31x3Sl47xfaii47vf0AUCC7xEck7OaBH
221nShpiCSGdM/CSbScqdatQd6h82xPD09lCPuyLx1Zg9UG0dwUubVjO+wdG3qLo
kF4pkALN4kBjZ6M3zBrwMfzJ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeOL+Fc
cuyLSLz4ED7F9KJ+DfRRMB8GA1UdIwQYMBaAFHhasLItzloSZlAMEGa09rBfdcrA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNFOS84NzEwNkQzRTI3
MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1doSm1VQXdRWnJUMnNGOTF5
c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VGcXdzaTNPV2hKbVVBd1FaclQyc0Y5MXlzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkNFOS84NzEwNkQzRTI3MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1do
Sm1VQXdRWnJUMnNGOTF5c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnAmXLIncefer3m3TqTs33ZvwM12lznU1I4gxXgm4+nYdlTDR+vlbV
/88tDDsWZZRfTixlp5tF9EyLhJWZiQnC8T5HZ61t4ffH2INCnRjw7tjNnPXymbBf
vtJQxk5PiTHlcwIlqpdlDPjeOXe7a3jYDnupJIyTGIePWIQDt0JZ94ATGxcwrLeB
h9/e3jE5IJwyuvSJHwaTSr1xe0A0rj+oCNOb1A4RbU3VJjWhh33kxpeULE0Lra6J
XUEQ4e7az1bQTxvcp75kJA4sYA5+yM9vJaHg0gC7kc5SsrJA4K4PMeeN/in/wusD
pn93JGtWovM7e8D1VY7YLnQe4/utBLpY
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:31:15 2025 by rpki-client