This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
File:                     e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft (raw, json)
Hash identifier:          5JYvYx9i2R1lqd1OJl5+9ml/ofQhdD7OIsdhblzHecY=
Subject key identifier:   ED:15:12:03:DA:A4:C9:F8:28:99:3D:76:F5:2E:BD:37:78:A3:79:CD
Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88
Certificate issuer:       /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
Manifest number:          015B
Signing time:             Fri 05 Dec 2025 02:14:44 +0000
Manifest this update:     Fri 05 Dec 2025 02:14:44 +0000
Manifest next update:     Fri 12 Dec 2025 02:14:44 +0000
Files and hashes:         1: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl (hash: xP/7nuRGuFX7oIYS3uK0QvY/+Z2xUCrKv1a4Y+1prlc=)
                          2: 4CC50DB2BB7811EE9416DD42C4F9AE02.roa (hash: zPBkBX8TSXO+DP7kaXxBDzxvo14LuZd67QJ/cyraKFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
        Validity
            Not Before: Dec  5 02:14:44 2025 GMT
            Not After : Dec 12 02:14:44 2025 GMT
        Subject: CN=69324014-dd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:cb:07:15:0c:cc:4b:72:31:78:76:44:89:
                    32:f8:d1:df:69:7e:02:86:6e:5f:7b:6f:87:29:8d:
                    ad:59:1d:97:e3:8e:0c:29:f2:8a:68:6f:c7:ea:68:
                    14:4c:6a:50:fa:97:36:f5:61:da:fa:57:e9:55:8f:
                    d5:e3:fb:0b:eb:75:b0:a1:d4:c0:cb:75:d0:6c:a1:
                    30:ab:2b:37:8b:83:69:e8:3f:00:15:56:5e:ae:f5:
                    76:59:ab:bf:2c:8d:6b:68:73:97:1e:3d:20:e9:5e:
                    5d:d1:98:63:b3:d5:ba:65:27:6a:b1:09:4e:63:3f:
                    14:26:ae:b0:14:79:c3:ee:1b:0e:25:0c:91:33:43:
                    d9:cb:f6:78:e9:61:f0:d4:d8:f9:69:54:4e:3a:1b:
                    6b:a9:9d:e3:22:3b:3c:f5:b1:10:48:e1:6c:eb:7f:
                    eb:ae:0a:05:a3:49:89:16:21:5e:6c:ae:5a:81:3a:
                    a7:88:d2:75:00:ad:69:ec:72:16:11:44:c4:a2:67:
                    e3:b2:69:8c:69:bf:b6:1d:e9:8d:14:44:13:18:59:
                    83:7f:67:26:f9:87:55:e5:d1:a0:35:ae:61:32:33:
                    e8:e7:0e:a4:12:6a:a6:13:ed:01:4a:7a:18:0d:c8:
                    9c:16:d0:9f:8b:b6:ad:72:9d:80:4d:1c:fd:5d:51:
                    ae:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:15:12:03:DA:A4:C9:F8:28:99:3D:76:F5:2E:BD:37:78:A3:79:CD
            X509v3 Authority Key Identifier:
                keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a7:b9:69:4b:43:9c:06:92:e2:1b:e4:47:a1:c4:34:e7:7a:
         0c:03:a5:3b:13:f9:21:c9:91:2a:cd:16:0a:63:a6:f8:e9:4a:
         88:db:cc:4a:68:18:32:00:0c:10:08:4e:36:c7:cd:54:33:31:
         e5:58:03:cd:07:7f:c1:72:de:68:e4:d7:ed:49:3d:3a:9a:6f:
         a4:17:d0:cc:4a:1d:3b:5e:55:a0:fc:bc:25:cf:92:8c:88:8f:
         ab:32:a0:fb:26:8a:d5:7f:21:73:95:3e:f9:c4:9d:e9:70:87:
         68:a1:2b:4b:6b:42:66:41:dd:38:c6:99:d3:6b:6f:47:ae:2a:
         69:08:1c:38:64:44:b9:51:ef:81:43:e6:c0:66:5c:7d:64:fb:
         82:7b:01:fd:6f:01:87:74:2e:27:ed:10:9c:59:44:72:08:a6:
         78:c1:7e:5c:6c:76:74:07:7b:69:b5:79:1e:f4:90:bd:66:fb:
         56:3e:66:63:d8:ac:e4:39:91:59:05:29:2d:10:3e:17:ca:10:
         7e:db:e3:a0:7c:48:62:1d:72:09:74:75:06:84:d0:31:3c:44:
         b1:81:ce:67:e6:6b:c5:55:01:7f:38:ea:86:4c:eb:2c:1c:15:
         11:5d:3f:5c:dd:3b:05:dd:4d:8c:8c:2d:06:6b:01:34:fc:de:
         55:1d:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:43 2025 by rpki-client