This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
File:                     EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json)
Hash identifier:          P+ylexUcoDVPt313A3OCNH+rDsm8PNU0Tywcw+lWams=
Subject key identifier:   9B:75:DF:4F:78:0B:E6:06:F1:4B:16:38:27:DA:F2:6A:24:9C:D1:97
Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
Certificate issuer:       /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
Manifest number:          FF
Signing time:             Fri 05 Dec 2025 03:10:03 +0000
Manifest this update:     Fri 05 Dec 2025 03:10:03 +0000
Manifest next update:     Fri 12 Dec 2025 03:10:03 +0000
Files and hashes:         1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: 4y9jxT7pGz/H4Sl6fmNuJ9QDBIJH+bHnIa/64bU3kP4=)
                          2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: tG+xEb4Bj22fmRv5Ap5El7N6H/BamXJAvudixhV4S5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE814, serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
        Validity
            Not Before: Dec  5 03:10:03 2025 GMT
            Not After : Dec 12 03:10:03 2025 GMT
        Subject: CN=69324d0b-59ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:e9:b9:13:81:5b:c8:0a:6f:90:2e:e0:e2:
                    5b:fa:d4:12:fb:67:ae:39:10:cc:97:bb:ad:fb:ad:
                    13:eb:4a:5e:a1:45:1f:c8:b9:30:c5:83:f6:b5:d3:
                    29:91:96:b2:c6:58:b9:f7:ea:aa:0d:91:45:a6:f8:
                    7b:a2:4a:3c:e8:b8:a2:ad:aa:83:02:e3:66:97:94:
                    f1:15:6c:8b:c1:5d:16:08:dc:20:f0:2d:7b:d5:13:
                    20:b0:b5:94:4b:29:e2:57:c5:a3:ed:91:ab:58:39:
                    e8:2c:e3:0b:16:1c:fd:a0:2f:b3:4f:43:0e:92:26:
                    71:ff:1c:35:f5:0f:e8:1f:ef:c7:15:1d:16:2a:19:
                    56:ba:39:ae:e7:dc:01:9b:f9:d0:2e:fd:b2:14:ee:
                    40:4c:cb:fb:64:ab:2d:d5:73:83:a5:0f:dc:cc:7c:
                    db:43:55:37:ed:6c:7c:56:ae:df:29:2b:bb:20:21:
                    ba:1c:16:6f:94:67:f7:c5:f7:5d:de:51:10:a3:9b:
                    f1:4d:96:ef:3c:d0:d4:44:81:e9:1f:60:5c:f0:c3:
                    1e:c4:08:23:d2:0d:33:f7:3d:b9:b7:34:eb:7c:7d:
                    a4:d4:35:19:85:2c:04:dd:c7:4e:c9:94:2c:08:20:
                    8d:18:59:a3:64:72:03:50:45:6b:9d:11:1a:45:2c:
                    bf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:75:DF:4F:78:0B:E6:06:F1:4B:16:38:27:DA:F2:6A:24:9C:D1:97
            X509v3 Authority Key Identifier:
                keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:76:6f:66:77:46:88:bd:18:69:26:68:ca:25:de:d9:6f:f9:
         18:7b:25:84:c1:1d:4b:94:87:13:4e:0d:3b:04:97:ee:71:06:
         f2:f0:ff:42:4b:30:fa:d7:e0:94:47:eb:55:0e:dd:20:1f:40:
         2c:b5:9f:de:4c:f8:c2:2e:66:f9:8f:fd:80:0e:05:21:b0:f4:
         e9:3a:4d:6b:10:e4:4e:24:ad:b3:1b:d4:c3:fb:af:c3:1d:17:
         f6:29:be:bd:9c:48:cc:6f:29:f1:15:6f:4a:9d:a2:98:ce:a2:
         e1:f5:37:ea:52:bb:65:92:f5:32:47:e4:e7:8a:9d:7b:de:3b:
         87:be:30:5a:7d:22:f4:51:62:7b:ae:94:69:05:20:53:93:e7:
         bf:11:ee:30:03:94:b5:59:0b:dd:c5:74:38:ac:17:70:f8:d5:
         92:28:42:b6:9b:bf:f4:d2:95:2b:06:81:6b:83:c6:f1:48:6b:
         02:38:54:6d:c2:d6:f5:3b:4b:7b:d5:5a:ed:26:a8:fe:c5:06:
         ad:46:10:12:44:17:9f:26:5a:c6:6d:4c:4f:55:d2:ac:9a:cc:
         c7:b2:dd:69:74:10:92:bf:b7:dc:09:35:f3:3b:3c:b4:30:f3:
         1b:65:97:83:06:0d:e6:46:81:cf:1c:b9:23:75:4d:59:2a:7d:
         2d:94:d8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:27 2025 by rpki-client