This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
File:                     ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json)
Hash identifier:          UI1/qitzarLVkg6yvvRHUOs2kLPwh7O6iaJROtL92rA=
Subject key identifier:   01:29:13:9D:18:66:70:3C:F8:A5:D9:BA:4A:80:50:FB:FB:28:4D:DD
Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
Certificate issuer:       /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Certificate serial:       0B59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
Manifest number:          0B4A
Signing time:             Sat 06 Dec 2025 18:30:59 +0000
Manifest this update:     Sat 06 Dec 2025 18:30:59 +0000
Manifest next update:     Sat 13 Dec 2025 18:30:59 +0000
Files and hashes:         1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: zzijRhsv33DFs0GF5yFuWECQmOkyv2b/DJwNv59F5WQ=)
                          2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: x6v+AqgjPFRVX68ne0JC+xRgXtO5WMJX4uQIZ5czHsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
                          rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2905 (0xb59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
        Validity
            Not Before: Dec  6 18:30:59 2025 GMT
            Not After : Dec 13 18:30:59 2025 GMT
        Subject: CN=69347663-752b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:1a:48:37:77:a1:88:8f:e5:8e:ed:bb:7a:
                    42:dd:13:94:82:ee:17:3a:cb:b3:14:2d:06:b3:88:
                    ae:b5:70:bc:33:67:e8:7a:4c:29:74:d6:35:7f:c7:
                    eb:3a:74:61:81:17:80:a3:bd:6f:54:05:d0:ae:9e:
                    9b:c7:cf:e4:6a:9c:76:e7:1b:15:dc:87:22:78:89:
                    99:43:90:78:0f:df:16:ae:c2:a9:e8:ee:39:3a:07:
                    25:f6:9b:b7:e4:9f:ad:39:d7:3b:7f:d2:0f:05:28:
                    68:f6:7c:c7:20:e5:04:3e:88:7c:00:37:07:d2:7a:
                    ea:62:98:27:3c:3e:7f:03:82:ce:cf:aa:ce:a5:32:
                    02:d2:64:41:12:3e:45:15:c4:e5:7e:d6:35:ae:19:
                    6f:1f:db:92:84:eb:a3:45:e0:9e:42:10:01:d0:80:
                    50:e7:ba:07:3d:21:bc:c2:7d:9d:f3:b5:00:94:bf:
                    b8:77:72:3a:0b:34:02:0e:7e:d4:35:7e:16:01:3f:
                    9d:f4:39:f4:31:2c:fe:2e:c4:15:6b:ab:14:da:34:
                    8f:bb:5f:cf:e8:01:98:38:9e:3b:f9:29:79:01:6c:
                    75:8b:65:b4:3b:5c:3a:fe:77:6a:c0:b5:fe:4f:2e:
                    bc:bc:2e:f0:54:db:d7:83:2e:3c:24:b5:4d:fc:44:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:29:13:9D:18:66:70:3C:F8:A5:D9:BA:4A:80:50:FB:FB:28:4D:DD
            X509v3 Authority Key Identifier:
                keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c2:56:11:7e:bc:b8:17:59:e8:00:07:24:3a:98:17:75:a2:
         e0:2d:f8:84:e9:6b:dd:41:9f:ed:c3:20:02:82:68:de:b0:c3:
         7b:50:51:3a:77:51:70:03:28:11:dc:d1:09:1a:92:23:ba:9c:
         f7:c2:c2:1e:53:7f:3d:dc:16:37:85:75:d2:0f:f5:76:06:80:
         ed:1e:b2:69:f3:63:fb:78:bd:99:8a:eb:a0:b1:5d:c2:ce:79:
         6b:e6:3b:d5:13:dc:14:b2:df:fc:cd:df:57:5c:f4:83:3c:25:
         2a:f2:75:95:41:ea:80:5a:1d:c5:fd:c7:55:92:a5:63:67:d8:
         b9:96:4a:17:41:41:7d:fc:e8:8f:8c:a2:f8:41:0b:9e:6b:f1:
         d5:fc:f0:73:2a:ba:6c:c7:ca:d5:55:53:4b:88:88:9b:d7:07:
         c0:48:77:25:68:53:89:60:82:f4:6b:29:8b:58:9f:d4:49:7a:
         34:6f:aa:a0:fe:2b:d5:38:62:e3:75:39:9d:9e:20:0a:2b:f1:
         06:4d:5b:53:4e:d5:41:a1:95:35:50:eb:a1:dd:54:47:90:24:
         9b:f1:09:55:a6:14:f3:c8:a1:e3:81:9c:f8:50:30:47:1a:8a:
         a1:5e:59:28:bf:34:b2:63:6b:6d:ba:86:cc:c3:99:51:53:64:
         28:a2:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:33 2025 by rpki-client