This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
File:                     epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json)
Hash identifier:          FP5Bgx7zK3hKiDVLp+A69NuYrn6IgszDmLQcQoa2eO4=
Subject key identifier:   36:8E:11:2A:55:6C:18:86:28:00:D8:A4:DE:2F:B2:D6:A9:DD:8A:F9
Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE
Certificate issuer:       /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
Certificate serial:       03D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
Manifest number:          03CB
Signing time:             Thu 04 Dec 2025 23:04:42 +0000
Manifest this update:     Thu 04 Dec 2025 23:04:42 +0000
Manifest next update:     Thu 11 Dec 2025 23:04:42 +0000
Files and hashes:         1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: GBI9uwskcEGw1NSO+8nYVQEWDGROhSuXBYC919H3Mpw=)
                          2: BA6115F6B19D11F08DA2A57EC4F9AE02.roa (hash: yhzK504aM0ZwukBm9Hp58v17YprcHumNvrbx2tCi/3c=)
                          3: C7C714A2B19D11F0AB4AC87EC4F9AE02.roa (hash: xVfI/UuhEZlLBdOOX14MKLf7WRwvv4GN5zS12Efh5N8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl
                          rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979 (0x3d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
        Validity
            Not Before: Dec  4 23:04:42 2025 GMT
            Not After : Dec 11 23:04:42 2025 GMT
        Subject: CN=6932138a-e09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6d:c9:73:3f:fd:d7:15:a2:3b:6f:99:51:88:
                    ba:f5:36:a2:76:ac:df:76:f7:01:36:be:ef:72:e9:
                    df:46:8e:81:94:9a:23:0f:70:98:a2:0d:a1:c8:12:
                    b7:7f:b7:c9:c6:25:af:20:67:03:eb:d9:24:6c:fe:
                    99:b9:c2:5a:20:37:4b:a7:4f:26:ce:4e:6c:ef:88:
                    39:07:85:9a:81:7e:e4:1d:d7:c2:98:48:38:58:5f:
                    a8:80:0c:70:22:4e:0a:69:0a:74:69:a2:5c:3d:09:
                    64:d3:26:70:6b:3a:a8:ad:36:5d:25:bf:05:fd:28:
                    85:5b:d4:e6:cf:26:b7:9e:86:d9:20:e4:64:77:18:
                    f3:ff:df:9e:61:0b:65:33:53:cd:cd:08:92:80:c2:
                    58:17:95:e8:28:e8:37:40:16:7f:e5:63:b6:73:8f:
                    a2:20:45:72:51:a5:ca:88:eb:50:48:35:d3:bf:98:
                    89:59:5b:1c:9d:f2:f8:82:79:c7:09:d1:ef:93:c2:
                    d6:1d:44:26:5b:15:59:b1:3a:6c:15:69:8f:55:f7:
                    f4:c0:c2:c2:0a:ed:9a:85:a8:76:04:ce:27:a0:d2:
                    79:67:8e:89:31:71:f1:82:97:1d:a0:ce:1f:a1:e4:
                    fb:d8:3f:7e:77:bb:d7:f4:33:0f:38:c9:67:3d:eb:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8E:11:2A:55:6C:18:86:28:00:D8:A4:DE:2F:B2:D6:A9:DD:8A:F9
            X509v3 Authority Key Identifier:
                keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9b:34:df:ef:65:a5:5f:d0:84:4b:98:ac:42:c2:15:18:7e:
         5b:a4:2c:23:9f:46:bb:89:aa:f4:dc:4a:bc:6e:d1:3f:c0:a3:
         bd:59:1d:3a:e9:5a:d6:ed:54:e4:82:58:0a:96:c3:b1:4e:00:
         36:e5:35:ed:93:33:fc:59:9e:1b:c0:e1:2a:50:e7:f4:55:af:
         64:81:4e:93:07:0f:cd:8a:94:e7:8d:d8:2c:f3:03:4c:4b:5f:
         13:cf:be:20:11:ac:a3:c4:9d:9f:95:6d:ea:16:1c:f2:65:a5:
         c4:5f:03:a1:3f:12:42:8d:c9:df:a3:5a:a1:cb:46:81:23:c3:
         ce:68:94:60:2a:ce:45:96:2a:54:04:0c:4f:3e:61:1d:6a:2d:
         19:2f:ba:c6:0f:55:98:47:cb:57:8f:f9:a0:a9:81:af:e3:f2:
         9c:33:20:bc:13:f1:3f:ab:cb:04:68:20:14:6b:07:e3:9b:fd:
         58:7f:bb:16:01:1a:b8:ce:2c:3c:02:93:9e:b5:01:2a:ac:7c:
         6e:b9:6b:ba:5c:43:78:07:29:ac:26:0d:3e:d5:8b:0c:6c:a7:
         af:c7:7e:66:7f:44:40:a1:a5:14:b5:d7:ab:ae:1d:30:22:fb:
         a1:98:0e:21:a1:f9:5d:bd:db:27:7e:eb:04:2a:94:f8:f4:61:
         08:9f:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:44 2025 by rpki-client