This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
File:                     EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json)
Hash identifier:          Y9UH8N4q27V211dxad+3XFme3xgUxL3GT5eVOOpVwKE=
Subject key identifier:   64:E9:76:3D:47:DE:86:F0:81:26:55:92:00:AD:36:EF:96:F7:13:54
Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
Certificate issuer:       /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Certificate serial:       0EBC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
Manifest number:          0EB2
Signing time:             Sat 06 Dec 2025 17:07:13 +0000
Manifest this update:     Sat 06 Dec 2025 17:07:12 +0000
Manifest next update:     Sat 13 Dec 2025 17:07:12 +0000
Files and hashes:         1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: OHAWezVwyaaRWNQkSCtGKG+/CTW+rzYVbMI74C4ArpA=)
                          2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: 0mTstOtlN/36Gmv0U1vXBpu9wAUBHuJ7+PKxStc1hKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
                          rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3772 (0xebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
        Validity
            Not Before: Dec  6 17:07:12 2025 GMT
            Not After : Dec 13 17:07:12 2025 GMT
        Subject: CN=693462c0-a010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:aa:f8:a8:82:6c:04:6a:ca:6c:63:9f:b8:
                    e4:1a:cc:22:51:6e:78:d7:0c:3f:70:f4:b1:ee:99:
                    68:85:aa:90:a9:bc:2a:01:b3:6e:d7:2c:44:ec:47:
                    d8:6b:f1:11:61:d0:12:06:ee:2a:d7:92:3e:af:fa:
                    a5:57:1b:38:b2:de:6b:21:4c:b2:13:28:29:92:6b:
                    fd:95:d5:39:78:67:96:e1:fa:30:97:fd:2e:61:e4:
                    1e:15:4f:c4:55:98:8f:d9:75:2b:40:44:ca:ce:f9:
                    21:aa:89:26:3b:dd:af:c5:d7:c3:05:a4:44:c0:9f:
                    f6:b9:de:90:b5:70:d8:65:bb:6c:8c:d7:e6:89:66:
                    0c:18:a6:f7:15:3d:c6:65:09:42:be:eb:be:4e:e2:
                    2a:f7:de:a3:fd:49:b3:fe:cf:48:21:73:4f:79:a2:
                    31:7b:58:85:e7:27:d0:ac:1d:24:aa:93:1d:62:5c:
                    8d:08:45:64:29:5e:cd:f5:08:fd:70:66:ae:88:99:
                    3a:39:a8:89:c2:45:00:fe:ff:c6:b1:eb:83:9e:a9:
                    96:fc:21:d1:10:db:7a:db:5b:90:99:a2:e7:51:55:
                    3a:6a:49:9c:c1:6a:ab:44:6d:68:43:7d:4c:eb:91:
                    95:ca:d1:a8:8b:b4:56:ee:b9:67:b3:d7:c3:ce:c3:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E9:76:3D:47:DE:86:F0:81:26:55:92:00:AD:36:EF:96:F7:13:54
            X509v3 Authority Key Identifier:
                keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:ba:01:b2:ef:b1:c0:12:19:7d:8f:39:8c:f4:2c:33:a7:
         8b:ea:fe:d9:29:3c:20:55:6c:d5:74:80:b3:2d:07:1c:f0:d4:
         8d:c1:fc:d1:d1:b0:2c:3b:da:6a:54:4f:32:52:33:c2:c9:df:
         73:c7:47:9c:0c:09:9f:c1:34:e8:07:66:27:e7:2d:c5:ea:ff:
         44:78:97:98:a6:a2:f2:f5:23:94:a0:e7:c3:37:42:72:ce:ec:
         d6:44:c3:12:dd:9d:e2:13:0e:28:06:61:7e:63:84:96:62:26:
         1a:f8:ae:cf:a2:e7:2f:11:b8:01:a6:0e:46:3e:08:82:02:5a:
         1b:38:95:19:15:25:f1:29:76:0b:12:3b:39:2d:40:e9:c2:0f:
         0b:c6:dc:79:4d:74:4e:23:0f:c3:26:41:de:c1:e0:d3:e0:b8:
         cf:51:69:a6:aa:0e:19:52:ea:33:fc:a3:1a:25:bf:f3:39:c7:
         ea:e7:1b:24:9a:ec:ec:63:31:b0:cc:c6:74:ae:93:44:0f:50:
         90:fb:43:aa:3c:dc:78:0c:97:d0:ef:cd:62:4b:30:87:ed:08:
         83:5d:f1:04:15:23:c7:e5:29:ba:37:d7:2c:06:31:3b:c3:bb:
         00:36:13:fb:bc:ed:ae:9f:64:7a:a7:4e:bc:55:67:3e:e9:6a:
         1b:26:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:33:39 2025 by rpki-client