This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
File:                     ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json)
Hash identifier:          l7XumNwW30qERftRQ9J4hTtsQqHe0Q6iDg4e31AeVKM=
Subject key identifier:   E3:45:53:B8:67:0C:C9:2F:7B:92:19:02:E1:87:35:B7:D5:1C:45:A6
Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
Certificate issuer:       /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Certificate serial:       1C9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
Manifest number:          1C83
Signing time:             Sat 06 Dec 2025 15:51:22 +0000
Manifest this update:     Sat 06 Dec 2025 15:51:22 +0000
Manifest next update:     Sat 13 Dec 2025 15:51:22 +0000
Files and hashes:         1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: l8IpLH2L8em2EkDrSAotFNpKUWZbT65oxyo5K2sxJbE=)
                          2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: 4+gvlbrCKPYHxXa5P1wV2CMHV3TVWTeug3ZLXYBNytU=)
                          3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: nzh03mGpFuWBuJjX4zOpsk0cBliW2iPs211HjGanKnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7324 (0x1c9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
        Validity
            Not Before: Dec  6 15:51:22 2025 GMT
            Not After : Dec 13 15:51:22 2025 GMT
        Subject: CN=693450fa-b2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ca:7d:aa:54:b3:ff:5c:ec:11:3f:1c:da:3a:
                    c8:fe:27:c4:00:72:42:7d:cb:46:56:18:25:50:9a:
                    f2:36:99:45:cd:60:9d:7d:d6:e3:a0:50:d2:d8:17:
                    fc:da:16:10:9e:75:e0:55:ce:90:20:8c:94:a2:02:
                    e9:45:d3:09:c2:ea:9f:ca:03:67:8e:29:45:de:e0:
                    05:ff:8e:09:2b:5c:29:97:36:66:fb:6c:5b:69:b6:
                    5d:0c:fe:0d:a1:c1:5e:a0:31:7a:4a:c7:46:9c:6e:
                    3c:6f:2c:ea:b0:89:08:82:68:2a:6e:ce:ad:77:fc:
                    f7:fc:ba:74:14:bb:bc:df:1d:3c:10:7a:76:77:cc:
                    d6:1f:1d:0f:aa:63:2e:53:65:18:16:22:c8:02:33:
                    24:cf:46:1a:a3:8f:53:68:4e:7f:a5:eb:41:01:02:
                    fe:48:02:ba:b8:d1:11:77:e6:db:0c:b4:ec:54:fa:
                    d8:fd:c6:6d:22:9e:2d:ed:ba:74:47:7b:c1:c4:37:
                    0f:60:23:11:8a:d7:a6:91:62:08:ad:29:25:60:a8:
                    80:ff:38:ea:b9:0d:0e:98:39:09:33:30:8a:13:48:
                    1d:79:56:60:7b:a5:65:79:b1:d0:07:f1:61:c7:03:
                    a8:76:5a:36:b5:6d:22:98:ec:40:e0:c8:88:a5:5a:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:45:53:B8:67:0C:C9:2F:7B:92:19:02:E1:87:35:B7:D5:1C:45:A6
            X509v3 Authority Key Identifier:
                keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3a:03:d4:f3:90:47:d4:14:a4:53:ed:73:ca:fe:ee:31:ce:
         f7:30:74:45:79:dc:bb:b2:5b:60:8f:b1:e0:de:0b:ce:69:ee:
         34:bb:b8:12:04:8c:1e:0b:52:3f:9a:3b:d1:bf:cc:c5:fa:96:
         24:2d:47:54:36:aa:5f:ac:d7:da:6b:03:42:00:73:45:a3:9c:
         82:9b:b6:b4:8d:23:d8:57:05:ca:2d:d5:fe:65:ed:6a:64:f9:
         88:79:d2:af:0b:6d:c3:38:e1:51:5e:bd:8b:86:26:b2:e5:e1:
         7c:94:bd:39:29:fb:ac:a6:3e:8f:d5:a1:5b:75:94:bc:8b:b2:
         da:14:77:09:01:ff:34:48:a7:7f:6a:0c:48:4f:aa:de:86:e4:
         72:40:64:ef:2a:1d:dc:fd:73:14:b3:3c:de:13:1b:e4:85:26:
         69:ab:0c:cd:0b:58:21:54:06:3b:88:3c:4c:2f:1b:c7:65:3f:
         fd:10:13:32:17:98:02:8f:03:26:eb:95:50:f0:21:81:e6:7b:
         fa:db:1f:08:20:6f:4c:18:79:c3:ed:22:97:2a:a4:d5:9b:74:
         be:83:2a:05:c1:9d:5a:6a:fc:19:56:ed:ce:f6:43:62:fe:d3:
         a1:e3:63:e6:a3:a8:4c:84:33:76:c1:f4:a3:0e:fc:1d:0f:48:
         8a:16:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:39 2025 by rpki-client