This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
File:                     etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json)
Hash identifier:          SQzCwq8Nd4j71b2iXTeldFvkrG2H+4TIFwUUWIc70+o=
Subject key identifier:   B3:00:E3:DE:52:BC:D5:D6:FB:DB:FE:0A:8C:10:EE:99:E8:A5:C6:27
Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
Certificate issuer:       /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
Manifest number:          8A
Signing time:             Fri 05 Dec 2025 04:42:08 +0000
Manifest this update:     Fri 05 Dec 2025 04:42:08 +0000
Manifest next update:     Fri 12 Dec 2025 04:42:08 +0000
Files and hashes:         1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: 1j13u1L6zfa3HZWwrGX1xertV2UqH97tKePPrT0FbJ0=)
                          2: 395D655C7E7D11F09D59515FC4F9AE02.roa (hash: X7yiw9KkbMvfPSh6NmhVBMacnnndeqJr+fXdsNTW1D8=)
                          3: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: X1rRaXgadVtl9VfEE2Fs4BNuO0hzLgvUwGhsT4mAVns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
                          rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
        Validity
            Not Before: Dec  5 04:42:08 2025 GMT
            Not After : Dec 12 04:42:08 2025 GMT
        Subject: CN=693262a0-7c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:50:f9:0a:ed:7e:02:39:ac:43:4a:ef:4f:
                    eb:48:8e:f5:af:c4:98:58:13:9a:57:50:f7:a4:0c:
                    76:40:5d:53:a5:8a:6e:a2:c2:18:fe:81:07:8e:b9:
                    58:9d:ee:1e:74:71:65:74:54:62:6e:15:b3:58:78:
                    3d:e3:d2:3d:ce:48:07:ea:b8:ee:54:cd:b6:3f:0e:
                    68:c0:b1:85:43:25:05:eb:49:8e:e9:5d:ac:ce:ca:
                    8c:9d:74:65:e7:c9:99:a0:9f:aa:16:10:c8:76:ef:
                    de:df:bc:6e:76:c2:72:63:90:11:44:5f:28:ed:1c:
                    50:85:0c:f1:3d:62:33:9c:9d:84:3a:cb:65:32:46:
                    a7:d0:16:30:3f:6b:0f:de:17:8a:ae:6d:f1:fb:a5:
                    a2:93:f0:60:f5:3c:05:74:f3:37:42:d7:47:ba:d8:
                    df:88:8f:6e:93:f1:bd:ea:5e:3c:47:41:7c:b4:86:
                    92:36:6f:29:76:69:00:cd:06:66:93:4d:61:b0:5c:
                    77:8e:d1:97:99:e9:2a:4f:6b:35:9e:12:35:c9:2a:
                    1b:24:19:dd:86:c9:51:84:2b:2e:ad:e2:95:a1:38:
                    13:96:ff:76:cd:ed:95:b1:00:98:80:2a:cc:54:69:
                    0d:c7:d7:4e:f4:f3:fd:39:bb:20:a3:9d:cc:4b:35:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:00:E3:DE:52:BC:D5:D6:FB:DB:FE:0A:8C:10:EE:99:E8:A5:C6:27
            X509v3 Authority Key Identifier:
                keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:91:9d:f4:22:b1:f2:ff:b3:db:4d:70:58:71:9b:b3:99:7e:
         74:2d:c8:a8:2e:59:a1:d4:ee:28:63:51:ab:31:47:9b:a5:fc:
         4e:9f:ac:e2:57:f8:c0:e0:92:e2:ae:14:d3:e5:15:d1:ba:f8:
         b1:48:57:7a:64:60:c9:a8:81:c3:35:83:f9:7e:f9:03:7b:27:
         c7:6f:98:d7:7a:bf:bd:96:cc:b0:52:87:6c:5d:ef:4a:b4:6e:
         f9:54:7f:cf:3b:cd:7e:ad:55:69:13:96:d4:f2:56:55:b3:89:
         3e:34:bd:17:c1:b9:62:ff:4f:a5:7c:52:26:55:6a:2a:71:1a:
         4b:aa:df:3a:f2:ab:02:72:f5:6f:98:a4:93:90:5f:b6:e6:e4:
         2d:9f:6d:22:76:bb:e7:5d:44:8d:62:5f:99:f1:e8:96:6e:c5:
         72:12:db:e0:65:eb:ec:c2:4b:25:24:5e:1c:96:2f:ea:af:61:
         88:51:c9:6c:a1:8d:f4:b9:0c:88:9c:3b:2f:c6:d8:fc:60:18:
         e7:85:85:ce:bc:37:4e:22:ac:3e:53:f2:03:73:ab:e9:62:1b:
         3a:be:d7:7b:73:f3:c3:8a:63:35:cf:aa:17:f7:8f:5b:ee:1e:
         05:3e:92:d1:95:20:2e:5e:bd:2f:98:02:71:16:da:c1:20:10:
         4c:db:4e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:32:37 2025 by rpki-client