This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
File:                     ELQL29GDlBfXrRIzKwvm-fxugQU.mft (raw, json)
Hash identifier:          nxJ90+dDMk7QvL+PKYgc1F40gmLxQAeTps+VhWyhVo4=
Subject key identifier:   FD:1D:14:EE:CA:CB:ED:B5:69:B9:CF:77:95:6E:34:C6:07:5D:BD:A4
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       0457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
Manifest number:          044C
Signing time:             Sat 20 Dec 2025 23:29:20 +0000
Manifest this update:     Sat 20 Dec 2025 23:29:20 +0000
Manifest next update:     Sat 27 Dec 2025 23:29:20 +0000
Files and hashes:         1: ELQL29GDlBfXrRIzKwvm-fxugQU.crl (hash: HfisJHt22YRDGJYVn9T9bunaELHpEdnyrsfQekJ0kDc=)
                          2: 05A179C2B02E11ECA990305CC4F9AE02.roa (hash: ggpg0eaRT52E6xFbB9+pQAJM6j7g6/Q8WqGAyEJWnwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl
                          rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D, serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Dec 20 23:29:20 2025 GMT
            Not After : Dec 27 23:29:20 2025 GMT
        Subject: CN=69473150-3e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0b:51:ce:f8:84:8e:8c:a5:ca:af:92:53:24:
                    38:1d:e4:fb:9b:46:7c:2e:53:c7:6f:f1:46:02:d3:
                    8f:db:f9:5d:c7:20:3f:41:97:58:4a:ae:4c:4d:8b:
                    1d:38:e2:06:ad:75:d3:c4:d0:ca:3c:d5:af:c6:47:
                    3e:b1:6f:da:90:5d:6a:b7:11:54:47:66:a4:d3:99:
                    72:48:1a:ae:dd:f5:9c:e8:ed:e0:c1:43:e1:79:b8:
                    b3:c3:c7:a7:37:4c:13:5a:70:b8:fd:6b:3e:d2:78:
                    bf:30:f9:0e:09:dc:70:14:37:7b:29:8d:66:e0:4e:
                    47:d7:fe:49:57:19:95:95:9c:55:89:42:89:34:31:
                    91:f1:04:15:dd:35:92:19:a5:ae:00:34:eb:cf:54:
                    3e:a3:d6:02:d3:29:4b:1e:97:a9:e8:20:18:36:a1:
                    7f:d5:79:52:6a:91:c6:35:81:c4:9f:d9:b1:9f:ff:
                    94:28:9c:4a:ee:4b:2e:71:56:77:ad:f3:fd:41:42:
                    db:64:72:f6:bd:4d:df:34:f9:67:6b:1d:ec:12:67:
                    16:62:1e:94:63:8c:c3:92:88:e1:40:5a:3d:6f:5a:
                    08:90:1e:2c:a7:22:da:c5:0f:58:2c:cd:11:75:81:
                    4c:4e:5f:72:e6:04:ca:c9:91:66:4f:6b:71:b5:c6:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1D:14:EE:CA:CB:ED:B5:69:B9:CF:77:95:6E:34:C6:07:5D:BD:A4
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e6:8b:38:39:fd:fb:66:15:40:ba:2b:10:58:3c:85:2a:2a:
         e8:29:22:5a:70:94:d7:14:14:b0:f8:3a:20:e9:2f:01:22:89:
         fd:de:d3:60:4f:65:f5:30:0e:a6:49:55:28:4c:9f:b5:5e:b8:
         c4:9d:21:75:ce:fb:b9:cd:96:fb:d9:f7:1b:ec:b0:fb:84:af:
         8f:81:c6:a3:89:8d:32:6b:b3:4b:6a:dc:72:5d:d6:84:85:46:
         00:8b:5e:cc:34:a0:39:4c:92:9a:a9:11:bd:1f:ed:78:9c:07:
         73:da:60:1f:13:43:20:25:37:b6:5d:15:b0:4e:9b:fd:1a:e8:
         d3:83:0f:43:e8:9e:ed:ff:3e:13:cf:2a:94:bf:e5:04:54:d7:
         71:cc:1c:9f:41:40:5c:31:67:9a:bf:a1:9c:ce:55:64:46:1f:
         ce:c9:e3:6e:d5:2f:f5:a8:c2:17:c9:2e:a2:65:e2:c2:ba:cd:
         48:33:3e:af:45:55:86:51:b4:e4:83:44:32:20:c3:c8:64:a1:
         0b:6d:89:9c:0d:69:c8:a4:e2:cc:55:ae:4f:25:2b:ad:02:b5:
         89:94:1d:03:5a:87:85:d7:42:fe:59:e6:b7:57:f9:2b:8d:68:
         31:61:63:78:97:1c:67:a3:23:ad:8c:f9:3e:4f:cb:e2:32:f0:
         73:7d:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:06:56 2025 by rpki-client