This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
File:                     eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft (raw, json)
Hash identifier:          owNBO10e9WZopgyYH4YCN+H8tjuCy2WYvmNc6SbhjiI=
Subject key identifier:   30:17:67:FD:7A:C8:23:90:05:53:AA:94:74:C4:F6:BA:7B:3E:16:DE
Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
Certificate issuer:       /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Certificate serial:       0397
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
Manifest number:          0390
Signing time:             Mon 22 Dec 2025 23:49:01 +0000
Manifest this update:     Mon 22 Dec 2025 23:49:00 +0000
Manifest next update:     Mon 29 Dec 2025 23:49:00 +0000
Files and hashes:         1: eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl (hash: TwMnvKv60Br2p86AtqwgDVwxLggurRBTX5K2x+Y0/9Y=)
                          2: 681E9EECCAC111ECA0AC3E32C4F9AE02.roa (hash: yx0tgJAxnt6G+jTtg9/EBjHjIHPyHzwd9ZlOS5AoF1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182B6F, serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
        Validity
            Not Before: Dec 22 23:49:00 2025 GMT
            Not After : Dec 29 23:49:00 2025 GMT
        Subject: CN=6949d8ed-c7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:90:84:b7:19:99:c5:e6:d7:29:50:86:33:
                    63:4c:fd:24:31:73:47:a2:3b:08:ce:7a:41:c9:48:
                    96:02:07:54:f6:ed:42:01:e7:2d:3c:33:49:05:b5:
                    7b:44:53:03:af:58:a1:de:ab:65:d3:8e:1c:9b:62:
                    cc:21:b3:28:18:75:75:e7:a5:38:15:5c:ca:c6:20:
                    03:01:d0:3e:d1:d3:a8:fd:0a:3f:61:3f:3a:f6:25:
                    98:22:c3:41:8c:62:0a:b6:08:07:b9:2d:8d:a8:82:
                    c2:07:63:1d:e6:75:af:f2:1c:59:df:7c:0e:98:5a:
                    bd:1d:57:ef:67:4c:7e:6e:9d:dc:f0:fe:91:0b:c7:
                    80:80:55:a9:a2:16:8c:a9:ab:59:23:44:6e:b4:4d:
                    6f:ff:c8:c6:83:31:2d:ac:57:2d:fc:de:6e:7a:c4:
                    4c:d0:ac:65:6b:ad:fd:c6:bf:d6:bd:69:25:ad:3d:
                    31:56:0b:36:0e:d2:e2:11:f9:e4:0f:d6:9e:2f:89:
                    1f:fe:b0:cf:02:a5:1b:e3:5b:ba:52:b6:3a:38:10:
                    f2:07:54:ce:83:ef:63:23:c2:16:04:69:55:9a:51:
                    62:80:06:85:48:be:b2:c8:6a:50:61:9f:39:6f:d4:
                    c2:77:cc:09:43:86:cd:27:1c:ef:21:c9:93:5e:e9:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:17:67:FD:7A:C8:23:90:05:53:AA:94:74:C4:F6:BA:7B:3E:16:DE
            X509v3 Authority Key Identifier:
                keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:05:c8:55:43:77:5d:fc:59:d3:2e:9d:28:6c:ea:e0:de:8b:
         49:51:f2:fc:57:5c:e2:d9:fd:96:d2:ba:48:47:59:d9:b7:30:
         91:e9:d3:71:fa:f2:55:72:db:dc:3f:fe:07:d1:83:83:8a:49:
         63:c1:62:ba:7d:bc:aa:6f:01:ec:6b:61:bb:54:ce:e2:26:4d:
         70:05:68:0f:4b:ca:67:8d:5b:4f:d5:29:e1:37:22:d0:e5:45:
         85:2f:b2:b2:09:ab:fe:89:43:46:34:d2:1d:06:2a:ad:21:9d:
         52:c9:03:25:7d:3c:96:46:01:a0:1a:29:b7:74:6f:4e:22:0f:
         86:fc:db:f0:ca:6f:05:54:b0:ee:3c:0e:82:34:a9:fe:fd:81:
         79:18:0a:1f:c7:7c:03:f9:ee:71:ab:a8:1b:5b:6e:aa:4c:7f:
         45:d7:8d:01:f5:7d:fc:a8:d1:f5:f5:4c:8c:c8:0d:60:03:a3:
         4b:76:d9:de:26:82:82:a1:8e:96:7f:b7:f3:32:aa:40:22:a7:
         bf:a0:84:7a:6e:4d:7a:47:9c:67:f8:3d:bb:2e:65:22:ac:1c:
         98:c5:40:0d:12:eb:2e:30:0d:e9:09:0a:02:e8:13:30:57:cc:
         c6:5c:ec:c7:93:9e:d7:0b:54:08:06:0b:84:4d:ea:2e:d0:4c:
         dd:5e:89:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:04:22 2025 by rpki-client