This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
File:                     et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft (raw, json)
Hash identifier:          WG1b5AHaB0xdkb6WoRFNOQ9dE4cUv7K6BbHa7VMaAqU=
Subject key identifier:   B8:98:7E:74:B8:DF:A7:FE:DF:A9:65:84:85:F9:34:5C:92:B5:00:EA
Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1
Certificate issuer:       /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
Certificate serial:       0723
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
Manifest number:          071C
Signing time:             Sat 20 Dec 2025 21:12:03 +0000
Manifest this update:     Sat 20 Dec 2025 21:12:02 +0000
Manifest next update:     Sat 27 Dec 2025 21:12:02 +0000
Files and hashes:         1: et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl (hash: hMDTzShwuDeura/Ik3elpmXz1S1Lg2hlsQrLAkCFcbk=)
                          2: 210E6234639E11EB81185C31C4F9AE02.roa (hash: lpW0NjdmrOMG9GEGghvuTfgytfrpOcK9mbpw3h0K59c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl
                          rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1827 (0x723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1CC, serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
        Validity
            Not Before: Dec 20 21:12:02 2025 GMT
            Not After : Dec 27 21:12:02 2025 GMT
        Subject: CN=69471123-2b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:02:d8:25:61:4c:cf:dd:af:fd:e4:d4:c5:c4:
                    c1:da:b2:16:86:2a:42:3a:d4:cf:37:fb:de:0b:d7:
                    48:70:37:f2:f8:ce:6c:d6:36:c6:3e:ad:ed:39:27:
                    5e:07:90:57:f7:9a:85:33:2c:8e:f5:d5:ea:76:90:
                    fe:3e:78:c9:c0:cb:33:8a:e5:b7:ec:81:ce:ce:4d:
                    b0:51:a4:de:b0:b9:18:60:4e:f9:e6:0b:31:ef:09:
                    67:17:8f:08:b1:62:66:95:a1:a4:5c:26:bd:f0:35:
                    0c:fe:80:48:3a:9a:04:30:6c:b9:08:f1:6b:9e:ae:
                    b1:75:bc:07:57:26:f3:1f:70:13:bd:88:28:ea:f9:
                    32:f3:fd:7b:28:07:dd:29:b1:1e:8d:65:ba:25:ed:
                    c3:be:6b:8c:2d:b2:7b:92:27:6b:0e:5f:4a:e4:d0:
                    fd:0e:f8:39:0e:7c:ec:48:d1:4c:b2:5b:8d:e8:8a:
                    c0:b9:39:f2:07:ff:2f:76:cb:8c:21:cc:3b:29:5f:
                    cd:18:14:32:02:00:5a:d5:c9:eb:82:04:65:b6:53:
                    94:75:d1:58:fd:c3:33:d1:ef:01:36:96:fb:40:a5:
                    e1:d7:21:0e:09:db:50:b0:ba:c2:3c:e8:60:96:98:
                    aa:1e:cb:f4:04:9c:1a:19:fa:8b:ee:90:a7:40:41:
                    17:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:98:7E:74:B8:DF:A7:FE:DF:A9:65:84:85:F9:34:5C:92:B5:00:EA
            X509v3 Authority Key Identifier:
                keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b6:b3:f0:fb:8b:3f:e1:0c:9a:ee:68:d5:1b:6d:ad:83:d0:
         53:9e:c8:b7:fd:8b:59:cc:d9:b0:f0:02:89:7d:e7:0f:ba:c3:
         46:be:b0:35:62:3e:be:1a:80:af:1b:0c:4f:0e:75:d0:53:97:
         a4:32:2e:17:12:21:cd:f3:26:16:f2:4a:39:39:4b:2d:a5:7e:
         13:28:b2:f6:77:bb:1c:d4:54:4a:c6:56:53:a6:1f:12:1d:33:
         60:8d:ba:e2:70:19:dc:a5:de:e7:b6:3c:80:4f:51:d9:55:d6:
         9b:80:88:f7:09:18:da:4e:25:28:90:6e:43:cf:ea:76:fe:93:
         e2:da:ae:e9:73:1f:33:51:2d:30:72:88:c1:79:5d:27:83:ef:
         cd:0b:57:d3:5b:aa:fb:dd:52:1d:3b:f8:49:00:f3:a8:26:ff:
         fe:77:83:02:69:86:98:c3:66:a1:18:e2:51:b2:b4:ee:1b:7d:
         d9:5b:df:2a:d6:27:85:10:21:8d:3e:53:64:6e:ba:ea:72:9a:
         66:60:a6:21:ea:e3:6c:f8:f5:80:a2:17:f8:20:c7:c9:ea:09:
         71:dc:47:85:6c:10:e1:0b:d3:5f:a1:bd:7e:2a:76:3e:4e:7e:
         a4:02:77:a7:c1:52:7e:c7:38:50:29:15:ee:2c:64:9a:b4:f7:
         a2:e6:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:52:48 2025 by rpki-client