This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
File:                     EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json)
Hash identifier:          9QiXHwBLkLz7rU1tLtvS9fE+jUdWtxEmOyjCb7lr6jY=
Subject key identifier:   8C:24:98:69:30:51:17:75:33:35:98:C0:1F:00:EC:DE:45:59:7D:39
Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0
Certificate issuer:       /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
Manifest number:          0108
Signing time:             Tue 23 Dec 2025 04:01:26 +0000
Manifest this update:     Tue 23 Dec 2025 04:01:26 +0000
Manifest next update:     Tue 30 Dec 2025 04:01:26 +0000
Files and hashes:         1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: 3ncfaFAAPWhP9DjeBmg2EMWnR/TPy17y9GSIXdTRyYk=)
                          2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: HYF/fg1voE6IFgfpnqUye0EtCWfbuCFF1mA1Z69GiMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0
        Validity
            Not Before: Dec 23 04:01:26 2025 GMT
            Not After : Dec 30 04:01:26 2025 GMT
        Subject: CN=694a1416-41d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:24:8c:22:a8:8e:f7:7f:fb:f7:c5:d8:11:
                    2f:9c:9a:ee:97:b6:be:a1:e4:fd:00:25:43:b6:cd:
                    96:05:1f:db:28:1f:84:a2:61:c7:8e:4e:66:d9:e3:
                    66:40:c5:52:f4:30:aa:74:3d:87:cb:2a:8c:9d:07:
                    8a:bb:41:ba:e4:b7:ad:35:87:20:1f:a4:19:a3:d4:
                    ae:3a:51:17:d9:59:95:fb:e5:a2:0c:ee:39:85:72:
                    fa:7f:ec:24:e4:b4:70:7d:98:73:f7:d4:95:96:b8:
                    03:fb:63:94:de:f7:73:ab:72:e6:e6:21:b5:94:83:
                    bd:16:da:86:37:a5:39:1b:33:5e:41:77:e0:da:cf:
                    19:0c:63:a7:b3:bf:65:5a:2e:94:c6:b6:45:d6:75:
                    32:26:86:e6:41:11:31:f4:34:93:2c:77:81:f2:19:
                    79:6f:33:64:6e:d2:39:06:f4:ca:53:10:b8:43:39:
                    15:a7:c2:39:01:d7:49:4e:08:87:39:bd:5b:c2:81:
                    49:d4:08:aa:9a:35:41:8b:c1:18:e0:f6:76:5e:1e:
                    a8:6e:01:d0:86:e7:61:3f:d1:4b:63:ca:7a:35:4b:
                    dc:18:10:4c:dd:8f:6e:2c:05:c3:2d:aa:47:e3:8a:
                    0c:17:1a:b0:d0:b0:38:50:64:46:ce:4a:8f:45:e3:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:24:98:69:30:51:17:75:33:35:98:C0:1F:00:EC:DE:45:59:7D:39
            X509v3 Authority Key Identifier:
                keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4f:d2:1f:d8:d6:2e:c2:52:9f:d8:e0:5c:a7:35:9a:57:e9:
         61:08:c8:90:a3:1a:6f:32:01:3d:7f:35:b4:ad:26:5c:0e:5e:
         86:5a:d9:95:75:50:6b:8d:57:a3:8d:83:fb:b7:c4:94:a8:0d:
         01:68:09:f7:37:96:fe:42:8e:76:1a:7a:15:06:ae:0c:de:b8:
         87:56:85:53:bd:bc:81:c3:77:7e:26:cc:84:4b:c3:7b:17:1c:
         b9:3b:c3:a5:de:00:8d:94:6b:5c:1c:7d:e4:a5:73:2f:7e:41:
         0d:be:8a:d2:0b:7b:1f:40:bc:c6:00:6c:d6:86:f8:59:9c:7d:
         08:ff:36:a5:6b:cc:f4:f5:30:6d:5e:0b:7a:b1:a9:5c:63:21:
         ed:22:46:f5:18:26:b1:ba:46:3d:07:65:aa:dd:72:76:12:93:
         5d:7c:84:1b:29:4e:d9:ff:c9:1f:69:08:d1:0f:1c:07:35:35:
         a9:c7:02:0f:e8:e1:ad:83:89:0c:ba:59:df:b0:6e:14:a1:c9:
         d9:d9:96:3d:9a:11:7a:aa:8b:97:45:78:48:f0:78:6f:e5:72:
         67:7b:a4:6c:55:7e:fd:20:a2:4e:13:29:b5:90:81:65:82:de:
         7f:14:b0:f1:28:44:f3:df:a2:83:bf:cb:8e:9c:d6:b2:90:88:
         64:fb:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:03:19 2025 by rpki-client