This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
File:                     EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json)
Hash identifier:          pEUbd49Sm8AJSvCQlVx+PtnN/xH/EdTpytjht6G0asw=
Subject key identifier:   05:02:99:A5:28:5C:CE:08:AE:8D:AB:34:DA:66:56:AD:95:D1:B0:FC
Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B
Certificate issuer:       /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
Manifest number:          0246
Signing time:             Fri 19 Dec 2025 01:02:38 +0000
Manifest this update:     Fri 19 Dec 2025 01:02:38 +0000
Manifest next update:     Fri 26 Dec 2025 01:02:38 +0000
Files and hashes:         1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: v7ue4cmlfXVXs+5tGtlaKJjVU4sLhUSN07RbtdpgoNI=)
                          2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: QbSn5YRTWG7olUrItxapoYIPCE3hPl44mhf7s2FPRaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl
                          rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
        Validity
            Not Before: Dec 19 01:02:38 2025 GMT
            Not After : Dec 26 01:02:38 2025 GMT
        Subject: CN=6944a42e-a3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:6d:b7:6e:12:e4:32:40:e6:85:d1:56:85:
                    c2:ae:df:b0:3a:5d:a5:ee:59:9e:ae:18:a5:07:d9:
                    f4:1f:1e:fc:9b:3c:d7:e8:b9:c6:97:8b:f6:f3:b0:
                    69:ad:f4:78:0e:eb:1a:e4:3c:2a:28:d6:dc:29:16:
                    25:f5:63:81:0f:cf:27:14:b8:06:6e:96:b0:bf:c3:
                    a6:9c:fd:82:1f:15:2a:77:84:06:28:75:bc:c0:90:
                    ad:a3:c5:e9:43:bf:97:dc:fc:2e:3b:41:ff:b9:af:
                    7e:31:2f:2f:cb:8a:a3:19:8b:bb:3d:03:15:7a:4f:
                    5c:36:ae:7d:9d:ce:98:09:e1:c4:7f:ac:f9:e7:78:
                    39:dc:fa:6f:ed:99:7c:a3:1c:84:99:e5:e8:de:0b:
                    c6:b7:f4:35:af:58:71:30:12:1b:f7:17:50:a2:cd:
                    27:0b:d6:08:ab:0c:fc:72:be:0f:8f:81:a7:61:54:
                    b0:d9:cc:ab:b8:f8:00:70:03:f5:f5:27:94:c0:4a:
                    a8:63:2c:0c:40:e3:95:14:e7:6c:ab:38:70:6a:a9:
                    15:7f:7d:5d:37:26:1e:f2:7e:59:66:b4:7e:46:ab:
                    5b:d4:52:aa:34:2f:37:b5:b2:51:d9:63:4d:ae:e4:
                    86:e1:90:1e:63:3a:24:b2:f1:2b:e3:f2:f3:3b:f7:
                    b7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:02:99:A5:28:5C:CE:08:AE:8D:AB:34:DA:66:56:AD:95:D1:B0:FC
            X509v3 Authority Key Identifier:
                keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d0:21:0e:f6:37:59:c5:22:21:83:45:d4:e0:cc:f8:e4:21:
         20:b3:d9:ca:21:d6:51:10:51:bb:f9:21:3d:40:6c:4a:ae:04:
         30:3c:10:c8:db:5f:84:0f:85:dd:13:dd:45:f7:40:5b:cb:72:
         71:b2:e4:6f:8d:7d:46:49:62:42:fa:f9:5f:5e:ca:b5:2f:fa:
         1f:01:8a:65:5f:92:8d:a3:35:04:17:3f:da:d1:2c:5b:b5:49:
         75:2f:4a:b1:14:84:32:a8:44:1a:db:57:8e:91:6e:09:09:2e:
         9a:4a:31:cd:73:8d:08:59:c6:05:ea:79:c2:af:15:a1:f8:fe:
         eb:b5:f7:2a:c2:76:ee:02:e4:60:07:90:07:4d:9b:88:62:48:
         ac:33:61:43:22:43:92:87:38:c8:85:fc:87:ff:ed:29:c4:79:
         83:60:c5:8b:ca:b6:29:c1:aa:13:ae:86:d3:65:91:1c:23:ca:
         1f:b6:80:78:fb:af:7e:37:c3:89:a5:bb:e5:17:eb:33:e8:f3:
         f5:70:e6:fe:d8:44:3f:d6:96:e8:2d:06:61:0a:a2:67:3c:7c:
         16:ee:d2:44:b4:03:b0:ab:ea:23:cd:0f:eb:7b:21:5c:37:db:
         9d:10:37:19:cd:b0:27:81:0f:d5:80:60:ec:16:26:82:56:c2:
         28:55:ce:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkEyMzkxMTAvBgNVBAUTKDEwODQ1MEM3RURGQjc4NTIxQjdFNDg3MUZFODZFOEY2
MjNBMTA1MUIwHhcNMjUxMjE5MDEwMjM4WhcNMjUxMjI2MDEwMjM4WjAYMRYwFAYD
VQQDDA02OTQ0YTQyZS1hM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmW5tt24S5DJA5oXRVoXCrt+wOl2l7lmerhilB9n0Hx78mzzX6LnGl4v287Bp
rfR4Dusa5DwqKNbcKRYl9WOBD88nFLgGbpawv8OmnP2CHxUqd4QGKHW8wJCto8Xp
Q7+X3PwuO0H/ua9+MS8vy4qjGYu7PQMVek9cNq59nc6YCeHEf6z553g53Ppv7Zl8
oxyEmeXo3gvGt/Q1r1hxMBIb9xdQos0nC9YIqwz8cr4Pj4GnYVSw2cyruPgAcAP1
9SeUwEqoYywMQOOVFOdsqzhwaqkVf31dNyYe8n5ZZrR+Rqtb1FKqNC83tbJR2WNN
ruSG4ZAeYzoksvEr4/LzO/e3TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUCmaUo
XM4Iro2rNNpmVq2V0bD8MB8GA1UdIwQYMBaAFBCEUMft+3hSG35Icf6G6PYjoQUb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTIzOS8xOUFEMEYxMDY0
QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VGSWJma2h4X29ibzlpT2hC
UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VJUlF4LTM3ZUZJYmZraHhfb2JvOWlPaEJScy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTIzOS8xOUFEMEYxMDY0QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VG
SWJma2h4X29ibzlpT2hCUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBv0CEO9jdZxSIhg0XU4Mz45CEgs9nKIdZREFG7+SE9QGxKrgQwPBDI
21+ED4XdE91F90Bby3JxsuRvjX1GSWJC+vlfXsq1L/ofAYplX5KNozUEFz/a0Sxb
tUl1L0qxFIQyqEQa21eOkW4JCS6aSjHNc40IWcYF6nnCrxWh+P7rtfcqwnbuAuRg
B5AHTZuIYkisM2FDIkOShzjIhfyH/+0pxHmDYMWLyrYpwaoTrobTZZEcI8oftoB4
+69+N8OJpbvlF+sz6PP1cOb+2EQ/1pboLQZhCqJnPHwW7tJEtAOwq+ojzQ/reyFc
N9udEDcZzbAngQ/VgGDsFiaCVsIoVc7K
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:58:52 2025 by rpki-client