This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
File:                     _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json)
Hash identifier:          J4xBhoKbfCtUnCsolur7ORy4RJElPdNZ5NZRN0fp7ak=
Subject key identifier:   59:87:4E:DB:25:F7:69:C5:1A:20:19:04:03:C7:82:21:71:D7:15:77
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Certificate issuer:       /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial:       018F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
Manifest number:          0189
Signing time:             Fri 19 Dec 2025 02:47:41 +0000
Manifest this update:     Fri 19 Dec 2025 02:47:41 +0000
Manifest next update:     Fri 26 Dec 2025 02:47:41 +0000
Files and hashes:         1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: BBWVuxAOkLqARVyH5fZjaClZCUSp2PgqIz+DMY6+6kc=)
                          2: AA02862E890C11EE87862551C4F9AE02.roa (hash: iEIKCf+XGWrseL7l7p29L+eQtWAuRRnnoodUimUnIC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
                          rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
        Validity
            Not Before: Dec 19 02:47:41 2025 GMT
            Not After : Dec 26 02:47:41 2025 GMT
        Subject: CN=6944bccd-8959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:d6:d3:cc:75:d4:9c:e1:bf:5c:f4:34:5c:
                    18:42:5a:6a:6c:59:19:44:72:fc:9f:36:e6:7b:e7:
                    d3:e7:0d:3e:b9:48:84:f3:db:65:91:98:8e:ae:99:
                    07:6e:cb:6d:4b:eb:16:ca:c2:62:cf:8e:a3:9c:20:
                    2c:59:4f:2c:55:33:0f:d1:bc:e8:f7:be:ae:de:e8:
                    37:8e:9d:7d:9e:0d:9d:33:65:c7:5d:28:ea:54:50:
                    a0:ed:36:0b:f5:ed:95:7e:47:a5:4c:03:81:20:98:
                    78:e8:b0:b6:c1:08:11:a8:c6:9a:55:c6:4d:36:b5:
                    1c:e3:8a:18:73:d1:a1:55:57:e2:5a:cb:cb:67:73:
                    10:eb:c0:8e:17:fd:f4:6b:25:c7:31:86:bb:02:99:
                    4d:3e:87:42:48:4f:52:33:4f:c8:ee:9e:eb:ad:23:
                    f1:e5:fa:ae:f7:43:29:32:d1:dd:1e:15:20:78:ac:
                    cb:6d:49:8b:be:5f:bb:ae:e5:c1:9e:52:59:de:75:
                    1e:8a:de:f4:af:11:05:26:6d:fe:47:9c:98:30:07:
                    e7:14:1a:39:5f:7a:71:01:be:85:85:49:fe:da:2d:
                    15:2f:9b:1e:2a:47:07:1b:80:e1:a8:93:0c:29:87:
                    a0:8d:f3:62:9b:4c:b9:f1:2c:74:6f:87:75:e1:9c:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:87:4E:DB:25:F7:69:C5:1A:20:19:04:03:C7:82:21:71:D7:15:77
            X509v3 Authority Key Identifier:
                keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ee:38:43:b9:b3:88:b0:3c:f6:10:12:aa:6c:1e:e8:fe:89:
         f0:ef:c1:31:95:59:6c:8c:ec:73:13:80:c5:b8:03:32:e8:b4:
         dc:c5:cc:c3:01:29:c9:a8:99:60:90:c7:be:5f:a5:12:bd:5e:
         5a:96:81:39:73:99:dd:da:5a:48:25:05:ab:8e:c3:91:df:88:
         e6:9f:ba:64:fb:77:e6:46:23:8d:77:f4:23:11:1b:52:cf:d4:
         09:5e:3d:59:b0:f0:8e:77:55:e7:61:9d:de:1d:33:1b:b5:58:
         65:38:ac:5b:05:31:f6:b9:03:66:e4:9e:85:f4:fa:d0:02:3b:
         9d:c3:55:70:81:3a:d6:b1:2a:49:39:c2:0d:c7:b1:87:6f:ab:
         55:81:0c:ca:98:3a:ba:72:7d:e8:00:25:7f:e6:a5:55:02:b9:
         2d:ca:71:63:5e:f9:66:c1:19:bc:05:0c:5f:de:4f:47:43:1a:
         19:c5:74:bc:fb:fd:7b:a0:3b:19:b7:de:7e:f6:25:e0:66:49:
         71:af:d1:69:53:0a:b4:c6:c2:ee:89:71:29:56:49:19:a2:4e:
         9f:7c:e4:e2:50:a2:6c:d0:ea:64:79:41:a0:b3:29:84:48:a4:
         5e:f5:4b:4a:47:ee:3c:79:40:d3:dc:ee:7a:d5:3c:b8:6b:2f:
         56:84:f2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:57:00 2025 by rpki-client