This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
File:                     ez9g2bGigAKgeHXKtYohRXBz4X8.mft (raw, json)
Hash identifier:          7tz1m6Y4AokcCRuC00KGJDtH+OQsOp77TOFxQLI5F+c=
Subject key identifier:   5E:D0:8C:63:16:4E:E4:36:CF:B6:9B:20:1A:C3:A0:54:9E:1E:82:43
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Certificate issuer:       /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial:       16EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
Manifest number:          16AA
Signing time:             Sat 06 Dec 2025 16:18:28 +0000
Manifest this update:     Sat 06 Dec 2025 16:18:27 +0000
Manifest next update:     Sat 13 Dec 2025 16:18:27 +0000
Files and hashes:         1: ez9g2bGigAKgeHXKtYohRXBz4X8.crl (hash: JKkwSs8+A8QnUVjXU8k0GEaEl2JcqXQiuXB4csnq5r0=)
                          2: EE2F10889B4911EFBBAB9381C4F9AE02.roa (hash: tGyvJQ+VHA7B7G1gS3LwI/GSq7MJrx8JwpdoWLxQjws=)
                          3: 2CF180F0809511EFB8A82822C4F9AE02.roa (hash: HLuyZRv6VF6qFq88g7pPhaPeJ2Pt9n+iaV4TOkNRhbg=)
                          4: 774A232A718011EEA0E7EF5EC4F9AE02.roa (hash: QlcIbjq7jxCQ3SgyfdLUDXjmauzJiitADg/TiWQLByw=)
                          5: 1DCB662A3DF211EB81F4CE73C4F9AE02.roa (hash: kCg25FDQRQj+e3KU6R/BP0M2KGcBEvQ7uEDAyKmHOCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
                          rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5871 (0x16ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
        Validity
            Not Before: Dec  6 16:18:27 2025 GMT
            Not After : Dec 13 16:18:27 2025 GMT
        Subject: CN=69345754-6148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:61:07:d9:76:19:ee:dc:83:ea:f1:89:0b:
                    df:4e:14:ac:79:4b:50:cb:84:16:60:4d:58:12:b6:
                    8a:1c:1c:8c:f9:6e:37:a0:b8:b6:da:f8:c1:93:09:
                    a0:73:6b:d8:4e:03:50:07:95:40:18:99:c0:f0:66:
                    42:17:91:cc:67:84:88:b7:c7:dd:2f:a1:65:88:4e:
                    96:b3:5b:33:74:ec:a8:7f:19:63:fd:03:bb:b9:f8:
                    54:37:44:83:03:e6:10:0a:2b:ba:6c:89:78:04:4c:
                    cd:ed:eb:5e:03:a0:0b:04:3f:d7:c2:e2:db:78:9a:
                    5a:52:cf:af:8a:9a:2e:af:98:fd:9e:78:66:cf:45:
                    de:59:5e:ba:37:94:11:a4:e2:1f:1a:dd:1e:0f:a2:
                    4a:46:00:04:06:c6:c6:c8:ef:cf:76:29:73:e2:ec:
                    e9:80:83:75:3f:89:52:08:ff:28:b7:2f:7f:67:1b:
                    61:5f:3d:e1:f6:06:d6:c9:b7:0f:30:e2:01:f4:7a:
                    09:41:da:d7:c8:5b:1e:c7:5c:bb:8d:68:69:89:11:
                    30:58:8f:5c:ac:12:3c:3e:7c:36:5a:d8:b1:cb:41:
                    dc:f4:29:ea:66:15:90:05:75:3c:92:ac:32:ab:f2:
                    19:64:6a:6d:c3:7a:eb:35:8b:54:22:a6:ce:d3:a4:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D0:8C:63:16:4E:E4:36:CF:B6:9B:20:1A:C3:A0:54:9E:1E:82:43
            X509v3 Authority Key Identifier:
                keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:c3:64:7a:08:92:86:a3:88:27:6c:b0:0b:a4:70:87:18:90:
         7b:81:bf:98:79:ef:02:e4:0c:66:5f:3d:91:ec:20:c5:c8:7e:
         39:c3:35:90:cc:26:59:aa:33:b5:a9:b6:5c:e3:df:a9:68:57:
         c0:2d:00:9e:dc:de:4e:3b:c3:84:bb:a3:62:8e:7b:e0:90:f3:
         d8:72:63:da:1b:12:0c:21:e0:ca:34:f5:e4:1b:22:0d:e0:cb:
         60:0a:dc:ab:da:3a:15:f7:4d:ea:e0:9f:8f:ac:be:98:cb:12:
         e5:04:90:a1:9c:ad:52:8f:87:1f:41:81:46:32:6a:c4:29:ae:
         69:ef:6d:1b:5a:ad:de:2f:14:96:70:7b:a7:3e:51:c3:d2:e8:
         3a:88:af:aa:fd:8c:62:43:a7:c4:e3:1a:be:cc:35:54:c7:f8:
         c6:86:c6:9d:3a:6c:cd:30:eb:73:3a:e2:1d:29:72:cb:a8:5b:
         85:62:63:a8:ec:1d:64:b1:f0:da:ff:2a:75:95:7f:19:92:73:
         3d:b9:e7:a4:f0:bb:ab:1c:fb:a8:7c:33:a5:b6:4d:9d:a0:17:
         d7:13:90:87:af:a3:65:60:49:b4:07:53:55:1e:05:b4:38:88:
         13:7f:df:bd:70:32:c2:a9:a8:88:ac:70:1a:32:2c:ca:f4:fa:
         47:39:08:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVDQUI1OEEyMTQ1
NzA3M0UxN0YwHhcNMjUxMjA2MTYxODI3WhcNMjUxMjEzMTYxODI3WjAYMRYwFAYD
VQQDEw02OTM0NTc1NC02MTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4GJhB9l2Ge7cg+rxiQvfThSseUtQy4QWYE1YEraKHByM+W43oLi22vjBkwmg
c2vYTgNQB5VAGJnA8GZCF5HMZ4SIt8fdL6FliE6Ws1szdOyofxlj/QO7ufhUN0SD
A+YQCiu6bIl4BEzN7eteA6ALBD/XwuLbeJpaUs+vipour5j9nnhmz0XeWV66N5QR
pOIfGt0eD6JKRgAEBsbGyO/Pdilz4uzpgIN1P4lSCP8oty9/ZxthXz3h9gbWybcP
MOIB9HoJQdrXyFsex1y7jWhpiREwWI9crBI8Pnw2Wtixy0Hc9CnqZhWQBXU8kqwy
q/IZZGptw3rrNYtUIqbO06SIUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7QjGMW
TuQ2z7abIBrDoFSeHoJDMB8GA1UdIwQYMBaAFHs/YNmxooACoHh1yrWKIUVwc+F/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjU0Qy81QTU2NEQ0ODE5
RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdBS2dlSFhLdFlvaFJYQno0
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V6OWcyYkdpZ0FLZ2VIWEt0WW9oUlhCejRYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjU0Qy81QTU2NEQ0ODE5RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdB
S2dlSFhLdFlvaFJYQno0WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDbw2R6CJKGo4gnbLALpHCHGJB7gb+Yee8C5AxmXz2R7CDFyH45wzWQ
zCZZqjO1qbZc49+paFfALQCe3N5OO8OEu6NijnvgkPPYcmPaGxIMIeDKNPXkGyIN
4MtgCtyr2joV903q4J+PrL6YyxLlBJChnK1Sj4cfQYFGMmrEKa5p720bWq3eLxSW
cHunPlHD0ug6iK+q/YxiQ6fE4xq+zDVUx/jGhsadOmzNMOtzOuIdKXLLqFuFYmOo
7B1ksfDa/yp1lX8ZknM9ueek8LurHPuofDOltk2doBfXE5CHr6NlYEm0B1NVHgW0
OIgTf9+9cDLCqaiIrHAaMizK9PpHOQiZ
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:14:27 2025 by rpki-client