This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File:                     eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier:          oc+JFlDIYrUw+6vJ+1KEe+83/U53IOtn3IFjbZujQfU=
Subject key identifier:   D9:11:54:2E:0D:3A:9F:E9:2B:93:85:EC:F7:9A:21:B2:4C:AA:BF:C6
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer:       /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number:          DC
Signing time:             Fri 19 Dec 2025 04:45:36 +0000
Manifest this update:     Fri 19 Dec 2025 04:45:36 +0000
Manifest next update:     Fri 26 Dec 2025 04:45:36 +0000
Files and hashes:         1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: yqJuL/f5LTLYXYVmeSVinow1Y0L4nxDBuful2TO4IUY=)
                          2: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: CBRfaNleeLhQbkhZ9Y/Gyu8j+qS/vePZy+tfvqG3Iy0=)
                          3: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: MvYbkMM7qX+K3Cl1XMK5DsKY9VO54145P/lZVkIO3Zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
                          rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
        Validity
            Not Before: Dec 19 04:45:36 2025 GMT
            Not After : Dec 26 04:45:36 2025 GMT
        Subject: CN=6944d870-8735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:65:9b:1c:7e:0f:6e:55:b8:f1:21:53:6a:fb:
                    07:2c:da:3f:ea:b5:73:40:ed:5a:62:39:10:5d:c8:
                    a5:82:39:da:ba:d8:77:f0:5f:98:fc:e1:aa:4f:30:
                    28:8c:d4:70:df:aa:d3:d5:c4:99:70:77:53:15:4f:
                    44:7c:f0:39:e1:7f:a6:e6:58:55:31:bc:a4:9e:e8:
                    42:8b:a6:b1:9a:d3:16:3f:c9:8c:ac:4e:bc:b0:1e:
                    75:50:fd:db:9b:69:b6:f3:81:45:3a:03:d4:b7:a9:
                    08:15:f1:dd:9c:e8:f5:62:b3:44:14:05:36:fa:f1:
                    b9:d0:42:07:b5:16:c4:0b:29:10:ae:0b:79:0f:0e:
                    12:eb:e1:7c:75:d0:f2:95:16:09:d0:8d:29:96:79:
                    45:d6:c2:7c:6a:ca:6c:5a:30:67:f2:22:3b:2a:ff:
                    7b:5a:94:20:22:41:45:4b:38:96:a0:66:c2:59:ea:
                    1e:72:f9:3f:b3:81:50:5d:70:f0:3f:42:de:6c:eb:
                    20:25:6f:28:74:80:d5:c9:c6:48:83:e7:ee:3a:ca:
                    d9:6e:44:e9:23:ff:1a:60:21:32:07:00:bd:68:4b:
                    14:6d:a4:22:74:d7:ae:ac:1f:2f:d5:bf:b1:d6:1f:
                    34:c1:bc:d0:a9:41:cc:19:61:3a:31:f1:df:8a:26:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:11:54:2E:0D:3A:9F:E9:2B:93:85:EC:F7:9A:21:B2:4C:AA:BF:C6
            X509v3 Authority Key Identifier:
                keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:08:40:0a:b8:5b:8c:8a:cf:07:87:12:e3:e7:db:b9:7a:22:
         45:31:49:79:58:33:45:94:6c:60:93:73:ba:1d:35:15:35:15:
         a0:98:06:2e:50:57:03:c6:77:44:9c:28:52:86:fc:af:4f:d8:
         fb:d0:9b:54:12:67:70:64:dc:01:71:64:89:8e:b7:8d:0c:33:
         e7:1c:21:20:fd:6c:25:ae:15:b7:05:5f:db:aa:c2:8c:2a:5d:
         70:a6:fa:3f:ed:27:34:73:43:a0:2d:e8:42:81:32:58:85:22:
         22:b5:70:26:be:43:70:d8:55:63:d8:a3:3a:90:06:85:44:0c:
         03:87:20:05:ea:30:f4:08:6b:10:92:ed:5f:c9:17:eb:e0:22:
         e5:d7:c8:33:1e:5b:cf:f6:19:69:93:4a:4a:be:6c:97:c7:9d:
         83:ae:02:36:58:13:69:7d:5f:e4:11:48:91:ad:66:6a:f9:db:
         f8:77:2c:2d:f0:96:b0:07:69:5a:ab:35:7c:4f:a9:7d:77:35:
         51:ef:81:81:4f:2c:98:22:88:6e:0d:91:26:cc:a8:ab:c5:ad:
         85:f4:f6:e1:69:9a:f3:1e:97:81:26:cf:0d:d4:a0:05:4f:6a:
         29:63:ef:ba:b7:e2:be:de:f1:d4:86:db:3f:24:36:ae:f0:eb:
         4a:72:43:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTQxMTAvBgNVBAUTKDc5MjBGOENBODRFQzkxM0M2OUE5OEQ1NDM3MTIwOUI0
MzRDMzMxOTEwHhcNMjUxMjE5MDQ0NTM2WhcNMjUxMjI2MDQ0NTM2WjAYMRYwFAYD
VQQDDA02OTQ0ZDg3MC04NzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5GWbHH4PblW48SFTavsHLNo/6rVzQO1aYjkQXcilgjnauth38F+Y/OGqTzAo
jNRw36rT1cSZcHdTFU9EfPA54X+m5lhVMbyknuhCi6axmtMWP8mMrE68sB51UP3b
m2m284FFOgPUt6kIFfHdnOj1YrNEFAU2+vG50EIHtRbECykQrgt5Dw4S6+F8ddDy
lRYJ0I0plnlF1sJ8aspsWjBn8iI7Kv97WpQgIkFFSziWoGbCWeoecvk/s4FQXXDw
P0LebOsgJW8odIDVycZIg+fuOsrZbkTpI/8aYCEyBwC9aEsUbaQidNeurB8v1b+x
1h80wbzQqUHMGWE6MfHfiiYZaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkRVC4N
Op/pK5OF7PeaIbJMqr/GMB8GA1UdIwQYMBaAFHkg+MqE7JE8aamNVDcSCbQ0wzGR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1NC83OUY4OTk4Mjkz
NTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tUeHBxWTFVTnhJSnREVERN
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1aRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU1NC83OUY4OTk4MjkzNTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tU
eHBxWTFVTnhJSnREVERNWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDDCEAKuFuMis8HhxLj59u5eiJFMUl5WDNFlGxgk3O6HTUVNRWgmAYu
UFcDxndEnChShvyvT9j70JtUEmdwZNwBcWSJjreNDDPnHCEg/WwlrhW3BV/bqsKM
Kl1wpvo/7Sc0c0OgLehCgTJYhSIitXAmvkNw2FVj2KM6kAaFRAwDhyAF6jD0CGsQ
ku1fyRfr4CLl18gzHlvP9hlpk0pKvmyXx52DrgI2WBNpfV/kEUiRrWZq+dv4dywt
8JawB2laqzV8T6l9dzVR74GBTyyYIohuDZEmzKirxa2F9PbhaZrzHpeBJs8N1KAF
T2opY++6t+K+3vHUhts/JDau8OtKckOw
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:15:58 2025 by rpki-client