This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
File:                     tEoweljCbW-uB_4_KF7Wo4K0y0M.mft (raw, json)
Hash identifier:          4PObdVX5tMt59rwqrB6RweAemwmNpZp/8GHBNTwVzXo=
Subject key identifier:   DC:E5:1E:2C:B6:A0:BC:C2:4F:04:A6:2F:6C:C5:64:46:EA:37:33:5F
Authority key identifier: B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43
Certificate issuer:       /CN=A9165CEF/serialNumber=B44A307A58C26D6FAE07FE3F285ED6A382B4CB43
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
Manifest number:          01A8
Signing time:             Tue 23 Dec 2025 02:16:09 +0000
Manifest this update:     Tue 23 Dec 2025 02:16:08 +0000
Manifest next update:     Tue 30 Dec 2025 02:16:08 +0000
Files and hashes:         1: tEoweljCbW-uB_4_KF7Wo4K0y0M.crl (hash: oGzGHbUspf5uQVamM3LLMS30ajQHqXLFdhSB8XA9TOw=)
                          2: CC954D50577211EEA63EF217C4F9AE02.roa (hash: G/lc0ZJgssXnnKfa+ln20gT1bMCoGUtTDqNS7CqtsRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.crl
                          rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165CEF, serialNumber=B44A307A58C26D6FAE07FE3F285ED6A382B4CB43
        Validity
            Not Before: Dec 23 02:16:08 2025 GMT
            Not After : Dec 30 02:16:08 2025 GMT
        Subject: CN=6949fb68-4873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:15:6f:10:f1:18:7c:a3:e9:fa:95:f3:9b:
                    d3:41:7a:28:d8:b1:cb:50:10:01:80:9f:ef:ba:a8:
                    33:71:26:45:97:07:c9:40:49:48:e4:5e:76:31:73:
                    03:4d:b7:ac:93:fd:64:8e:fc:f8:ae:4c:b8:32:a8:
                    47:e8:e1:53:0e:e8:bd:02:0a:2f:2f:ab:73:f2:90:
                    64:ee:d0:0f:a2:28:aa:47:68:5f:50:d3:18:19:b4:
                    6e:ca:72:34:34:f8:0c:dc:3b:f3:88:e7:79:e8:05:
                    97:7a:fd:c2:57:0e:c1:07:99:f0:58:fb:3d:85:63:
                    6a:c8:21:cc:1d:75:03:91:1e:05:32:4a:57:de:a1:
                    61:be:40:5e:7a:43:da:b1:6a:fd:33:49:62:22:53:
                    09:eb:19:fa:3d:05:2a:a0:d0:e6:c8:93:62:d2:c5:
                    b7:fc:55:53:c2:a4:3b:34:82:df:10:7d:02:d1:7a:
                    21:74:cc:00:4a:1c:e9:c2:70:f9:c3:1b:ec:fc:9b:
                    ac:65:dc:eb:58:86:6e:d7:c3:9e:06:69:cf:62:64:
                    cc:e5:33:fd:38:c8:4d:aa:fa:8e:d1:a7:44:cb:52:
                    26:8d:ed:e4:e1:0e:a3:5a:a9:f2:5b:d9:35:77:1c:
                    2f:a6:84:93:33:8e:dc:83:8b:1d:3d:60:1f:af:10:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E5:1E:2C:B6:A0:BC:C2:4F:04:A6:2F:6C:C5:64:46:EA:37:33:5F
            X509v3 Authority Key Identifier:
                keyid:B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:e8:bb:78:c7:f9:88:fd:4c:05:d3:22:2e:28:cb:23:f6:
         f3:91:84:50:73:75:e0:57:fb:85:87:7f:09:5c:33:d6:ad:4f:
         f9:30:69:fb:e3:89:52:a7:3f:96:1c:c8:eb:fa:90:bd:f7:2f:
         2c:e9:e0:30:ef:5f:80:98:7c:71:90:7b:b9:57:05:a4:81:92:
         5f:44:cb:e3:dc:70:50:8c:37:9a:30:6f:2e:b0:9c:88:2c:c5:
         ba:cb:a4:21:74:47:c6:d7:53:a7:86:2d:2f:c1:fb:b9:a3:d5:
         d4:28:19:43:f5:63:60:9a:36:36:00:62:b8:71:28:ef:16:35:
         ed:9f:96:76:f8:22:18:78:45:57:d2:87:5d:f4:45:fc:df:d5:
         9a:41:65:64:33:dc:bc:6d:c7:d1:6c:df:f9:e4:fa:5b:fd:26:
         26:62:ee:c4:b7:d4:00:54:93:2f:e2:de:07:f6:3c:63:e5:8f:
         7e:d0:c8:c7:5a:4b:d4:cb:26:47:63:39:42:c4:87:7b:4a:c1:
         71:dd:b2:ee:30:e3:9f:03:4a:87:3b:a7:08:50:98:d6:ba:53:
         99:bb:e7:c1:88:b9:b6:1c:97:96:2a:a0:5c:7f:57:10:13:b1:
         27:66:5f:01:bb:4f:88:60:f7:ce:36:af:43:be:a8:d6:62:42:
         c8:0e:6b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:55 2025 by rpki-client