This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
File:                     eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft (raw, json)
Hash identifier:          a+3js/cLsYVLil1hQXNyKDA5PeyComiJzJfb7h3b35A=
Subject key identifier:   E2:22:3A:01:C0:88:53:ED:67:C5:54:D0:16:09:55:79:74:FA:FE:C9
Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A
Certificate issuer:       /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
Manifest number:          01D4
Signing time:             Tue 23 Dec 2025 01:49:12 +0000
Manifest this update:     Tue 23 Dec 2025 01:49:12 +0000
Manifest next update:     Tue 30 Dec 2025 01:49:12 +0000
Files and hashes:         1: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl (hash: wrJjXd9EXKw05P0TlOq0LH8P0MskHoZ3Uw4rsuzk0os=)
                          2: ACC372FE0F4211EE97A24686C4F9AE02.roa (hash: 0vwZnVq6+4c6D/8J1aiiHDqlou0UwAPkCDM39Wg9hHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl
                          rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
        Validity
            Not Before: Dec 23 01:49:12 2025 GMT
            Not After : Dec 30 01:49:12 2025 GMT
        Subject: CN=6949f518-d226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:24:bc:a7:a4:83:9d:4f:d2:61:23:c1:83:
                    59:1f:ba:16:37:55:26:b1:ea:f1:6a:ef:f5:87:e6:
                    b1:61:67:e5:7c:91:fa:16:f9:4f:61:22:bb:83:af:
                    b0:f6:22:1f:2f:49:50:9f:08:33:35:f7:03:b3:3f:
                    ec:a3:78:31:ad:bc:05:82:84:e8:12:27:c6:7c:a6:
                    d4:60:d1:09:5a:91:a0:0b:a2:77:34:42:2c:44:9d:
                    5c:d3:0e:cc:bb:0e:2a:13:33:22:09:30:bf:3a:3d:
                    60:3b:f8:56:ef:2e:25:d1:41:c5:76:80:22:06:fe:
                    4a:f9:c4:27:55:52:f4:98:c3:70:b8:a8:98:57:b4:
                    da:71:60:d7:12:04:5e:28:36:07:d6:eb:f4:2f:c6:
                    53:97:95:35:da:1c:de:a5:01:85:bc:8b:38:48:21:
                    6a:80:ee:ce:36:72:82:d3:88:f7:de:aa:73:41:ad:
                    16:ae:d7:d6:f8:e1:ae:4c:7f:66:fd:99:fa:03:8f:
                    94:23:1a:4b:a3:ef:f3:27:d2:43:86:d5:1f:d3:48:
                    df:c9:ca:09:a7:26:cb:fd:77:96:39:9b:e7:54:02:
                    56:86:0d:91:8c:62:75:93:6b:aa:e2:5f:92:2a:e5:
                    24:cb:11:4f:fe:ac:78:c2:15:2e:bc:a1:72:00:5c:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:22:3A:01:C0:88:53:ED:67:C5:54:D0:16:09:55:79:74:FA:FE:C9
            X509v3 Authority Key Identifier:
                keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6d:b8:01:35:46:66:62:3e:c4:27:1f:0b:68:b0:49:01:da:
         ee:63:46:9f:57:d7:cd:85:ad:27:a7:5e:d9:75:9a:e5:7b:44:
         55:63:14:61:24:6c:90:e2:16:f1:fd:2a:ac:c6:d8:03:4d:0b:
         34:5d:cb:e1:ea:53:bd:92:1e:ca:a8:dc:18:5c:a7:8c:8d:45:
         17:43:46:89:46:b8:44:bb:58:86:93:82:19:19:6c:56:40:c6:
         6a:5f:93:f7:fe:cb:01:0c:9e:f7:08:59:1b:32:13:c4:c2:9e:
         ce:28:37:87:73:2f:1d:6f:b5:4c:92:92:2e:52:e1:a4:bd:ef:
         6d:dc:d8:84:b1:89:30:4d:23:a9:e9:aa:ff:9c:03:46:03:43:
         ae:81:56:c2:d7:7e:d3:fe:65:87:dc:0e:42:4a:9a:00:d9:52:
         1a:e6:69:70:6b:75:d4:0a:5c:30:f2:bb:e4:58:41:16:75:0e:
         8d:c4:65:ba:df:20:0e:e9:9c:69:e5:92:0f:16:41:5b:a9:01:
         99:e5:88:ca:ee:eb:43:92:ae:10:51:77:c1:01:a9:84:49:3a:
         6d:f1:ee:fa:92:2b:55:7f:9f:ab:97:f4:e5:96:95:ff:6d:c3:
         49:9b:6b:f1:ee:2d:d2:e0:64:a7:1e:2a:cc:b8:8a:75:a1:0c:
         7b:26:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 15:24:54 2025 by rpki-client