This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
File:                     E3ay871bTTWtlSsXkNgnRpktQW8.mft (raw, json)
Hash identifier:          bNm4yRAmQvM7YDTk3VCCCbXgpLYh7B6YDHrvfP2Y508=
Subject key identifier:   9C:53:C1:E8:E0:0E:61:C8:B8:E9:5B:9B:9F:80:CD:39:D1:D1:FF:8D
Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F
Certificate issuer:       /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
Manifest number:          054B
Signing time:             Mon 22 Dec 2025 23:21:07 +0000
Manifest this update:     Mon 22 Dec 2025 23:21:06 +0000
Manifest next update:     Mon 29 Dec 2025 23:21:06 +0000
Files and hashes:         1: E3ay871bTTWtlSsXkNgnRpktQW8.crl (hash: hz4gkzDccIwJ8mKcBrgnZsuJo4vwYPvn/EWVdEdD9yM=)
                          2: F03F059C391D11EF9A100142C4F9AE02.roa (hash: 5xPsXsO/x9vu20ZDUf9oCZh2wciZeGjOc7UUq3/XpCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80, serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
        Validity
            Not Before: Dec 22 23:21:06 2025 GMT
            Not After : Dec 29 23:21:06 2025 GMT
        Subject: CN=6949d263-22f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:27:a9:e5:d2:df:16:ac:d7:5b:80:f8:a2:
                    34:39:73:d6:fd:d3:b1:6e:58:ad:33:78:b5:9c:c7:
                    f1:5a:1f:e1:97:bd:65:c2:29:1c:42:e6:37:ec:c0:
                    8a:a2:75:4c:77:a5:44:88:86:28:ca:55:7a:ca:57:
                    9d:ff:fd:f8:e4:1f:0a:3a:13:45:c9:bd:7c:9c:82:
                    ce:12:a7:4d:a5:9d:57:e5:5f:f4:67:7a:ac:84:35:
                    88:11:b9:ec:69:64:b6:0a:90:b3:89:69:26:a8:dc:
                    5f:c3:25:6d:bd:5d:ae:0d:a9:8d:23:12:fd:17:79:
                    f8:5d:9b:36:22:a7:03:50:6f:c2:7c:9a:cf:49:d9:
                    54:56:a2:6f:dd:d2:1d:bb:44:1b:58:09:c2:64:fb:
                    32:eb:81:25:94:c9:39:a1:f2:85:94:06:c4:39:80:
                    74:16:a8:59:cd:3a:40:d4:6a:47:e5:90:bd:be:c4:
                    b0:cd:68:1a:46:c7:27:c3:cb:f2:54:0a:b0:66:c2:
                    70:14:66:c1:fb:fb:61:31:2a:4e:b4:3b:b2:f4:f6:
                    a0:89:0a:ee:3b:e5:1b:3d:46:b6:64:bd:02:bd:17:
                    aa:43:57:01:a0:5a:f7:0c:75:f8:07:23:1e:ed:33:
                    13:f4:f5:da:cc:aa:27:60:73:f7:80:33:9f:aa:62:
                    f0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:53:C1:E8:E0:0E:61:C8:B8:E9:5B:9B:9F:80:CD:39:D1:D1:FF:8D
            X509v3 Authority Key Identifier:
                keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ae:86:3f:2d:3b:f2:33:54:3d:76:3d:7e:88:60:a3:fa:76:
         e3:81:28:ad:7b:9c:b3:42:ea:69:c8:e7:97:35:41:02:ac:1c:
         9c:c6:1e:f7:9f:1e:1a:05:c8:98:f8:91:88:ff:7e:71:0b:38:
         25:15:91:cd:12:11:94:1a:8b:52:13:3a:02:52:c7:d6:8d:bc:
         d2:bd:52:10:4b:7e:d8:17:f5:83:ac:dc:70:a2:42:83:7b:6f:
         d5:4d:cd:48:be:09:3f:07:60:54:8d:31:14:31:e7:54:c1:c8:
         46:24:2e:17:7e:d2:fa:f6:da:8c:f0:7c:76:54:a4:f2:62:8a:
         67:0c:85:9b:a5:3c:10:06:e9:69:28:96:83:68:f5:af:da:ea:
         f8:14:d6:bf:90:32:42:02:53:e3:e5:29:08:e4:34:b4:eb:ff:
         e1:6d:db:cb:cb:36:e2:1b:b7:71:50:f9:4b:d8:60:c3:a2:d1:
         7b:d1:56:73:3e:6c:23:fa:f7:4b:9f:a9:23:9d:65:ac:42:58:
         36:b0:c4:5d:5e:09:dd:84:05:84:07:c6:50:3e:a3:fc:06:ab:
         9b:48:3c:c4:a5:a4:a7:16:4f:45:0f:db:39:65:01:ae:04:93:
         81:c8:1b:b7:ef:55:2f:d2:c7:14:b5:db:88:91:18:36:00:ec:
         02:94:a5:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNBODAxMTAvBgNVBAUTKDEzNzZCMkYzQkQ1QjREMzVBRDk1MkIxNzkwRDgyNzQ2
OTkyRDQxNkYwHhcNMjUxMjIyMjMyMTA2WhcNMjUxMjI5MjMyMTA2WjAYMRYwFAYD
VQQDDA02OTQ5ZDI2My0yMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBwnqeXS3xas11uA+KI0OXPW/dOxblitM3i1nMfxWh/hl71lwikcQuY37MCK
onVMd6VEiIYoylV6yled//345B8KOhNFyb18nILOEqdNpZ1X5V/0Z3qshDWIEbns
aWS2CpCziWkmqNxfwyVtvV2uDamNIxL9F3n4XZs2IqcDUG/CfJrPSdlUVqJv3dId
u0QbWAnCZPsy64EllMk5ofKFlAbEOYB0FqhZzTpA1GpH5ZC9vsSwzWgaRscnw8vy
VAqwZsJwFGbB+/thMSpOtDuy9PagiQruO+UbPUa2ZL0CvReqQ1cBoFr3DHX4ByMe
7TMT9PXazKonYHP3gDOfqmLwzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxTwejg
DmHIuOlbm5+AzTnR0f+NMB8GA1UdIwQYMBaAFBN2svO9W001rZUrF5DYJ0aZLUFv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4
MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRUV3RsU3NYa05nblJwa3RR
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UzYXk4NzFiVFRXdGxTc1hrTmduUnBrdFFXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRU
V3RsU3NYa05nblJwa3RRVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqroY/LTvyM1Q9dj1+iGCj+nbjgSite5yzQuppyOeXNUECrBycxh73
nx4aBciY+JGI/35xCzglFZHNEhGUGotSEzoCUsfWjbzSvVIQS37YF/WDrNxwokKD
e2/VTc1Ivgk/B2BUjTEUMedUwchGJC4XftL69tqM8Hx2VKTyYopnDIWbpTwQBulp
KJaDaPWv2ur4FNa/kDJCAlPj5SkI5DS06//hbdvLyzbiG7dxUPlL2GDDotF70VZz
Pmwj+vdLn6kjnWWsQlg2sMRdXgndhAWEB8ZQPqP8BqubSDzEpaSnFk9FD9s5ZQGu
BJOByBu371Uv0scUtduIkRg2AOwClKXy
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:09 2025 by rpki-client