This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File:                     EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier:          Hjm6NSGywOm6sYMIxLiDU4b+KA3rThiCi25+jSCICIU=
Subject key identifier:   51:96:BC:3A:2F:31:94:B1:F1:1B:25:BE:EA:74:7A:FF:50:94:2A:BF
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer:       /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number:          48
Signing time:             Wed 03 Dec 2025 06:04:55 +0000
Manifest this update:     Wed 03 Dec 2025 06:04:55 +0000
Manifest next update:     Wed 10 Dec 2025 06:04:55 +0000
Files and hashes:         1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: 2TbzNOd9NWS36FHFW7t43iutvK3iWLiW5+fVSz2aItg=)
                          2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: ZEiyTfU7RbfvPc28RELNIE+Hy2mvvU85jmuWJWVYc2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
                          rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
        Validity
            Not Before: Dec  3 06:04:55 2025 GMT
            Not After : Dec 10 06:04:55 2025 GMT
        Subject: CN=692fd307-41d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:79:23:6e:db:f2:ac:f9:8d:3c:66:e4:77:
                    a4:3d:67:65:6d:95:a8:ad:4c:ec:59:22:b4:5a:80:
                    19:aa:79:61:e4:78:56:cc:b9:76:0e:26:ab:a3:83:
                    55:28:dc:bf:42:b6:10:58:bc:f5:ef:de:52:ea:15:
                    e7:3c:11:97:7e:84:21:4f:72:de:22:2c:30:5a:f0:
                    5d:9c:56:64:ee:74:2d:bb:9e:0b:0f:bb:81:9a:55:
                    50:35:94:b5:f0:f0:a8:da:0b:61:9a:86:d5:f9:03:
                    64:63:eb:74:f3:27:b6:4e:58:ca:f0:cb:46:8e:8e:
                    22:8c:5e:f3:7e:b8:22:52:d5:49:10:f4:05:14:f9:
                    d4:1c:df:9d:ad:f8:d2:5e:a0:64:14:78:49:4f:bf:
                    a6:df:d1:4e:40:12:86:f2:f7:9a:75:cb:35:ad:33:
                    b7:fa:a2:73:1d:4b:c8:23:bd:92:92:25:2e:f7:89:
                    a0:f8:7a:60:87:d6:f7:8f:6d:de:bc:f8:63:69:2c:
                    01:6a:eb:21:c2:b2:9d:57:de:09:e4:e4:83:24:ac:
                    a5:97:23:d9:fc:30:c7:9e:51:14:27:a3:76:2a:99:
                    81:4a:cc:d4:2b:5f:b1:d6:c9:1f:c8:7b:41:05:68:
                    09:c9:bc:6e:03:1e:d5:aa:35:ae:a6:3a:fd:0c:24:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:96:BC:3A:2F:31:94:B1:F1:1B:25:BE:EA:74:7A:FF:50:94:2A:BF
            X509v3 Authority Key Identifier:
                keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a6:5d:7b:c7:ef:83:8a:d8:cf:8d:25:de:4d:b5:56:cd:f5:
         9a:ac:1e:9d:65:47:1f:61:7c:bc:4c:7b:2a:08:66:9f:ce:01:
         a4:0c:15:ab:d5:30:0c:b5:b2:2d:77:8d:ea:c6:c1:a6:28:85:
         a2:a8:7c:21:ec:ff:75:0e:98:9d:98:61:22:6e:22:13:3d:94:
         85:ea:85:11:22:85:0f:4a:8f:fa:6a:f2:c1:b8:66:e8:03:e6:
         6f:cb:b7:43:e9:b4:5d:c6:23:92:6b:e7:d7:6f:ac:af:ed:b9:
         25:19:db:97:85:b5:94:fc:1f:2f:27:aa:af:60:dd:f9:b6:81:
         39:ea:da:ac:10:17:ca:f6:6f:68:36:9a:1a:e7:3d:36:b8:77:
         63:36:b4:44:0b:c9:df:c1:a3:f0:27:9e:87:f9:7b:27:ed:3b:
         d7:90:4a:59:32:37:2a:d5:9f:12:85:5d:ec:05:72:6d:c7:52:
         e9:98:da:d3:ee:70:41:19:e8:69:eb:66:a6:03:e7:78:2c:53:
         54:0c:6a:11:72:d9:9d:ce:9f:8b:17:75:c9:68:b4:3e:07:d3:
         c7:05:fc:26:ce:8b:ff:f6:b2:99:2e:c4:a1:b9:9f:ec:a6:f8:
         2f:49:e1:1d:e7:27:40:6c:52:8b:24:e8:6c:3e:71:a2:3d:af:
         6f:d9:de:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:22:45 2025 by rpki-client