This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
File:                     0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft (raw, json)
Hash identifier:          hs4YyxR6SuPVMO9OS3KQlhwG+TCK0Vg3kq1KqgMq9LQ=
Subject key identifier:   F8:74:33:96:28:2A:C8:C1:42:70:E6:C2:D6:68:A7:27:AC:A8:F7:13
Authority key identifier: D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
Certificate issuer:       /CN=A919874A/serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
Manifest number:          A2
Signing time:             Tue 23 Dec 2025 05:16:07 +0000
Manifest this update:     Tue 23 Dec 2025 05:16:07 +0000
Manifest next update:     Tue 30 Dec 2025 05:16:07 +0000
Files and hashes:         1: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl (hash: l2kI7BwR3W0HEF/ZG/KuWvKdTLvqRG/o2Pcd5Wk8/m4=)
                          2: 7151B356EAD411EFBA2AB40EC4F9AE02.roa (hash: VSF4aaLno+UR3o6W3Jl8Y30MNxvgZ99sJu4IeD9pONk=)
                          3: 9A54CDE2348011F086A8BD61C4F9AE02.roa (hash: pT72WIe4fU0R7+0/z831L5zLkhO5BiW0L+nGv2+Kvtc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
                          rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919874A, serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
        Validity
            Not Before: Dec 23 05:16:07 2025 GMT
            Not After : Dec 30 05:16:07 2025 GMT
        Subject: CN=694a2597-e8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2b:6f:9f:00:2e:45:d0:c9:22:af:91:58:56:
                    57:89:18:72:19:99:dc:9a:39:88:0a:1b:b6:8e:00:
                    32:b0:9e:b7:ea:f0:01:e5:3d:55:c8:9a:88:69:bc:
                    95:b3:56:37:81:98:de:33:b4:ab:b1:e5:aa:f3:71:
                    c8:ad:b6:c6:51:6f:6e:20:21:a6:db:b8:df:d7:f0:
                    8b:88:3c:aa:ba:e2:95:5a:6a:26:8e:c0:51:0d:fd:
                    98:4c:f8:e5:ac:64:f2:a9:6f:5b:78:bd:63:ea:ed:
                    3b:3c:9f:3d:46:85:40:78:c9:cf:30:38:56:dd:7c:
                    f1:f9:3e:62:c0:5f:87:68:ce:a6:c1:85:2f:10:79:
                    e6:22:bf:b4:91:de:c5:27:09:61:e7:4d:ba:bb:d5:
                    81:3c:da:29:d0:4c:00:ee:70:b8:47:d7:63:9e:64:
                    8d:45:98:03:69:8c:b3:84:e5:e7:87:1d:d2:69:e2:
                    9a:1b:0c:bb:50:09:43:36:4d:c5:bc:ea:62:7d:9a:
                    40:c9:0f:33:a2:09:7d:89:84:bb:85:17:bc:40:b8:
                    71:54:41:6c:45:e6:21:5b:17:7b:8e:6e:8f:57:10:
                    88:ff:ce:98:94:e0:79:50:53:9b:51:42:e9:29:67:
                    fd:58:46:48:f1:5c:d2:4d:7d:db:14:f9:23:c7:fb:
                    45:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:74:33:96:28:2A:C8:C1:42:70:E6:C2:D6:68:A7:27:AC:A8:F7:13
            X509v3 Authority Key Identifier:
                keyid:D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:09:2f:51:ea:a2:0a:33:15:b8:d6:30:77:0d:77:41:40:ac:
         71:b3:95:0c:59:ef:db:f1:de:be:c1:1e:1b:c2:7a:37:ca:79:
         1e:4f:a1:b3:47:02:7c:e8:4b:23:ad:7d:fb:52:87:6d:d5:90:
         c3:0e:57:6a:97:8f:94:9b:fc:e7:3b:0b:b2:d0:ef:eb:aa:de:
         b0:f7:6c:90:ac:41:da:82:48:2d:e6:0c:ec:43:55:18:3b:c8:
         39:c4:bc:e8:71:be:58:a5:58:09:e1:a0:be:ed:0e:0c:ce:2c:
         72:bc:93:9e:ef:f5:56:28:68:68:2d:32:04:42:e1:ca:e1:2a:
         f0:d6:28:09:b4:80:a9:ed:04:60:8f:fe:34:fa:04:9b:a2:eb:
         b5:f3:ad:94:dd:78:a9:39:5d:8e:e6:8f:46:a9:fe:6a:d6:85:
         5a:15:8b:69:47:90:35:a8:32:3b:8c:24:06:2c:a2:a6:86:7e:
         b5:f0:64:a4:a0:68:ac:94:1d:76:fc:af:26:6c:92:08:9a:f9:
         ad:b4:30:79:ac:5a:62:78:5b:fc:69:1c:14:82:ce:9d:7b:22:
         86:24:bf:da:84:fd:bb:7c:27:b0:e1:b3:4d:39:ea:40:31:87:
         f4:4c:ea:f7:12:94:c0:79:f1:2f:5e:40:34:bf:8c:83:f8:dd:
         5b:4f:28:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:54:44 2025 by rpki-client