This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
File:                     eDj_-XHbpCvN2NjzdFXwsoSbedc.mft (raw, json)
Hash identifier:          stWxrLVJygRvScqlGRd5afD5M8Pt/ErJ08Y9PT+CUys=
Subject key identifier:   F3:9B:5A:3E:6E:60:3D:77:B8:91:29:AD:7D:67:86:66:CC:04:CB:59
Authority key identifier: 78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
Certificate issuer:       /CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
Manifest number:          017B
Signing time:             Tue 23 Dec 2025 02:47:23 +0000
Manifest this update:     Tue 23 Dec 2025 02:47:22 +0000
Manifest next update:     Tue 30 Dec 2025 02:47:22 +0000
Files and hashes:         1: eDj_-XHbpCvN2NjzdFXwsoSbedc.crl (hash: bfqgxDB0o8FIOYg1EFYkOA0ffkruEfsVLQs6Q3nVpn4=)
                          2: 0D0118A89A4C11EEB7AE8812C4F9AE02.roa (hash: dKUIWl8erdDyFZKjf2ms5iCtc7nOGksh5tTJx3endFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl
                          rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A9C8, serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
        Validity
            Not Before: Dec 23 02:47:22 2025 GMT
            Not After : Dec 30 02:47:22 2025 GMT
        Subject: CN=694a02bb-d25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:29:13:21:3f:63:71:0b:06:50:40:c7:18:
                    70:eb:9e:7c:39:6c:89:8d:c6:57:d8:f3:86:9f:85:
                    d1:8c:96:4f:15:41:d6:79:6d:5f:e7:f3:c5:99:b0:
                    8f:0e:d1:df:c9:75:3d:92:23:8f:15:59:5e:7d:3f:
                    c0:4a:80:a3:e6:cd:fe:63:19:77:b8:46:a5:b6:e9:
                    c2:c2:ad:8b:d0:cf:3a:f4:d6:2c:5e:e7:b0:70:dd:
                    3b:cf:88:2a:05:f0:ff:3a:2c:15:96:b1:a8:36:35:
                    30:2d:58:3c:fc:55:7e:9d:ae:81:f1:09:1c:1b:34:
                    39:25:b0:4b:3c:f4:1a:6f:65:58:4b:0a:d3:37:07:
                    8d:58:45:eb:08:11:2b:84:b5:90:52:4a:d7:fd:2a:
                    51:b2:30:6b:39:51:bb:e6:40:0e:d2:ba:03:5c:21:
                    12:6e:32:1c:b6:18:62:ab:d1:66:56:02:83:84:74:
                    a8:78:46:dd:32:7f:2e:8c:17:41:d0:28:ac:4c:a1:
                    01:26:24:1a:ab:78:dd:c7:ea:56:c7:21:38:97:f6:
                    fb:95:05:96:16:84:08:9f:d0:12:27:b1:31:1c:c4:
                    bd:90:9b:60:3e:d1:e7:94:f1:fa:f7:bb:df:c1:13:
                    4f:03:05:40:50:19:64:4a:ba:04:2a:66:b4:4f:f7:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9B:5A:3E:6E:60:3D:77:B8:91:29:AD:7D:67:86:66:CC:04:CB:59
            X509v3 Authority Key Identifier:
                keyid:78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2f:d2:9e:62:00:7c:b3:b8:9f:1e:e6:99:40:ce:e6:1a:aa:
         0a:56:68:a2:aa:d0:d4:0f:a5:14:ee:58:dc:84:cf:93:73:92:
         6a:bc:32:3d:aa:51:36:55:36:ae:fe:65:f4:87:c9:fe:44:c0:
         3a:a9:51:44:30:31:21:e7:7a:a6:17:92:3b:f3:d5:f4:76:97:
         87:fd:81:71:d6:a1:ea:09:f8:3d:6d:1b:87:c8:87:d1:ca:ea:
         60:f4:a7:e4:11:07:6f:84:df:33:3e:ec:db:63:ef:bd:99:da:
         bb:e3:e3:d6:46:6e:2d:ad:62:21:7e:7b:95:fe:b6:cd:cf:b4:
         17:25:d8:4f:e3:c0:34:99:b0:5e:22:51:00:04:70:b5:8e:a3:
         bb:41:91:5b:bf:2f:88:c0:ab:5c:30:9d:d3:e6:1f:5c:02:6f:
         85:2e:2f:4a:5e:e2:d8:b3:cf:c6:7a:61:26:03:bc:e2:1b:ff:
         e1:bb:f1:5c:78:29:08:76:19:c1:5b:2c:80:7f:d9:21:2e:3e:
         90:9c:4f:b3:5b:10:9d:91:c1:69:9d:fa:c7:63:58:09:32:31:
         f6:93:0f:98:ca:f2:70:d5:49:8d:d2:5e:e8:f3:b7:fb:de:55:
         bf:25:f9:de:8e:1e:50:54:ef:24:35:16:fc:36:a0:44:cc:99:
         b6:0d:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:24 2025 by rpki-client