This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
File:                     EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft (raw, json)
Hash identifier:          wpgmyIE404stuD0FcZfY0gfl23ZXnvr+kwpVvEyd1Ok=
Subject key identifier:   2E:E0:63:76:68:AE:EA:F1:E7:F6:91:2B:61:03:F8:70:03:A6:A6:FB
Authority key identifier: 11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6
Certificate issuer:       /CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
Certificate serial:       08D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
Manifest number:          13EA
Signing time:             Mon 22 Dec 2025 18:46:27 +0000
Manifest this update:     Mon 22 Dec 2025 18:46:27 +0000
Manifest next update:     Mon 29 Dec 2025 18:46:27 +0000
Files and hashes:         1: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl (hash: cVNkY3HhTSEQgrp9TJJ+tKwDjDrVRyvr54OWwiwqAxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl
                          rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2256 (0x8d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D6D8, serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
        Validity
            Not Before: Dec 22 18:46:27 2025 GMT
            Not After : Dec 29 18:46:27 2025 GMT
        Subject: CN=69499203-d3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:9f:11:5d:d9:6b:2b:af:0a:26:5c:c0:7a:
                    85:d9:a7:a7:5b:31:d4:3e:b5:9c:ce:3d:28:d8:1c:
                    3d:dc:e3:34:6a:11:ee:0d:8b:ba:56:60:62:9d:d9:
                    98:1e:5a:96:be:2c:32:c6:f5:25:e7:49:ae:41:6b:
                    3f:6c:d5:26:9b:99:4f:d6:51:a0:00:1d:04:46:ae:
                    83:ce:92:c1:1c:59:6b:c8:78:31:34:85:20:cb:7a:
                    37:86:95:55:14:20:11:0d:1b:bd:ac:e5:9a:7f:de:
                    36:a5:59:f3:7f:09:17:d7:0f:7f:3f:a7:ac:ec:2c:
                    bc:d1:65:e6:38:06:d9:16:15:ec:6f:c7:d3:3d:98:
                    67:72:b5:fe:a7:69:20:59:61:05:1a:ab:8f:da:a7:
                    4e:4f:f2:d9:ad:23:77:5b:41:b9:36:b0:a9:3f:2a:
                    13:7e:ba:1d:d4:8d:c6:28:e6:99:5e:a8:1a:77:c5:
                    b9:b6:08:04:a6:f2:09:31:f6:2e:08:97:40:be:06:
                    dc:02:d0:70:5f:c8:25:dc:96:8c:e5:75:0a:93:2a:
                    fd:76:89:23:05:49:30:30:ca:04:4f:8d:42:02:29:
                    e5:02:cb:63:3e:d6:22:52:26:4c:9a:f9:cb:9f:a0:
                    82:a5:08:dc:61:02:fd:51:fd:89:4a:e3:0d:eb:a6:
                    4d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E0:63:76:68:AE:EA:F1:E7:F6:91:2B:61:03:F8:70:03:A6:A6:FB
            X509v3 Authority Key Identifier:
                keyid:11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:25:52:2f:54:86:8c:c9:28:98:5b:4c:d0:0b:99:75:b1:2c:
         f0:93:cc:62:84:c6:18:76:25:cb:2c:12:ec:57:0c:e7:f2:45:
         5f:f5:d0:e0:19:65:9a:34:c8:a5:50:1e:81:5f:80:f7:4e:64:
         a2:1d:35:73:b9:af:da:f5:c5:6f:bd:48:e6:e6:b3:49:31:db:
         c0:c6:f7:2e:db:42:22:ad:ea:5e:90:04:b7:cc:83:96:dd:15:
         44:05:07:67:df:18:a6:e3:cf:35:75:61:dc:e9:0d:f3:bf:df:
         fe:0a:d0:34:a4:39:f2:b0:b4:08:06:eb:37:d4:c9:10:ef:0a:
         fc:d9:b2:20:75:6c:e0:07:fe:aa:5c:51:f3:ae:9c:3d:b4:46:
         d3:1c:eb:53:3b:4a:f2:fe:8d:06:ea:98:46:82:17:8f:b3:60:
         58:25:8d:8b:bc:da:73:50:18:66:43:20:04:dc:36:c5:c7:20:
         10:13:c8:d6:52:36:3a:50:95:b0:3e:0c:57:7a:a6:42:b0:73:
         25:42:af:f5:cb:1f:0e:59:f6:6e:7b:2d:00:8e:36:ad:c7:b3:
         da:fe:43:e5:59:8e:2e:83:c5:d8:f9:6f:87:31:53:c5:dd:24:
         ed:07:f1:8a:2f:54:7e:65:a8:69:93:98:8d:9a:2b:e3:61:7a:
         1a:64:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:34 2025 by rpki-client