This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
File:                     EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft (raw, json)
Hash identifier:          sExqduIAfnqXGNp3Ld7uiASsj+FYA65cDzNbEcnAwjw=
Subject key identifier:   C3:A2:10:D9:F0:A9:A2:7B:A4:19:A5:2E:E6:47:B5:F7:97:20:35:BB
Authority key identifier: 11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F
Certificate issuer:       /CN=A91A0807/serialNumber=116FF82AAC9D77F6FF216368F4034600F0B3418F
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
Manifest number:          04
Signing time:             Wed 03 Dec 2025 06:17:28 +0000
Manifest this update:     Wed 03 Dec 2025 06:17:27 +0000
Manifest next update:     Wed 10 Dec 2025 06:17:27 +0000
Files and hashes:         1: EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl (hash: +Mm95XjHvCwK0DfGkQmHd5ZeSG3go8LSg7RXhPOoHhk=)
                          2: 507C7202CCBE11F0AAAC3C24C4F9AE02.roa (hash: 0i0TPBw5UJCTyMlO6M31OoI5aiPRbTw/ZV/8/q+8q38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl
                          rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0807, serialNumber=116FF82AAC9D77F6FF216368F4034600F0B3418F
        Validity
            Not Before: Dec  3 06:17:27 2025 GMT
            Not After : Dec 10 06:17:27 2025 GMT
        Subject: CN=692fd5f7-fbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:fc:97:0b:34:11:92:81:f1:30:f3:4d:ad:
                    52:ec:e6:dd:d0:b5:b7:a8:37:af:57:94:27:47:eb:
                    6a:a9:a8:72:52:61:26:96:39:3c:56:44:c7:ad:f8:
                    03:42:1c:3f:46:41:4d:ae:90:16:08:81:84:04:43:
                    f7:c9:0f:c2:38:88:65:1c:31:59:44:12:dc:b3:2b:
                    8d:25:ea:fa:3b:21:d0:ae:56:34:83:c1:1b:9e:9b:
                    ce:ee:2e:e9:b2:ec:90:1c:2c:06:55:77:c4:25:e4:
                    a8:05:ca:7e:64:0a:db:3c:71:4c:17:16:ba:a1:f5:
                    3f:02:34:7d:eb:9e:e5:3a:b7:cc:09:12:6e:96:53:
                    ff:05:1b:09:d8:81:6d:1d:bb:ec:66:43:40:f4:7d:
                    36:35:de:35:e3:a8:79:cc:08:83:a4:5f:33:34:30:
                    a0:b8:62:1c:7a:35:f7:4d:95:93:57:d4:10:fc:e4:
                    5c:77:54:c1:34:16:77:f9:12:b9:ff:96:b7:3f:7e:
                    2c:9b:7f:5c:36:68:10:2b:43:eb:c4:f9:bf:48:b3:
                    e2:87:26:22:a4:46:12:68:0b:56:68:ea:4d:d6:33:
                    e9:93:e5:b5:14:0f:22:75:cb:05:58:0e:49:0b:ca:
                    62:63:03:2b:8d:49:cc:6b:dc:b0:42:1c:76:28:8a:
                    3f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A2:10:D9:F0:A9:A2:7B:A4:19:A5:2E:E6:47:B5:F7:97:20:35:BB
            X509v3 Authority Key Identifier:
                keyid:11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:20:9f:cf:a4:6a:a7:3e:45:52:ec:26:54:36:24:4c:fc:38:
         20:52:b0:93:49:a9:ce:c6:09:28:0f:4c:f5:98:ca:ce:ce:23:
         7c:9a:37:cd:81:43:e6:78:3b:ec:4d:b9:40:27:8b:07:bd:e1:
         12:09:ad:e5:d4:50:71:ef:6f:a3:43:19:99:b1:46:fc:2c:6d:
         ae:ee:1f:2a:99:57:2a:27:2f:40:20:a7:57:34:99:4b:91:3c:
         d3:c5:e3:23:a0:96:16:5b:bb:15:3c:d1:72:7d:75:d2:60:88:
         ba:34:c1:24:31:34:40:21:4c:50:34:f5:59:99:13:4d:d6:5c:
         4d:0d:33:44:38:d8:ed:64:33:9d:5e:ee:c2:07:45:af:72:36:
         da:06:e1:7b:73:ba:dc:9c:6c:21:39:3b:a5:89:75:5a:37:95:
         ec:b8:e6:d7:e6:ca:25:ca:8e:4a:f6:8c:f3:f4:da:e7:8f:c4:
         41:90:52:32:a4:f9:27:34:6d:b7:07:7d:d9:0f:00:1f:67:e4:
         45:0b:cf:20:33:fc:e8:72:36:e6:08:3e:a3:17:45:09:69:00:
         cc:25:be:2c:db:6a:0f:dd:42:53:bb:6b:0d:20:b5:6f:1f:26:
         dd:6f:61:85:a7:1f:47:7d:dc:7b:21:b9:14:90:f7:0a:5c:6f:
         9f:9f:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:16 2025 by rpki-client