This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File:                     e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier:          p2ucky99oUBU8IdYqOeLCzJ/kc4T5D+dptaUIby1qWY=
Subject key identifier:   2E:BA:D8:EA:77:14:C4:83:60:E2:98:F9:BD:B4:2C:24:1C:7F:7B:27
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer:       /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial:       0D35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number:          0D18
Signing time:             Mon 22 Dec 2025 17:42:34 +0000
Manifest this update:     Mon 22 Dec 2025 17:42:34 +0000
Manifest next update:     Mon 29 Dec 2025 17:42:34 +0000
Files and hashes:         1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: S0mkMQr+RjazQaoN86xzBZNb55Y5NB2UNGFaoqnHBrw=)
                          2: CD5B717E8AB811EDA3D4ED68C4F9AE02.roa (hash: XLP4ULkxYx27srGDokdT1/3ibgVd5Ja0S3t9A21I8Bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3381 (0xd35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
        Validity
            Not Before: Dec 22 17:42:34 2025 GMT
            Not After : Dec 29 17:42:34 2025 GMT
        Subject: CN=6949830a-691b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:c0:e1:22:6f:fc:fa:4b:0f:31:37:ab:59:
                    46:7c:2f:89:ac:b8:7a:2c:4e:89:97:27:fc:a3:19:
                    36:c1:36:75:60:1f:07:85:4f:76:58:73:db:a8:00:
                    c2:5d:62:32:5b:a1:3d:67:7d:ad:eb:49:49:97:a2:
                    b4:02:32:a8:d7:3e:34:f8:2e:9f:35:e8:77:67:7e:
                    44:50:f1:34:fe:c0:04:95:d7:2a:2c:ec:86:1b:a9:
                    61:7b:32:3d:d3:84:c8:76:7e:0e:73:bc:f9:75:b8:
                    56:fe:5d:83:e4:23:1e:44:8e:d1:95:ae:ac:47:0d:
                    3d:cd:f0:d0:db:23:9b:b8:8a:d1:8a:f5:81:0e:dc:
                    68:e0:77:37:e4:a7:ec:b7:f6:cb:42:4c:de:f7:d8:
                    eb:c9:2d:6d:9d:39:b3:61:86:f1:6c:b1:1f:25:4f:
                    cb:a9:4d:ab:3f:c2:d7:fa:48:34:70:e7:d6:64:1b:
                    90:9a:1d:ef:70:36:fb:2e:72:38:4b:fe:92:b9:74:
                    ff:d9:e4:dc:41:98:5c:a1:2f:51:a2:20:b4:78:84:
                    08:72:27:8b:2a:69:f1:23:0d:16:9c:9f:e5:f5:13:
                    ec:d7:07:4f:40:95:c8:1f:16:49:60:4c:5b:28:cc:
                    dc:fc:92:5b:a1:09:8d:a5:f0:72:e9:0e:d9:50:3e:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BA:D8:EA:77:14:C4:83:60:E2:98:F9:BD:B4:2C:24:1C:7F:7B:27
            X509v3 Authority Key Identifier:
                keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c1:90:9c:ce:99:99:9d:bc:e1:ab:16:9e:d4:13:a2:41:f8:
         fb:08:17:41:a5:3d:27:46:09:e7:11:c9:bf:75:9f:ab:25:18:
         70:67:8e:df:25:3f:9c:dc:fe:25:11:d1:52:f5:85:bb:84:a4:
         a3:57:e1:98:f6:c5:de:5a:82:8f:28:c5:0e:91:d2:a3:23:cb:
         30:8b:a1:72:28:97:72:d2:a0:b4:f8:3f:fa:6f:15:fb:9a:2a:
         29:3d:c4:a7:3c:ca:2e:0c:76:f0:a3:f8:33:bc:35:e6:9f:8b:
         8b:d7:65:ad:2d:0a:cf:1f:b7:04:a9:93:c7:11:77:24:fc:b4:
         0c:16:39:a2:f0:6b:97:33:bf:d5:3e:76:8b:41:08:ff:fc:98:
         8b:1a:c8:32:29:06:66:02:5c:59:d7:b6:41:63:15:b7:7a:08:
         32:a4:81:fb:5b:a6:15:b8:59:f3:8e:26:c0:1d:8a:8a:97:0b:
         13:43:d6:dd:f9:27:79:5b:2f:d9:ec:bb:c4:f1:52:3b:20:ec:
         19:bd:4e:c0:6e:12:48:79:2c:9f:e7:13:0b:47:41:01:3a:a9:
         21:c6:8f:3e:6a:ff:d3:f4:09:14:e4:8c:ff:59:3a:cc:dc:55:
         58:f4:5a:ae:56:e7:e2:d5:7a:ad:c6:30:e3:b4:b5:ea:e0:92:
         bf:02:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:25 2025 by rpki-client