This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
File:                     eLB7yieVuFKmVslAPke8uKvgelo.mft (raw, json)
Hash identifier:          U9xmNCUGSTb1O8jXt2V8AkMwRimTJYU4QLXiy5x7AXU=
Subject key identifier:   41:9D:F8:37:8F:73:BE:8D:07:5B:FA:BC:3F:62:05:E3:0F:D3:51:F7
Authority key identifier: 78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A
Certificate issuer:       /CN=A91B0380/serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
Manifest number:          DE
Signing time:             Wed 03 Dec 2025 03:53:50 +0000
Manifest this update:     Wed 03 Dec 2025 03:53:50 +0000
Manifest next update:     Wed 10 Dec 2025 03:53:49 +0000
Files and hashes:         1: eLB7yieVuFKmVslAPke8uKvgelo.crl (hash: sBRF8VBznt3WXrXSyskpduxPBqT20HNoplyp47w3qTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 03:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380, serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
        Validity
            Not Before: Dec  3 03:53:50 2025 GMT
            Not After : Dec 10 03:53:49 2025 GMT
        Subject: CN=692fb44e-e976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:de:b2:d5:a1:93:e9:33:22:ed:25:6c:4e:
                    f9:39:a8:64:cc:d2:00:e5:4e:c2:32:3c:eb:01:da:
                    72:78:36:77:9f:63:8a:df:d0:16:34:07:9f:62:1d:
                    5b:1c:85:79:5d:79:38:72:f9:e0:ff:32:d6:9e:23:
                    cb:53:f7:dd:73:cc:95:4e:36:78:1f:8b:18:8c:54:
                    dc:e2:0d:ea:f8:a9:60:ce:c8:10:8e:a5:d1:2f:e3:
                    88:94:fb:01:f6:3e:d7:81:84:35:dd:e5:0b:62:af:
                    df:00:b1:47:1c:49:56:8e:15:47:6c:d7:6b:f1:de:
                    ea:aa:ca:66:4e:2a:01:3c:e8:64:8a:74:05:a4:a0:
                    fc:14:75:64:de:fa:03:42:76:9c:67:d3:04:bc:ab:
                    83:73:d2:6a:d0:5d:3e:99:a5:4e:86:e3:79:b7:78:
                    e2:26:94:a9:34:4e:c5:31:ee:cb:cf:d1:0f:f5:bb:
                    f1:ce:f5:d9:eb:d2:3c:d9:ce:36:52:f1:ec:ff:95:
                    c8:a5:a7:49:9d:c1:fb:71:16:90:b6:b6:fb:0e:64:
                    a8:2b:60:e0:a0:c0:2b:99:ad:5e:0f:9c:32:cb:a3:
                    1d:0e:69:7e:f0:5b:d6:77:34:00:75:5b:d6:40:c9:
                    24:a1:65:8f:0c:fe:6c:a8:32:4d:e5:a5:1b:d8:8f:
                    e2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9D:F8:37:8F:73:BE:8D:07:5B:FA:BC:3F:62:05:E3:0F:D3:51:F7
            X509v3 Authority Key Identifier:
                keyid:78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5a:8a:32:3c:bc:bc:b7:68:85:b2:a3:33:49:95:fe:a2:d7:
         49:e1:6d:34:1c:9c:88:d8:cb:99:a8:20:df:c5:6b:c7:7c:d7:
         1b:9b:8f:b4:37:07:c1:9e:16:92:19:19:f9:a8:58:de:09:ac:
         68:62:d4:90:6d:9c:c5:73:dc:31:ef:2d:d3:81:43:bd:2b:f4:
         26:a2:9b:f6:7a:71:88:ff:32:c5:42:94:24:07:5d:6c:70:2a:
         03:1a:8e:3b:0c:f1:0b:c6:26:b8:88:1b:55:f5:18:ed:76:cc:
         17:43:a9:fd:1c:70:93:67:78:be:72:8b:54:63:5a:06:b8:41:
         7c:b0:6a:8b:eb:bd:1b:71:32:50:b5:a2:72:78:e4:8b:6d:fd:
         2a:aa:4c:bc:08:85:00:1a:7e:06:2b:34:1f:14:42:1d:2b:2a:
         72:8e:d6:88:d9:28:03:7d:79:c7:7d:0b:44:4d:74:9a:3b:e1:
         4e:04:d1:15:07:23:6a:52:54:b8:b3:c3:bc:ee:5d:b9:fd:88:
         80:22:ab:7f:82:70:a2:a6:70:97:55:79:3d:02:bd:61:07:6e:
         fb:2a:d7:c4:c2:08:e9:d3:67:63:f6:b4:ed:e7:c8:8c:82:df:
         45:3d:20:7f:11:e7:9b:91:57:ed:97:70:29:be:b8:32:5a:1a:
         a7:20:54:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:30 2025 by rpki-client