This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
File:                     Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft (raw, json)
Hash identifier:          6XzaAoEBkwAXukJKaFFs3cUboRwQtp1Lr1sHiTJxmRI=
Subject key identifier:   45:55:0D:77:1C:D1:E8:B3:6C:EA:79:06:A5:7D:14:53:16:30:8C:4E
Authority key identifier: 12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76
Certificate issuer:       /CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
Manifest number:          01C3
Signing time:             Tue 23 Dec 2025 01:58:16 +0000
Manifest this update:     Tue 23 Dec 2025 01:58:16 +0000
Manifest next update:     Tue 30 Dec 2025 01:58:16 +0000
Files and hashes:         1: Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl (hash: jXtOL5jR1mkX46BEKKXu6jgXEP77/edcDiEMMJ3+/s8=)
                          2: A60B75F62B7B11EEA4D0FA24C4F9AE02.roa (hash: QlGjMXDN4esCEiynluo/msiy33cpphW/TtlNsWHyAK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl
                          rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B778A, serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
        Validity
            Not Before: Dec 23 01:58:16 2025 GMT
            Not After : Dec 30 01:58:16 2025 GMT
        Subject: CN=6949f738-6e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:ac:f1:22:e4:da:3a:bf:27:01:8e:8b:f9:
                    a8:a1:c5:79:fe:16:6c:1d:b3:71:ed:77:28:11:83:
                    4d:d2:22:22:56:60:5e:55:b9:41:3d:a9:6e:0c:50:
                    44:f1:d0:2e:dd:13:1c:a6:7c:b4:58:69:15:02:59:
                    b1:8a:7c:46:d9:f2:5d:76:cb:6b:ba:56:dc:60:18:
                    c2:54:9e:46:b0:13:99:b2:95:c8:89:a6:61:35:35:
                    90:f4:3e:b1:22:44:14:df:9f:14:47:06:32:f7:f2:
                    e0:ee:97:a7:58:2c:a0:eb:d7:11:16:f7:c2:50:24:
                    43:d0:1e:c2:b3:a0:16:92:3b:cd:c5:bc:00:4a:70:
                    28:75:0d:b2:da:31:7f:68:ed:07:0c:74:42:99:b0:
                    47:f2:0a:07:09:77:25:03:89:4e:c0:98:80:60:26:
                    b5:16:45:27:24:47:75:2e:37:e0:0c:9c:9e:ef:03:
                    b4:12:5e:50:99:fa:67:86:03:6e:85:7f:56:cc:8e:
                    38:2b:e8:82:f7:59:e0:b2:bc:15:95:09:e0:3a:31:
                    cf:14:84:a1:fc:78:fd:8e:32:84:3f:f7:5e:09:6c:
                    97:8a:50:9f:59:64:b6:3e:08:dd:12:59:aa:11:01:
                    00:33:e3:4f:ad:28:af:1a:9d:da:fe:50:e5:e3:61:
                    cb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:55:0D:77:1C:D1:E8:B3:6C:EA:79:06:A5:7D:14:53:16:30:8C:4E
            X509v3 Authority Key Identifier:
                keyid:12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ba:37:d2:ee:06:e6:04:43:34:df:0d:90:9d:11:d8:bd:76:
         29:95:40:d7:df:34:e6:d4:87:5a:d9:14:68:b8:b5:a0:25:17:
         db:00:66:ee:b4:96:d8:83:c3:cc:73:6e:a9:a8:1a:6a:fc:de:
         d8:4f:3b:5e:1d:0e:9d:1f:e2:37:cf:e4:dc:b0:2a:11:0a:02:
         64:a2:d2:26:fe:24:e9:76:fa:6b:01:3d:0e:42:e8:08:cd:08:
         d2:0c:29:0b:7c:9c:6b:b6:e1:c6:d8:f0:d7:4a:97:f8:db:fd:
         16:3f:93:55:a9:3e:a9:0d:d2:01:72:50:68:4d:c7:f6:48:86:
         20:27:4e:bd:94:0f:ff:d6:cb:84:98:f3:e4:ee:9c:8c:44:bd:
         a3:cc:28:72:5e:97:12:99:39:5d:22:99:a8:86:c7:1a:3f:c2:
         37:96:5c:ba:a5:ce:84:84:a8:96:8f:19:7a:91:9e:c5:b6:5c:
         16:31:bf:af:1e:f7:a4:8a:9f:65:5b:4d:c8:41:c9:2a:85:a9:
         7a:2c:49:c9:fa:a5:86:d7:d5:e6:78:e0:ad:00:24:d1:4d:9a:
         b4:6d:50:3d:06:b6:a4:4d:a2:8b:e5:c3:69:c1:1e:f7:60:9d:
         21:57:4e:58:d1:01:ed:d6:dd:e7:29:a1:37:29:9c:84:04:c4:
         59:2c:e9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:18 2025 by rpki-client