This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
File:                     eVqDka92AR59slWmAQo0gvEJDj8.mft (raw, json)
Hash identifier:          SeoM1jiZDZROdKAIRj3c9RLjCCpRKFEbZ5C3LL3BB40=
Subject key identifier:   C2:14:72:82:2F:21:8B:3F:10:66:8A:B0:31:AC:C3:46:C7:06:CD:A3
Authority key identifier: 79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F
Certificate issuer:       /CN=A91C60A5/serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
Manifest number:          DA
Signing time:             Tue 23 Dec 2025 04:33:59 +0000
Manifest this update:     Tue 23 Dec 2025 04:33:59 +0000
Manifest next update:     Tue 30 Dec 2025 04:33:59 +0000
Files and hashes:         1: eVqDka92AR59slWmAQo0gvEJDj8.crl (hash: CIcf69D9x2lArZmoYrkFuM8y7Wfc7qrJc9S7M4HWfp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
        Validity
            Not Before: Dec 23 04:33:59 2025 GMT
            Not After : Dec 30 04:33:59 2025 GMT
        Subject: CN=694a1bb7-72e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:53:c5:40:c9:8c:a0:dc:c8:03:82:d3:a4:
                    fe:34:c7:5e:71:2f:04:f8:13:70:10:41:e0:3d:e3:
                    49:82:8f:86:88:ed:ab:a3:e5:df:ca:f6:20:14:fe:
                    30:00:69:2a:4c:a8:4e:30:fd:67:2c:4c:d1:86:5d:
                    42:5d:42:b5:6f:3d:12:2c:3d:d1:5d:28:c6:64:e8:
                    a7:32:8c:a8:ac:aa:60:b7:1d:d8:45:b0:be:77:4d:
                    af:02:cf:06:1e:c6:1e:92:00:56:05:a0:0e:e8:dd:
                    4b:b5:e0:10:14:d1:15:fa:2e:5b:9a:67:63:29:e5:
                    d4:c5:81:c4:8e:0f:21:47:63:8d:58:f0:d8:30:f9:
                    d9:b2:4a:47:eb:32:15:2c:b6:4c:97:25:68:fe:3f:
                    82:b3:c8:6b:17:d2:d2:d9:49:76:41:a7:bc:38:c9:
                    5e:fb:2d:12:77:9b:f6:a6:66:33:55:ca:9b:94:da:
                    c2:7f:bf:c1:29:e8:26:03:a4:9d:cf:00:eb:3e:53:
                    97:d5:16:83:45:22:b0:b2:af:d1:81:98:71:86:3a:
                    a5:f8:ff:65:ba:34:ed:d7:3e:6c:4b:67:22:88:ea:
                    1d:7e:85:28:91:60:85:58:b2:ee:35:7d:b1:76:7c:
                    bf:06:99:53:04:93:e5:81:a8:e8:5d:f1:b5:60:60:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:14:72:82:2F:21:8B:3F:10:66:8A:B0:31:AC:C3:46:C7:06:CD:A3
            X509v3 Authority Key Identifier:
                keyid:79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d6:59:74:31:31:08:04:9b:0e:69:63:67:af:ba:c7:71:fc:
         05:7e:b8:76:68:14:28:d6:9f:8d:ac:b5:21:8d:e1:d1:d5:d5:
         85:a9:01:aa:03:dd:36:76:79:b5:ed:7c:51:0c:43:eb:ca:ad:
         6c:78:36:50:ea:c8:81:7a:73:e3:f5:bf:fe:ed:de:5f:ed:5d:
         bc:64:cf:1b:8c:d0:77:d5:17:3c:b2:46:8a:29:ae:b5:d6:4f:
         01:47:07:54:5e:2b:48:01:65:23:79:a5:ee:0e:63:6a:16:17:
         b4:98:78:48:d7:e9:74:89:b2:59:a7:3e:65:e1:3e:f6:2f:09:
         81:11:a5:70:4f:2a:4b:cc:0c:42:be:79:ba:4d:93:9c:eb:b9:
         39:7c:33:ad:6c:68:fd:9a:f4:72:c6:0f:28:db:9e:f4:03:a3:
         1f:09:1d:c0:1d:fc:31:b2:1c:cc:17:56:45:3b:d7:b6:3d:86:
         43:22:b1:26:66:11:66:17:b9:a6:52:e3:6d:29:ae:6c:68:c7:
         96:94:3c:3d:19:ee:65:18:b6:94:dc:c6:90:6e:6d:a3:54:e0:
         91:eb:2c:a9:b5:3e:f3:dc:4e:cb:56:8e:98:e9:09:d1:50:6f:
         9c:69:c3:f1:1c:d0:b3:fb:a2:b5:f7:b1:20:2d:4c:24:42:77:
         6f:c0:ef:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:12 2025 by rpki-client