This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
File:                     eVMBxo-H8Eofn0mb3y0p84RX-9M.mft (raw, json)
Hash identifier:          zM0Uw0oY2Mo20SfTXC1l9iWLl+ockCb7wu38MwLxXn0=
Subject key identifier:   98:37:0B:BC:E0:47:B4:4D:01:2E:46:28:B9:C7:31:04:AB:0C:7E:6E
Authority key identifier: 79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3
Certificate issuer:       /CN=A91D5749/serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
Manifest number:          023A
Signing time:             Tue 23 Dec 2025 00:56:24 +0000
Manifest this update:     Tue 23 Dec 2025 00:56:24 +0000
Manifest next update:     Tue 30 Dec 2025 00:56:24 +0000
Files and hashes:         1: eVMBxo-H8Eofn0mb3y0p84RX-9M.crl (hash: gdN6Nzeh7Wv5Pl4AYc2wQjW3Wt1kp5VPfm20tQFVRbs=)
                          2: FA57A19A72CE11ED9E7FF20FC4F9AE02.roa (hash: mYhlImP/Bz/2pGZezVVBYy4E3xPsiLCmI0XA+oZzf70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5749, serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
        Validity
            Not Before: Dec 23 00:56:24 2025 GMT
            Not After : Dec 30 00:56:24 2025 GMT
        Subject: CN=6949e8b8-038a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b8:c9:c4:64:fe:05:87:65:a5:dd:c2:8d:ef:
                    d2:5c:81:22:d9:04:14:97:c8:8c:de:c6:49:18:6e:
                    56:eb:89:17:18:43:b8:31:f9:2c:6e:97:a5:af:d5:
                    49:61:b4:9f:11:8a:df:2c:6d:7a:00:19:b6:15:48:
                    f3:7d:e0:9a:20:b6:eb:31:62:f7:0b:33:65:61:cb:
                    28:34:0b:27:89:53:07:57:dc:6e:ee:e6:6c:44:46:
                    22:86:84:c7:ec:40:f9:75:66:d9:19:4b:03:e1:e1:
                    a3:6a:b4:e8:11:64:96:e6:ac:76:99:1f:6a:f5:f5:
                    f2:84:45:42:91:cc:66:b1:20:35:4a:76:22:00:a8:
                    51:a0:33:43:a1:22:17:44:4f:76:06:91:ec:10:a5:
                    d7:db:62:1f:9d:74:1f:fd:7a:0f:b4:6c:c1:5c:71:
                    de:23:fb:cf:e9:90:e2:de:81:4e:6b:aa:9a:f7:48:
                    14:85:4e:cd:9e:db:d9:59:64:e5:f3:43:6e:eb:e4:
                    ad:b7:35:00:60:58:a2:93:70:01:59:3e:ab:8e:41:
                    33:c8:88:2f:db:6f:bb:ba:a4:15:ae:d4:ba:e8:4f:
                    3a:22:7d:65:4e:0d:b9:84:5b:a7:5b:40:30:f2:20:
                    14:2c:51:f5:81:de:a6:4f:28:98:15:c4:32:07:59:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:37:0B:BC:E0:47:B4:4D:01:2E:46:28:B9:C7:31:04:AB:0C:7E:6E
            X509v3 Authority Key Identifier:
                keyid:79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:04:1e:d8:00:e1:8b:7e:71:02:25:b2:a9:6e:5d:81:4e:25:
         9c:81:95:f3:1b:ef:ff:a6:c7:f1:d3:a9:70:4e:ed:d6:da:ff:
         3d:a7:71:52:46:66:7f:0c:48:62:70:15:3b:d4:a5:bb:83:b8:
         67:f2:ca:dc:f4:17:64:1c:fb:42:7a:b2:38:21:fd:e4:ff:7d:
         e9:34:0f:cf:a5:9d:c9:da:1f:a4:18:4d:06:fc:ce:e5:46:a6:
         13:7d:23:e7:d0:fd:55:fc:92:55:d9:d0:dd:6e:f6:02:16:b7:
         8d:c7:ca:9f:cb:f5:26:06:4e:b7:ec:76:06:ef:76:45:50:55:
         f4:44:a8:26:14:0e:55:04:f6:0c:bb:1b:fc:c2:45:55:29:5a:
         fa:83:e8:1d:36:92:4a:56:c2:0c:2a:3a:9b:17:f8:3c:e1:b3:
         60:56:ef:ba:ee:7f:57:d6:ae:6b:96:e7:b1:17:64:a3:98:95:
         cf:3a:86:be:56:92:c0:8f:d9:3e:c6:b6:76:51:e8:2f:5d:f1:
         fc:7b:cc:38:1c:3e:c4:13:03:26:f6:a5:d3:e5:f5:15:57:63:
         33:ff:e0:24:96:e5:23:42:3c:29:66:33:97:be:b4:1c:7e:68:
         33:5e:93:6e:09:35:fb:dd:ad:e0:43:c4:bd:30:96:23:e4:44:
         f2:59:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:10 2025 by rpki-client