This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
File:                     0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json)
Hash identifier:          Ltd55IKaVQtmRK6YuMc6mRXwYOFpm3rYnbIi0JAHieo=
Subject key identifier:   8D:9D:88:B9:F6:26:D9:AF:86:C9:23:5A:88:3E:2B:4A:9A:58:B7:38
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Certificate issuer:       /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial:       0235
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
Manifest number:          022D
Signing time:             Tue 23 Dec 2025 01:07:49 +0000
Manifest this update:     Tue 23 Dec 2025 01:07:48 +0000
Manifest next update:     Tue 30 Dec 2025 01:07:48 +0000
Files and hashes:         1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: M1fiGTuZ8tgcrT3wtOZN8cslA0IarJLHS3Y6LY4WjIQ=)
                          2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: mfifBvvuBOWR51qu4TAHtYf7r268zx0oLY0Ybp1m38c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
                          rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
        Validity
            Not Before: Dec 23 01:07:48 2025 GMT
            Not After : Dec 30 01:07:48 2025 GMT
        Subject: CN=6949eb65-7693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a4:5d:d5:33:31:1b:22:4e:a6:51:09:d8:28:
                    d7:1d:1d:47:45:f4:dc:39:10:63:20:f6:5d:40:42:
                    ae:0d:a6:95:31:25:d9:5e:55:6a:a5:e4:c8:a7:55:
                    d8:8a:8b:ec:82:92:81:30:44:27:7b:27:e6:65:0c:
                    2f:72:19:65:e7:82:98:e9:11:17:37:89:35:b7:1a:
                    76:f5:55:ce:82:7a:8b:ba:b7:94:3b:36:1e:a3:0e:
                    d4:41:c1:37:df:44:9e:82:7d:1c:98:4e:96:e7:ec:
                    65:e2:2c:57:55:34:3c:5a:ee:0d:29:c9:0a:a1:d0:
                    6b:77:a9:02:59:b5:78:10:2f:c4:ec:77:7d:58:8c:
                    06:c4:e3:17:b7:d7:3a:7e:8a:9c:1f:9d:ff:bd:0e:
                    e3:84:2e:23:20:d6:4a:b2:03:6d:b9:d9:a5:ec:77:
                    07:5e:32:a9:d5:17:5f:15:e5:4c:bb:a1:64:73:21:
                    da:79:da:b7:a3:c1:95:e8:56:cd:70:c1:81:6c:5e:
                    07:c5:32:5b:da:ac:29:e5:02:43:2f:d0:9e:b9:96:
                    c2:a0:93:7d:6b:35:af:20:7a:c8:d1:18:38:78:62:
                    76:ad:dc:a7:85:99:02:dc:7f:20:18:2f:0b:b7:b3:
                    47:50:e0:21:84:0d:45:8c:72:99:17:46:0b:66:29:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9D:88:B9:F6:26:D9:AF:86:C9:23:5A:88:3E:2B:4A:9A:58:B7:38
            X509v3 Authority Key Identifier:
                keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a4:a2:f3:d3:9c:40:83:6f:5c:2c:38:51:23:a3:f6:09:d1:
         f2:0e:8b:d0:f1:1a:88:73:e2:93:74:95:bc:27:55:29:dd:00:
         cc:59:99:96:c8:57:8a:37:70:6a:b5:b6:82:0e:74:0e:c6:7c:
         d1:4c:b8:11:07:f0:a5:52:46:22:a1:5c:9c:b1:eb:d5:f2:3d:
         64:2c:5a:ae:a5:cb:d5:61:07:79:41:9d:d1:fa:d6:d5:c5:ba:
         cd:69:ee:ae:ac:92:b5:ef:90:48:d2:76:91:08:a4:d3:71:cc:
         e8:b2:c6:05:e0:3d:2c:63:81:a6:ab:6f:72:73:49:5b:1a:c7:
         b8:ed:ee:bf:ff:42:84:39:fa:73:62:69:29:d1:d6:ef:7e:d2:
         95:9f:27:8d:d9:91:69:97:8c:e8:ef:29:95:fb:e2:56:ea:24:
         15:4c:fd:d6:01:2b:cb:09:5a:ea:03:48:8a:fe:59:ab:88:66:
         ef:df:12:55:42:b7:34:ef:64:a5:dd:61:3c:c5:74:95:b4:0a:
         11:0a:3e:a3:7d:8c:53:8e:21:d7:30:4b:32:fa:0f:10:1f:f2:
         d5:83:c4:74:46:88:e8:6c:fa:97:0e:e4:bf:61:a0:dc:74:d4:
         d8:03:5e:d9:8c:0d:48:59:27:a6:f8:3e:93:bf:2c:a8:c4:87:
         5e:b1:e1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:40:10 2025 by rpki-client