This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
File:                     EibuEiKTgxtlHxW4vB8QVdtCicQ.mft (raw, json)
Hash identifier:          5hwwiKG3ZuafHnDuvA5SuFCj4y6SQEvH3UacRcCrTN0=
Subject key identifier:   71:70:0C:E7:74:73:74:B3:2E:99:57:A8:3D:00:F3:38:82:20:E0:B9
Authority key identifier: 12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4
Certificate issuer:       /CN=A91E861E/serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
Manifest number:          62
Signing time:             Tue 23 Dec 2025 05:59:17 +0000
Manifest this update:     Tue 23 Dec 2025 05:59:16 +0000
Manifest next update:     Tue 30 Dec 2025 05:59:16 +0000
Files and hashes:         1: EibuEiKTgxtlHxW4vB8QVdtCicQ.crl (hash: KoJHrJrYp8UiTcFQhHsgu9SQGKEf3OltLDFcIkqcZAo=)
                          2: C67FDA48541E11F09E0E0C7DC4F9AE02.roa (hash: /3mLFf8N20wALwT6ap0WT3HsxGVV0bjhDCv0ACC3Cxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E861E, serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4
        Validity
            Not Before: Dec 23 05:59:16 2025 GMT
            Not After : Dec 30 05:59:16 2025 GMT
        Subject: CN=694a2fb5-c7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:3e:2d:4f:e1:07:11:7a:c5:be:ff:38:8c:
                    a9:5d:6f:41:e5:fb:5f:9a:27:57:ae:1a:ad:e2:36:
                    7b:6c:02:6e:c4:e9:90:06:00:62:fd:3c:7f:7a:b2:
                    0a:3e:76:b4:09:78:3b:d8:81:5b:00:3f:09:c4:3b:
                    3b:f9:6c:a1:d8:71:68:f5:27:42:71:9f:54:20:98:
                    10:25:50:07:78:c6:1f:c7:7a:b4:b8:4c:94:05:38:
                    bf:d4:ab:67:da:44:04:fc:a5:b1:d0:39:6f:35:22:
                    f1:16:81:cd:a0:d7:94:fc:06:d8:74:a4:da:bd:87:
                    90:94:09:0f:48:e1:c7:08:42:a8:a3:bc:6b:7e:3e:
                    ba:2c:72:df:e9:1e:99:31:74:3c:85:44:db:20:20:
                    fe:bb:a4:70:8f:bb:59:2e:93:01:e2:2f:6b:75:cf:
                    90:2d:7d:2c:55:3d:16:2b:1d:34:91:21:aa:0c:57:
                    e4:7e:60:8e:e4:14:29:a3:79:57:13:39:ad:2c:5d:
                    b9:d0:92:af:12:ac:47:0e:14:fd:50:6f:38:82:15:
                    1c:39:7e:bd:c2:1a:c1:5a:9e:ce:38:7c:60:f3:1c:
                    1b:45:ca:ed:2e:c3:bc:a1:de:1c:30:cf:94:e3:5c:
                    b0:3c:ea:56:df:de:c8:26:f2:78:66:dd:00:2f:d9:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:70:0C:E7:74:73:74:B3:2E:99:57:A8:3D:00:F3:38:82:20:E0:B9
            X509v3 Authority Key Identifier:
                keyid:12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7f:01:7f:5a:2e:99:2e:29:6d:ce:e4:2d:55:ee:d6:bc:2b:
         2d:0b:7d:da:6d:d3:17:da:2e:e4:96:06:99:bf:02:56:8e:00:
         c1:d6:06:95:aa:35:90:8e:ec:eb:ad:e2:fe:13:1d:c4:f8:05:
         61:aa:95:79:7c:7e:bc:91:57:02:ff:c0:da:b4:9e:b4:f3:95:
         4d:2b:5d:86:a6:14:14:8e:12:8e:90:1f:7d:f0:07:b5:77:18:
         4e:f1:c1:33:e7:68:5c:fb:03:5b:36:0d:25:ad:c9:db:b0:f5:
         21:ea:01:2d:cb:9b:56:89:6c:14:cf:e6:9d:82:f1:89:40:cf:
         f4:35:87:ac:eb:29:22:db:a7:ad:29:05:68:e4:b9:68:65:5d:
         30:31:05:0f:a6:7e:17:f9:7a:db:fd:4c:a4:8c:c5:93:a4:69:
         29:c8:4e:73:1d:05:bb:43:bc:d9:de:aa:05:88:81:f1:04:c5:
         87:78:4f:37:ee:4f:74:13:e9:84:df:55:32:e1:b6:6c:5d:39:
         b1:d0:c5:a9:7e:a0:d7:47:7e:00:68:7a:36:b3:01:0e:ef:dd:
         f2:a9:21:72:7d:f7:af:f6:58:49:94:cc:52:7e:0b:51:5b:9d:
         5c:97:d6:ef:ab:f4:10:d2:9d:04:87:09:28:ac:ca:26:39:a2:
         fd:51:12:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:37 2025 by rpki-client