This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
File:                     ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json)
Hash identifier:          Of++WSeBqRJ6TloyLj3wPJrL1kroAOmqZxurb3qbCWs=
Subject key identifier:   3C:4A:92:41:F5:6A:67:CD:AD:37:43:1E:A1:47:A3:C1:60:7B:B9:9C
Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E
Certificate issuer:       /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E
Certificate serial:       251B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
Manifest number:          24ED
Signing time:             Thu 18 Dec 2025 14:58:36 +0000
Manifest this update:     Thu 18 Dec 2025 14:58:35 +0000
Manifest next update:     Thu 25 Dec 2025 14:58:35 +0000
Files and hashes:         1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: BuNVtAfFnSTyj4RkRj1C27c1pmUOXv33vKHx3Kmp6OE=)
                          2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: zd2Mp+JliwOB/WE8I35a0tiSuKliGO1s4BV4PHkpP1k=)
                          3: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: /t91K13z6WAVt7TlFvUwr5tZKY0UNdGRc/y4NhFwh6I=)
                          4: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: zj4FMoo2BFk+RmoPIRljJ9QowF2nkk9k+fxlmrrzCzE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl
                          rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9499 (0x251b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E
        Validity
            Not Before: Dec 18 14:58:35 2025 GMT
            Not After : Dec 25 14:58:35 2025 GMT
        Subject: CN=6944169c-1981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f2:4e:dc:5f:59:73:5f:3a:98:30:a9:27:35:
                    b4:7b:75:83:aa:e5:1c:05:28:d8:e1:e7:30:ee:71:
                    3d:79:ce:91:54:c3:76:ff:c6:88:d2:b5:21:de:d3:
                    a3:4f:94:47:28:45:b8:76:79:8e:73:00:37:16:a7:
                    e3:6e:c9:c2:48:8d:4b:2a:49:5a:17:01:0f:b6:f4:
                    17:9a:86:5b:64:e5:77:60:69:53:cd:33:e1:1d:90:
                    1d:03:c5:2f:e7:bc:8c:e5:86:cc:ed:e0:ac:6a:6a:
                    1d:d5:0b:45:46:8a:23:69:f7:49:e6:5f:f8:b2:b1:
                    f8:75:78:8e:67:dd:a2:2a:81:a5:69:1f:69:ca:08:
                    39:16:0f:4f:81:a9:86:1f:d3:cb:c3:f3:ee:e0:1c:
                    6a:5c:37:cc:fa:c1:d9:a9:f0:5b:52:c8:0b:a1:1f:
                    62:c9:17:27:67:ba:ae:3c:db:d9:12:9d:9d:1d:03:
                    00:32:d0:ca:cb:0e:89:68:66:bb:4a:eb:04:99:4d:
                    4f:2c:d9:e5:6f:6e:08:21:e4:fb:9a:11:25:89:04:
                    92:37:d6:ec:8a:83:57:43:d0:c6:d1:02:7f:37:c3:
                    a7:13:ad:f7:ab:27:a6:a9:14:8f:ad:03:9a:40:61:
                    d0:81:13:87:db:81:3c:90:fd:f0:83:b3:f7:6c:2e:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4A:92:41:F5:6A:67:CD:AD:37:43:1E:A1:47:A3:C1:60:7B:B9:9C
            X509v3 Authority Key Identifier:
                keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f5:5d:cf:c0:01:10:d6:48:ef:df:0c:ca:03:9f:e9:be:87:
         1c:90:07:fc:16:9d:7e:a2:d2:f9:5d:c5:e6:87:c7:c1:ac:64:
         78:3e:7d:88:57:13:86:97:a6:a3:e2:e1:0b:91:02:e8:25:98:
         7f:62:ee:2c:02:1c:4a:f6:c7:00:58:c1:62:3b:8d:02:26:10:
         29:2e:af:8a:50:19:6f:71:93:ce:24:11:a2:43:17:83:a3:b0:
         bf:92:fa:10:6c:12:23:f2:9f:d2:d3:81:41:ce:99:6b:1f:9b:
         5c:9f:e8:34:4e:97:66:ab:5e:8c:72:61:39:72:1d:25:94:59:
         31:e3:63:f2:71:b1:9c:26:3e:b6:10:ea:b7:fa:ab:6c:97:48:
         40:c9:5b:2a:9a:7c:16:c5:43:a7:cd:df:4d:eb:2f:95:49:f2:
         b3:b2:37:27:46:83:2f:e2:8e:99:3e:cd:a7:93:e1:2a:40:05:
         de:70:74:dd:ba:b7:51:b1:bf:b3:b0:fc:0e:d2:69:5f:1b:c0:
         b8:45:56:33:08:10:18:25:26:ea:f0:ff:a6:25:02:70:5a:94:
         9b:6b:2b:4b:db:49:01:b5:c5:3c:f9:a7:5d:b6:24:ca:19:bf:
         aa:97:8c:6c:2a:2e:6e:be:a7:ca:f8:86:8a:91:1a:58:15:e7:
         05:2f:cb:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx
RDg4ODhFOUUwHhcNMjUxMjE4MTQ1ODM1WhcNMjUxMjI1MTQ1ODM1WjAYMRYwFAYD
VQQDDA02OTQ0MTY5Yy0xOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9/JO3F9Zc186mDCpJzW0e3WDquUcBSjY4ecw7nE9ec6RVMN2/8aI0rUh3tOj
T5RHKEW4dnmOcwA3FqfjbsnCSI1LKklaFwEPtvQXmoZbZOV3YGlTzTPhHZAdA8Uv
57yM5YbM7eCsamod1QtFRoojafdJ5l/4srH4dXiOZ92iKoGlaR9pygg5Fg9PgamG
H9PLw/Pu4BxqXDfM+sHZqfBbUsgLoR9iyRcnZ7quPNvZEp2dHQMAMtDKyw6JaGa7
SusEmU1PLNnlb24IIeT7mhEliQSSN9bsioNXQ9DG0QJ/N8OnE633qyemqRSPrQOa
QGHQgROH24E8kP3wg7P3bC7iQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxKkkH1
amfNrTdDHqFHo8Fge7mcMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC
RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu
Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCN9V3PwAEQ1kjv3wzKA5/pvocckAf8Fp1+otL5XcXmh8fBrGR4Pn2I
VxOGl6aj4uELkQLoJZh/Yu4sAhxK9scAWMFiO40CJhApLq+KUBlvcZPOJBGiQxeD
o7C/kvoQbBIj8p/S04FBzplrH5tcn+g0Tpdmq16McmE5ch0llFkx42PycbGcJj62
EOq3+qtsl0hAyVsqmnwWxUOnzd9N6y+VSfKzsjcnRoMv4o6ZPs2nk+EqQAXecHTd
urdRsb+zsPwO0mlfG8C4RVYzCBAYJSbq8P+mJQJwWpSbaytL20kBtcU8+addtiTK
Gb+ql4xsKi5uvqfK+IaKkRpYFecFL8sm
-----END CERTIFICATE-----
Generated at Sat Dec 20 08:52:58 2025 by rpki-client