This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
File:                     e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json)
Hash identifier:          wczfeofFExsDpePt214G8FN8sN4KPSvAW6PgXE19aGU=
Subject key identifier:   41:07:56:DA:A5:41:3F:51:23:80:AB:DA:60:00:A8:BD:C4:01:12:39
Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
Certificate issuer:       /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Certificate serial:       03FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
Manifest number:          03F3
Signing time:             Wed 10 Dec 2025 22:59:39 +0000
Manifest this update:     Wed 10 Dec 2025 22:59:38 +0000
Manifest next update:     Wed 17 Dec 2025 22:59:38 +0000
Files and hashes:         1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: ML9gPPvW72yTsV79wdzir2TfPZes42nM+XYqqZZvdiU=)
                          2: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: wCf4g6o5WScb6RGG49PPoBi+hb01eShp6RghG0g0MJ8=)
                          3: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: gNV6yCoYOHvCUxwy2Tl0FTscxDv6xhq7lZUCCqRtA/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 22:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
        Validity
            Not Before: Dec 10 22:59:38 2025 GMT
            Not After : Dec 17 22:59:38 2025 GMT
        Subject: CN=6939fb5a-fe3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:dc:c6:4a:cc:22:f4:89:21:38:bf:78:b8:
                    00:8f:1f:00:75:fd:74:d9:25:28:31:e1:1e:7c:7d:
                    7d:be:9d:d2:29:48:5a:d0:a4:ef:39:03:e6:7b:0b:
                    64:72:15:17:09:73:34:b4:7f:04:e6:aa:1d:04:a8:
                    8f:2e:fc:8c:89:cc:9e:2b:af:39:3e:50:55:99:9a:
                    b7:55:c3:af:e5:8c:b6:d2:de:0b:70:26:51:29:f4:
                    60:79:85:32:2a:e5:1c:8b:93:62:0a:cd:e8:96:7a:
                    b3:56:dc:18:36:fe:99:f6:ee:27:73:66:c7:45:80:
                    94:fa:b3:78:7c:eb:95:92:1a:d3:d6:92:c5:ac:aa:
                    10:3c:3f:d6:7c:f7:9a:f4:17:b2:4f:fe:e1:ae:f0:
                    32:92:30:f3:b6:c4:98:45:80:91:41:7a:82:f1:7a:
                    7e:78:ee:83:c4:e0:5a:25:21:7e:7f:35:31:80:bd:
                    3f:04:69:eb:37:dc:46:34:32:cf:de:3c:a1:bc:d3:
                    cc:cb:1d:03:ed:cc:ee:0c:58:f8:99:3f:d7:e6:cd:
                    9a:14:e4:28:69:3d:5a:91:27:92:51:be:70:bf:3f:
                    69:a8:a2:7a:d4:e6:6a:8e:3a:2c:33:91:42:aa:a2:
                    24:da:d2:c0:b2:2f:de:13:42:2d:58:e4:24:f2:31:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:07:56:DA:A5:41:3F:51:23:80:AB:DA:60:00:A8:BD:C4:01:12:39
            X509v3 Authority Key Identifier:
                keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4a:8b:28:0e:91:83:ce:f5:55:30:b6:30:e5:28:93:ff:29:
         b1:8c:6d:37:fd:d7:55:7f:76:31:7a:04:52:4e:69:70:6c:98:
         88:f0:a4:37:b7:e6:cb:c8:c7:da:f2:06:f0:1f:b2:4e:26:1d:
         9d:c4:0a:2c:45:31:61:fc:e5:df:37:19:3b:fb:91:02:7a:ff:
         30:9e:03:a8:62:e7:df:0c:4d:8e:16:69:f1:ca:4c:e2:58:c3:
         1f:c3:79:50:b3:a8:5c:cd:de:f7:e1:f9:7b:ee:44:6f:a6:80:
         bc:1f:c3:6e:3b:35:ac:e4:4b:fd:e4:5b:82:cd:af:4d:d0:ed:
         51:e7:70:66:66:a1:f1:2e:ec:be:8a:0d:03:8d:fd:fa:54:4e:
         24:d3:62:95:33:d0:dd:4d:92:ac:22:fe:86:d3:58:f4:ea:6c:
         69:31:7a:46:97:99:97:3c:ae:dd:7f:82:dc:e4:62:97:66:c1:
         3b:6e:2a:a1:01:22:6b:4d:d6:e2:e8:a8:bb:86:51:2d:55:f0:
         13:d8:19:15:97:0a:01:1a:33:c2:95:b9:18:53:3b:d0:f1:1a:
         dc:03:5e:cc:c0:49:f9:85:c1:13:6b:e4:03:d5:3a:e1:e8:6a:
         dd:18:ce:bb:97:da:1a:15:15:3a:23:9a:b4:c2:85:46:0f:b0:
         7f:e3:a9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:26:00 2025 by rpki-client