This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
File:                     eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json)
Hash identifier:          cU7wN9tpTcWkZxCy9BOquQ5BAvFHDFyBaE+tjs78d04=
Subject key identifier:   6B:D7:A5:45:E3:16:21:44:BF:1C:A3:8A:21:71:1C:81:0C:EC:D3:B2
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Certificate issuer:       /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial:       09C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
Manifest number:          09C1
Signing time:             Mon 22 Dec 2025 19:22:33 +0000
Manifest this update:     Mon 22 Dec 2025 19:22:33 +0000
Manifest next update:     Mon 29 Dec 2025 19:22:33 +0000
Files and hashes:         1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: Dcbbg1WiLyluJdQYKO2rYbbVNI5bieYlBkbnuwYrAjA=)
                          2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: IM9yFzmqS+Is/NhhSreqHJdhDGFnp0WA0QJtpqV2ULo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
                          rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2504 (0x9c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
        Validity
            Not Before: Dec 22 19:22:33 2025 GMT
            Not After : Dec 29 19:22:33 2025 GMT
        Subject: CN=69499a79-dae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7f:cb:d8:46:de:35:3a:84:8e:2e:0c:48:eb:
                    c5:17:c3:2a:d6:f0:2b:31:d0:71:3e:5b:b2:41:fc:
                    37:b7:41:8f:b7:90:12:4a:50:c6:b9:47:ab:1b:d2:
                    ee:ea:0c:75:b7:42:c7:cd:58:87:47:97:c2:2a:2e:
                    69:a5:d0:ac:30:0a:84:c3:aa:2a:f0:63:eb:50:30:
                    55:a6:85:53:a5:8f:62:50:68:fa:5d:42:61:bc:b3:
                    9e:30:b1:84:93:8f:6e:b7:22:50:7f:c9:dd:4d:4b:
                    83:e8:81:bf:7c:2d:d2:02:d7:aa:9e:22:dc:ea:2a:
                    86:32:53:3d:41:03:a7:d1:78:cf:e6:c5:d2:44:42:
                    67:7f:aa:3f:e7:28:16:91:17:86:71:44:58:88:d4:
                    c3:fb:cf:39:95:e2:ab:8f:b6:2e:61:87:23:1a:4d:
                    a2:ac:3e:1a:ca:a8:e3:8d:3d:ed:18:bc:2a:27:23:
                    d2:37:84:c3:2b:01:2f:15:75:3d:13:92:a9:9b:b1:
                    fb:a6:b9:0e:41:7c:82:ec:45:6b:78:d3:e3:9d:20:
                    c3:b1:5d:d4:f9:2f:8f:b3:27:15:3b:fb:7a:18:b7:
                    15:23:d4:2e:ee:41:90:3f:8a:1c:68:d7:55:1a:c0:
                    43:54:9b:2c:e1:d3:cd:5c:eb:ef:6d:4b:5a:0a:d5:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D7:A5:45:E3:16:21:44:BF:1C:A3:8A:21:71:1C:81:0C:EC:D3:B2
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:58:10:c1:f9:00:0a:41:03:78:51:6b:d9:6c:bd:c1:58:a8:
         12:8a:c0:43:d9:48:f9:8b:75:36:7c:48:50:e1:b0:bd:81:8d:
         13:84:d5:8f:8d:dd:97:f8:a4:5d:25:5c:49:d8:c4:dc:92:a0:
         97:69:4f:1a:7b:c9:1f:99:01:93:77:17:02:ce:58:36:85:97:
         a4:d6:92:34:3c:9e:cf:db:e9:c2:6d:54:a2:d9:b6:72:71:59:
         b4:e7:04:4d:e5:fd:31:1c:01:78:50:a3:b9:68:91:6f:05:78:
         58:27:16:95:e8:64:62:84:70:5f:06:3b:2a:1f:53:b7:2a:c7:
         79:5c:d2:3c:9d:06:3c:05:95:ce:3e:fb:99:72:ea:7b:74:2a:
         57:e2:a0:39:16:ae:66:a6:bf:79:68:8d:e5:b1:8f:f1:88:5e:
         25:0e:57:ed:28:33:a5:d5:d0:cc:88:05:a9:ae:8f:3b:df:77:
         53:a6:11:95:21:59:b9:5f:73:58:b0:ba:bb:13:9d:e9:13:0a:
         34:2e:ed:37:d4:ff:19:37:c0:02:33:6a:2b:86:54:85:9c:33:
         9c:81:e8:69:6f:ca:17:ec:ff:2c:f7:fc:1f:c9:9a:cc:21:1d:
         41:ae:d0:e3:c5:d6:4e:99:f7:5c:c6:60:ae:d6:52:6c:b7:f7:
         e8:75:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:31 2025 by rpki-client