This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft
File:                     eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json)
Hash identifier:          WogQgiBMNhisr5OCgY4tO3BcGX8/Km9RPmsrPRQQgt4=
Subject key identifier:   27:E4:3B:4D:D5:BF:3A:C4:5E:E6:95:1C:E2:3E:2B:21:0F:FE:6B:10
Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50
Certificate issuer:       /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550
Certificate serial:       2D83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft
Manifest number:          2D67
Signing time:             Sat 06 Dec 2025 15:18:46 +0000
Manifest this update:     Sat 06 Dec 2025 15:18:45 +0000
Manifest next update:     Sat 13 Dec 2025 15:18:45 +0000
Files and hashes:         1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: euhpf0Axa1ps+erR5u01KRW5eK5+y7LczTa2UUi2JMw=)
                          2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl
                          rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11651 (0x2d83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550
        Validity
            Not Before: Dec  6 15:18:45 2025 GMT
            Not After : Dec 13 15:18:45 2025 GMT
        Subject: CN=69344955-35e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9e:ea:14:4b:e1:58:77:26:52:d7:bc:7b:1a:
                    0e:04:11:33:a8:ce:c3:a1:2c:15:18:8f:0c:f5:78:
                    93:05:73:e9:8c:42:66:a8:87:8d:6d:40:7e:77:bf:
                    a3:71:56:6d:9f:e6:8d:fd:4d:e2:ad:5d:1f:ac:9a:
                    f6:8a:23:de:09:38:80:3c:f5:f5:0c:12:0d:8b:b4:
                    d0:18:3d:c5:3d:bd:8b:df:b3:82:cb:e4:5b:6a:04:
                    2a:cd:1e:16:8f:d1:fc:4b:15:8d:cb:29:33:f0:9e:
                    21:54:01:8c:43:43:02:db:8d:1b:dd:c9:4c:f2:3a:
                    92:2c:cf:41:23:de:e2:41:65:f1:2d:7b:bd:03:a1:
                    2d:47:ff:24:d4:16:5a:0c:14:92:c1:a4:4d:a7:78:
                    e9:c3:1e:35:1e:0b:09:20:a4:b9:18:1c:cf:dd:7b:
                    66:53:3f:d8:65:d1:95:cb:f0:ac:66:76:3a:04:70:
                    a3:71:ee:93:44:c3:6a:37:38:c2:42:4b:8e:53:8f:
                    ba:ef:2e:ad:db:ca:60:41:8c:9d:1b:96:a7:d3:18:
                    7f:f8:f0:a3:04:64:a7:b5:fa:78:b4:a8:52:9b:1f:
                    08:99:d8:42:2e:40:d1:8c:39:f5:75:e1:24:c4:70:
                    0a:85:b1:00:e3:43:f1:da:16:67:d6:94:d7:35:f0:
                    c1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E4:3B:4D:D5:BF:3A:C4:5E:E6:95:1C:E2:3E:2B:21:0F:FE:6B:10
            X509v3 Authority Key Identifier:
                keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9f:ed:20:5d:bb:8d:65:45:41:ce:a9:ce:1c:7b:e4:87:64:
         83:e1:4e:ba:81:9f:ac:6f:95:40:1e:11:17:da:15:77:ee:bd:
         35:45:46:a2:67:05:7f:87:d5:3c:cb:05:c9:e2:5d:59:d4:4b:
         9a:47:8e:b5:ca:93:5a:25:b3:fe:2b:1d:ff:54:86:5c:da:db:
         66:e8:7b:ff:8a:7a:b0:4d:77:96:aa:b9:c6:47:99:86:1c:b8:
         e3:82:e8:37:6b:26:6a:ed:06:42:db:c9:9a:e6:dd:54:81:67:
         e4:b8:75:e9:c2:df:74:fb:44:6a:b7:e9:15:f2:ee:a0:9d:c2:
         96:c9:92:72:2c:06:ad:7b:6a:c2:ca:48:4c:6e:56:a8:76:15:
         52:d9:3e:07:93:31:8e:cb:c0:f0:2a:e9:ae:38:4a:01:6e:3f:
         0c:8b:f0:9d:7b:7b:52:66:f5:58:52:17:d4:df:41:6a:5e:22:
         03:cc:d9:b2:2b:5a:4b:ff:ee:46:41:d9:09:27:73:d2:a0:9c:
         6c:15:54:68:43:68:ee:6e:98:d7:27:c2:c9:a3:d0:37:37:84:
         e2:28:25:ea:c8:dc:9e:13:0a:83:02:f0:de:8e:ca:11:9d:1f:
         98:59:a3:4e:ca:8c:ec:9f:0f:17:2a:a7:b3:76:42:33:88:c2:
         27:8d:58:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 05:59:43 2025 by rpki-client