This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
File:                     _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json)
Hash identifier:          LxMBXZqwEdEg6kYveYETdzm2E+4wfqG+Q6PbY/Dr2pY=
Subject key identifier:   B6:CD:84:D9:A2:30:C3:BF:1E:8E:2E:8D:0D:2B:70:19:8B:90:E0:73
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Certificate issuer:       /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
Manifest number:          018D
Signing time:             Sat 27 Dec 2025 02:35:55 +0000
Manifest this update:     Sat 27 Dec 2025 02:35:55 +0000
Manifest next update:     Sat 03 Jan 2026 02:35:55 +0000
Files and hashes:         1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: 8yKHI+GPxLAnD049wH1TYTplnJWNSYJpPZwLL9kbLgc=)
                          2: AA02862E890C11EE87862551C4F9AE02.roa (hash: iEIKCf+XGWrseL7l7p29L+eQtWAuRRnnoodUimUnIC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
                          rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 02:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
        Validity
            Not Before: Dec 27 02:35:55 2025 GMT
            Not After : Jan  3 02:35:55 2026 GMT
        Subject: CN=694f460b-6bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:66:de:c8:8a:b7:c8:8a:6a:c0:79:68:fd:62:
                    43:94:58:19:b8:8d:c3:76:39:6d:0b:87:29:de:01:
                    bf:2e:27:40:46:cf:53:05:b0:31:53:5d:b4:9f:67:
                    b3:2b:d3:aa:94:59:6c:af:b7:d2:48:b6:01:c5:42:
                    f4:fb:10:fa:eb:a9:8e:19:a5:bc:24:00:b7:ea:ea:
                    63:66:3d:30:5c:6c:67:43:1f:1c:b8:93:b3:8b:ef:
                    34:26:bb:ff:8e:cf:07:79:e4:bf:be:44:91:5c:e1:
                    3b:e4:3c:ff:a8:c9:62:40:6c:20:c5:15:bd:89:c9:
                    a5:ec:2c:d4:0a:08:0a:2e:7d:4d:19:bc:a5:2d:02:
                    63:d2:83:b1:c4:ff:f5:11:f7:36:ed:88:38:fe:46:
                    0c:49:d7:33:be:de:4f:14:be:90:17:ea:e9:02:fc:
                    00:0b:24:02:b0:59:ce:05:42:93:a9:9c:cc:95:f1:
                    52:dd:5c:68:bc:d2:6f:da:e8:8f:6a:df:66:00:92:
                    1b:77:5b:2d:3a:77:8c:da:bd:be:99:ff:1c:31:db:
                    99:f6:4e:a5:b8:f4:39:5e:12:e8:e0:c8:8f:e3:07:
                    0d:51:fe:e3:93:58:0c:71:a5:87:9c:c1:a7:09:52:
                    51:84:80:2c:2c:89:b0:63:6a:ca:63:5a:02:8e:be:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CD:84:D9:A2:30:C3:BF:1E:8E:2E:8D:0D:2B:70:19:8B:90:E0:73
            X509v3 Authority Key Identifier:
                keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:42:89:aa:1b:14:85:be:bf:f5:75:7a:31:20:8d:82:d2:f5:
         dd:65:03:4c:71:23:9c:8c:87:b4:b2:35:06:4c:e1:70:50:58:
         da:cd:09:de:31:ae:cc:0a:eb:96:54:43:d6:fe:68:6b:1c:8e:
         9e:b2:a3:fd:a9:65:49:e9:8c:f7:35:62:7a:1a:95:ac:01:43:
         6d:7e:af:3b:0e:e7:85:3c:af:fc:3b:08:48:2e:93:63:94:e3:
         4f:90:3e:1f:b5:23:dc:b1:f4:52:9e:03:10:59:4c:65:f7:9a:
         e0:a0:fa:12:55:6d:9b:47:c3:3c:2d:32:5c:a1:bb:0e:d9:e5:
         4c:16:02:f1:ec:18:6d:3e:69:e8:aa:dc:e2:86:b7:64:0f:9d:
         b7:63:84:84:d4:29:8a:6c:3e:e4:0c:d2:ba:ac:04:ca:24:9c:
         fd:f3:28:80:b1:48:69:87:91:48:b6:d8:70:76:8a:66:08:7f:
         79:e4:e8:18:91:3d:84:45:6c:b5:8e:e3:7b:69:9e:86:0b:75:
         c5:95:81:54:a7:30:27:fe:9b:de:a9:c5:ec:b9:dc:a9:00:f8:
         00:51:c6:10:29:00:e5:e7:3d:bf:a6:b7:fa:3c:19:e2:48:0f:
         10:0d:4d:f6:a6:44:cb:5c:04:25:9f:38:0f:35:bb:ca:c1:76:
         35:ef:56:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 00:46:17 2025 by rpki-client