This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
File:                     EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json)
Hash identifier:          mm9i5RICNCNbmpnFKiP7JOhMBu3OsBpw+EAgnhik1x4=
Subject key identifier:   1A:95:81:ED:08:34:0A:50:F6:DC:A4:60:61:AA:DF:CB:63:07:AC:8A
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Certificate issuer:       /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial:       04DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
Manifest number:          04D4
Signing time:             Tue 30 Dec 2025 22:59:30 +0000
Manifest this update:     Tue 30 Dec 2025 22:59:30 +0000
Manifest next update:     Tue 06 Jan 2026 22:59:30 +0000
Files and hashes:         1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: rfG8plx12BJzSfLIpPnkP1wK1juppBhCLWRWET/EWHc=)
                          2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: m8kc5pmxyNUtzE4T6XJqZukX44I+76FHWWNgV7rp9ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
                          rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 22:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245 (0x4dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117817, serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
        Validity
            Not Before: Dec 30 22:59:30 2025 GMT
            Not After : Jan  6 22:59:30 2026 GMT
        Subject: CN=69545952-26e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:f9:5b:f2:49:59:26:18:00:3e:a0:6e:d4:
                    41:98:b4:fb:b9:63:10:8f:ee:a4:fb:09:04:13:ee:
                    0e:cd:13:b9:c3:44:42:8b:6b:23:69:e4:67:65:32:
                    42:26:28:7e:7c:32:d2:84:a1:82:0d:bc:0c:a5:73:
                    e0:c6:eb:ed:9f:82:71:55:59:a9:5e:ce:57:33:3b:
                    52:3a:82:3e:ea:5c:bf:35:22:a5:e3:55:4a:a4:3d:
                    2b:46:ae:c7:15:77:8a:21:be:5e:e1:29:5d:2b:f3:
                    1b:c4:93:c2:44:3d:26:54:5f:f8:03:53:65:bd:1d:
                    9d:89:c6:ed:62:d5:9c:72:d5:ca:83:ef:a0:f6:61:
                    75:d4:e1:c0:98:37:60:6c:78:0f:6e:89:cf:3c:9d:
                    49:b5:f1:4b:d8:5f:94:fa:98:a1:98:f6:37:95:6e:
                    03:ce:61:bd:5a:9b:c2:01:63:86:f6:0b:75:15:3e:
                    5f:28:d6:1d:0a:da:a2:44:ce:b7:51:02:25:89:06:
                    69:c2:bf:66:41:ec:a0:ea:b8:03:f8:21:1c:75:00:
                    c4:a5:39:18:95:12:ba:9c:8b:14:50:12:6b:da:f0:
                    9a:74:e0:6e:53:b0:12:85:a6:dd:b4:0b:ea:d8:4f:
                    6a:a4:2d:e2:bb:da:08:5f:43:5f:98:28:bd:ad:a7:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:95:81:ED:08:34:0A:50:F6:DC:A4:60:61:AA:DF:CB:63:07:AC:8A
            X509v3 Authority Key Identifier:
                keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7e:8e:1b:06:3c:47:b4:75:69:0c:e3:69:87:eb:76:5a:e4:
         68:22:6a:8d:6b:74:e5:86:e5:3f:7d:f4:eb:13:c1:74:7e:6e:
         6e:3d:1e:db:58:ac:bf:be:38:c3:86:3e:25:a2:04:da:a5:e5:
         a4:8d:fa:83:e1:b2:fa:5c:3f:be:f6:bf:72:23:d9:6c:3c:b8:
         f6:85:44:ca:aa:60:a6:7a:e8:da:aa:70:6d:58:7b:17:59:13:
         dd:d4:af:0c:03:90:55:64:f2:b2:97:31:69:b5:1a:ee:61:fb:
         da:a7:b0:36:e9:90:6a:67:2d:7b:48:42:8b:51:c7:86:30:2e:
         c5:28:20:4a:8e:3b:ae:97:2a:5d:9c:30:dd:e0:95:0a:9e:4f:
         5f:91:22:66:55:d3:8a:ff:af:d5:0e:89:56:65:b3:59:6f:46:
         3b:20:75:e0:1a:b1:0b:c4:fb:28:0b:ba:38:0d:20:6f:9b:37:
         2f:ce:e2:2e:51:9a:6a:2c:9a:84:a8:55:ef:df:22:4c:95:40:
         49:29:96:12:33:fd:2c:4f:34:fd:94:99:53:c8:39:f4:92:5a:
         56:9b:f8:5a:41:45:11:22:40:b9:4a:e7:3a:25:a6:24:e4:8b:
         79:53:39:cd:7f:d1:28:41:de:27:88:66:10:04:1d:9c:74:4e:
         c7:d4:92:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4MTcxMTAvBgNVBAUTKDEyOTRDNDhCQzY5NkFGRTgyMEJEMTU4MkYzNDM2N0JB
REFCMDI0MzIwHhcNMjUxMjMwMjI1OTMwWhcNMjYwMTA2MjI1OTMwWjAYMRYwFAYD
VQQDDA02OTU0NTk1Mi0yNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtz/5W/JJWSYYAD6gbtRBmLT7uWMQj+6k+wkEE+4OzRO5w0RCi2sjaeRnZTJC
Jih+fDLShKGCDbwMpXPgxuvtn4JxVVmpXs5XMztSOoI+6ly/NSKl41VKpD0rRq7H
FXeKIb5e4SldK/MbxJPCRD0mVF/4A1NlvR2dicbtYtWcctXKg++g9mF11OHAmDdg
bHgPbonPPJ1JtfFL2F+U+pihmPY3lW4DzmG9WpvCAWOG9gt1FT5fKNYdCtqiRM63
UQIliQZpwr9mQeyg6rgD+CEcdQDEpTkYlRK6nIsUUBJr2vCadOBuU7AShabdtAvq
2E9qpC3iu9oIX0NfmCi9raeRhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqVge0I
NApQ9tykYGGq38tjB6yKMB8GA1UdIwQYMBaAFBKUxIvGlq/oIL0VgvNDZ7rasCQy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgxNy8wNjgzRUI3MDRE
QUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3ItZ2d2UldDODBObnV0cXdK
REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VwVEVpOGFXci1nZ3ZSV0M4ME5udXRxd0pESS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzgxNy8wNjgzRUI3MDREQUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3It
Z2d2UldDODBObnV0cXdKREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkfo4bBjxHtHVpDONph+t2WuRoImqNa3TlhuU/ffTrE8F0fm5uPR7b
WKy/vjjDhj4logTapeWkjfqD4bL6XD++9r9yI9lsPLj2hUTKqmCmeujaqnBtWHsX
WRPd1K8MA5BVZPKylzFptRruYfvap7A26ZBqZy17SEKLUceGMC7FKCBKjjuulypd
nDDd4JUKnk9fkSJmVdOK/6/VDolWZbNZb0Y7IHXgGrELxPsoC7o4DSBvmzcvzuIu
UZpqLJqEqFXv3yJMlUBJKZYSM/0sTzT9lJlTyDn0klpWm/haQUURIkC5Suc6JaYk
5It5UznNf9EoQd4niGYQBB2cdE7H1JIy
-----END CERTIFICATE-----
Generated at Wed Dec 31 05:56:04 2025 by rpki-client