This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
File:                     EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json)
Hash identifier:          o+y7aHXQxhFeEZjUzeYbS80GdllODT0AwaAu3xvWyqQ=
Subject key identifier:   CB:7B:9C:B5:84:5D:8F:1E:14:0A:4B:10:0D:D2:64:5F:01:45:14:C3
Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF
Certificate issuer:       /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
Manifest number:          E0
Signing time:             Sat 27 Dec 2025 04:29:59 +0000
Manifest this update:     Sat 27 Dec 2025 04:29:58 +0000
Manifest next update:     Sat 03 Jan 2026 04:29:58 +0000
Files and hashes:         1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: dFxJRRQwMqMjTOze6/Yt8X82DpWurtunWKw36tWZeyM=)
                          2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: AtI/2Ua9nQqNbzSJOCRvMvTqRCV50QJmjGrd4yNCBfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl
                          rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 04:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF
        Validity
            Not Before: Dec 27 04:29:58 2025 GMT
            Not After : Jan  3 04:29:58 2026 GMT
        Subject: CN=694f60c6-480a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:e9:07:7f:15:ef:e5:1e:94:1d:3d:56:b6:
                    06:59:40:3f:6a:7f:a8:73:0b:d4:c1:a5:ab:0a:e4:
                    8b:74:74:5b:c4:28:4d:ba:d6:e4:0a:d6:9e:2c:e8:
                    6c:7b:42:02:50:48:a1:d5:15:bf:b6:64:ed:37:d0:
                    54:c5:24:49:59:a5:ef:d4:0a:dd:f8:80:40:68:23:
                    82:f0:25:f8:bb:61:90:e8:35:82:aa:89:71:6f:02:
                    06:20:b1:9d:49:95:4a:e7:e9:ee:64:cd:fd:9e:4c:
                    32:59:40:94:e8:4d:d1:f8:e1:aa:55:78:85:e2:e2:
                    92:93:a4:e9:71:b7:ec:13:19:d7:d1:43:97:3f:bc:
                    6d:c2:53:08:4f:3b:9d:9e:2f:25:63:60:ec:03:b1:
                    cf:ac:da:f8:e1:bf:59:77:1a:35:2d:65:b0:82:03:
                    eb:2f:cd:db:7c:ad:b2:e0:d9:7e:1c:59:94:00:be:
                    ca:df:d7:cf:53:25:cb:d8:a5:d3:8d:be:eb:21:e4:
                    0f:b2:48:a4:aa:88:9f:6a:f0:50:5e:ee:a9:b6:10:
                    85:ec:19:6f:30:b8:5b:b6:e3:7e:31:c4:10:df:0d:
                    1d:02:71:12:c6:3c:76:ec:b3:e8:97:4f:5e:80:cb:
                    d4:55:98:fe:ba:8f:c5:e9:fb:7f:cd:0e:0b:0e:f9:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7B:9C:B5:84:5D:8F:1E:14:0A:4B:10:0D:D2:64:5F:01:45:14:C3
            X509v3 Authority Key Identifier:
                keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f2:b2:4e:05:7b:69:89:b1:93:3d:24:61:3e:16:1a:e7:24:
         20:72:fe:3c:d2:b4:74:95:39:a4:4f:b5:8c:d4:0b:8b:20:f4:
         26:2d:5b:4f:63:e8:fa:13:28:d3:89:cf:f6:2f:a3:39:b2:f9:
         a4:3b:ae:21:c8:00:bd:56:25:64:0f:9d:31:a9:78:b1:92:8e:
         ed:82:37:36:fd:16:44:22:e7:8c:34:ac:93:be:4f:a9:bd:91:
         13:02:bd:cc:a7:fb:49:ab:13:e2:67:50:b6:a3:d1:c3:4d:5d:
         4c:81:d9:b5:57:34:94:dd:fd:af:53:b2:fe:f6:9f:1d:5e:12:
         fe:e1:2b:65:bb:23:6c:29:d5:ae:bb:fd:f1:8e:61:71:d5:2d:
         6e:fe:fa:32:ba:fd:4d:fb:21:fb:53:1e:23:c8:4c:3e:23:76:
         87:68:81:01:c6:e0:7e:65:d7:e9:df:2a:6a:6d:49:da:47:66:
         fa:b8:aa:ab:de:56:62:b7:b8:14:02:04:5e:4e:9a:4f:3b:20:
         45:69:df:6e:df:e4:a5:7d:8a:84:25:e9:57:93:e6:bd:5d:cb:
         4f:06:22:86:78:02:47:11:e8:f6:2a:a3:a1:90:fc:e1:71:1a:
         92:86:d4:73:04:5f:f8:11:c0:23:9a:4b:d1:be:10:76:c6:64:
         e0:5d:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 03:17:14 2025 by rpki-client