This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
File:                     EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json)
Hash identifier:          CcsGSh85xqAzEBD36LJOpQ0Ri7OqsddHJPdoSPMf0lE=
Subject key identifier:   6C:60:12:DA:55:D8:B4:91:BC:41:E8:92:EC:93:21:AA:17:A2:89:21
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Certificate issuer:       /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
Manifest number:          0166
Signing time:             Sat 27 Dec 2025 02:59:15 +0000
Manifest this update:     Sat 27 Dec 2025 02:59:15 +0000
Manifest next update:     Sat 03 Jan 2026 02:59:15 +0000
Files and hashes:         1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: 88mEqU0DvB9ANbD7Wrpgwfmg6daqyDYKpe/YHpC1jE4=)
                          2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: 97zPU/AWi/C0nV9VIKmemXWGwZXv9hj/Vz3ExXILCII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 02:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
        Validity
            Not Before: Dec 27 02:59:15 2025 GMT
            Not After : Jan  3 02:59:15 2026 GMT
        Subject: CN=694f4b83-0f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:a2:40:c8:95:18:e6:4e:6b:c0:30:3b:92:
                    48:19:e1:37:e0:0d:f6:5b:37:ff:3a:25:dc:19:25:
                    b4:64:15:a0:9f:b2:4f:16:11:ec:5a:d1:cf:c2:9a:
                    17:ca:1d:73:bd:df:be:7e:fb:d6:67:93:04:e5:3c:
                    f3:f4:77:d1:10:a6:2f:42:d2:eb:0f:08:90:7a:8a:
                    63:67:fb:d8:5c:e1:30:8d:3d:60:90:cf:d7:08:21:
                    fe:1e:f1:d1:12:1d:75:b1:81:64:9e:f1:c5:fa:50:
                    95:ef:59:d3:df:e2:96:4b:85:56:46:0b:66:c8:12:
                    b3:96:7e:42:78:89:fe:fa:5d:0e:0e:3f:b7:8e:7f:
                    b2:61:91:e7:84:97:ce:fd:24:aa:86:9a:24:b2:d5:
                    77:f4:4a:d8:30:3e:b3:f8:84:ce:23:f9:cb:de:81:
                    ed:9e:b7:7a:01:70:9c:a9:bf:5c:d2:7c:d5:1f:ac:
                    0c:a5:ce:d6:46:6f:ae:8b:7c:42:ff:10:3f:00:c8:
                    80:2e:17:92:18:7f:47:1d:9a:5a:44:ee:e4:96:23:
                    54:a4:01:de:da:23:bc:f1:94:58:15:28:f5:51:26:
                    17:34:e9:ca:cd:46:60:4e:ad:04:52:04:3f:25:41:
                    6d:21:20:fd:b6:91:ed:ff:eb:4c:f1:17:1b:19:65:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:60:12:DA:55:D8:B4:91:BC:41:E8:92:EC:93:21:AA:17:A2:89:21
            X509v3 Authority Key Identifier:
                keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:95:92:80:52:69:46:44:6e:1b:20:63:7a:3c:e5:e3:28:14:
         d8:dd:04:81:5b:04:b6:11:70:d3:0b:ac:d4:4e:a1:4e:f2:05:
         b2:36:a4:0a:32:3e:e4:06:8f:ec:37:b2:94:f1:14:9d:e6:b3:
         4e:33:1c:1f:79:7e:da:0e:13:4d:87:54:cc:bd:f5:95:c8:f6:
         24:4e:fc:e3:7a:d3:b5:be:ad:6a:2f:58:08:c0:20:5a:d6:21:
         e3:31:03:68:1d:c8:29:60:9a:28:89:3d:cf:a3:e4:a8:5f:67:
         b0:3f:3c:d0:b1:f4:fb:36:69:dd:83:cf:7f:81:93:92:22:a7:
         88:1d:58:5b:3f:cc:6a:b6:9e:7c:fb:ee:ab:06:ce:54:1f:a2:
         9a:23:19:4d:2c:94:fe:fd:f9:1e:0b:3c:4b:a1:eb:fc:05:9f:
         de:20:68:37:1c:e9:84:4e:cd:11:58:15:b8:1c:96:e7:bf:8d:
         2e:65:06:5f:23:b3:b6:88:67:cf:9b:34:69:86:8a:45:fe:bc:
         47:33:ce:79:de:1a:56:85:e0:d7:c6:c6:f4:fa:5b:46:80:75:
         02:7f:b5:58:30:8e:7c:8f:55:aa:f3:5f:ee:56:a9:df:4f:c4:
         97:a3:b0:92:ac:d3:69:b8:46:89:21:1e:1c:c8:8e:fb:c0:9d:
         63:4d:0b:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0MwN0ExMTAvBgNVBAUTKDEyMThERTc1QjI1ODhCNjYzM0E2QkY4OENEMzg4RjMx
QzQzQUM5QzAwHhcNMjUxMjI3MDI1OTE1WhcNMjYwMTAzMDI1OTE1WjAYMRYwFAYD
VQQDDA02OTRmNGI4My0wZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwEmiQMiVGOZOa8AwO5JIGeE34A32Wzf/OiXcGSW0ZBWgn7JPFhHsWtHPwpoX
yh1zvd++fvvWZ5ME5Tzz9HfREKYvQtLrDwiQeopjZ/vYXOEwjT1gkM/XCCH+HvHR
Eh11sYFknvHF+lCV71nT3+KWS4VWRgtmyBKzln5CeIn++l0ODj+3jn+yYZHnhJfO
/SSqhpokstV39ErYMD6z+ITOI/nL3oHtnrd6AXCcqb9c0nzVH6wMpc7WRm+ui3xC
/xA/AMiALheSGH9HHZpaRO7kliNUpAHe2iO88ZRYFSj1USYXNOnKzUZgTq0EUgQ/
JUFtISD9tpHt/+tM8RcbGWVu3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxgEtpV
2LSRvEHokuyTIaoXookhMB8GA1UdIwQYMBaAFBIY3nWyWItmM6a/iM04jzHEOsnA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GMTQyNjE0QUJF
NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWkyWXpwci1JelRpUE1jUTZ5
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VoamVkYkpZaTJZenByLUl6VGlQTWNRNnljQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzA3QS9GMTQyNjE0QUJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWky
WXpwci1JelRpUE1jUTZ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDFlZKAUmlGRG4bIGN6POXjKBTY3QSBWwS2EXDTC6zUTqFO8gWyNqQK
Mj7kBo/sN7KU8RSd5rNOMxwfeX7aDhNNh1TMvfWVyPYkTvzjetO1vq1qL1gIwCBa
1iHjMQNoHcgpYJooiT3Po+SoX2ewPzzQsfT7Nmndg89/gZOSIqeIHVhbP8xqtp58
++6rBs5UH6KaIxlNLJT+/fkeCzxLoev8BZ/eIGg3HOmETs0RWBW4HJbnv40uZQZf
I7O2iGfPmzRphopF/rxHM8553hpWheDXxsb0+ltGgHUCf7VYMI58j1Wq81/uVqnf
T8SXo7CSrNNpuEaJIR4cyI77wJ1jTQvP
-----END CERTIFICATE-----
Generated at Sun Dec 28 23:39:00 2025 by rpki-client