This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File:                     eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier:          YTCxM+Gy0EHNEWKXmyYgBctDk1U/0ZPDjfTBMQGi/kU=
Subject key identifier:   8F:79:25:12:CD:A8:72:97:E4:A8:60:91:F7:5F:D4:85:09:80:F5:D6
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer:       /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number:          DD
Signing time:             Sun 21 Dec 2025 04:46:13 +0000
Manifest this update:     Sun 21 Dec 2025 04:46:12 +0000
Manifest next update:     Sun 28 Dec 2025 04:46:12 +0000
Files and hashes:         1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: VWVeajdqqvQHYWS58/V2m2M9CrQrvCrjWiIfc5w7Nq8=)
                          2: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: CBRfaNleeLhQbkhZ9Y/Gyu8j+qS/vePZy+tfvqG3Iy0=)
                          3: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: MvYbkMM7qX+K3Cl1XMK5DsKY9VO54145P/lZVkIO3Zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
                          rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
        Validity
            Not Before: Dec 21 04:46:12 2025 GMT
            Not After : Dec 28 04:46:12 2025 GMT
        Subject: CN=69477b95-a8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:b0:32:8e:b7:2e:d9:52:09:8c:ae:7d:e7:
                    a9:e4:d9:a9:67:3d:75:cc:6d:5f:e6:fc:64:fe:cd:
                    ba:cb:25:ee:d4:03:0f:5a:b5:23:61:d0:0a:e6:f3:
                    63:eb:05:58:b3:6a:6c:c4:00:e7:ba:95:5d:da:92:
                    6e:19:27:0c:c7:c1:1c:95:57:66:8e:8d:3d:5a:59:
                    ee:14:43:28:97:67:57:4c:47:b1:95:bb:31:b3:b9:
                    e2:61:13:85:9d:0c:c4:29:50:99:e7:a5:b9:01:2f:
                    97:4e:be:e1:03:43:7e:7c:c4:01:71:55:b8:18:d0:
                    a9:29:d2:16:71:9f:92:8c:02:cb:01:ca:1f:ba:74:
                    60:0c:fc:33:94:4d:bc:13:d5:6f:ee:1c:7c:ae:59:
                    6b:67:ef:28:0e:29:13:1a:11:20:70:ef:43:82:37:
                    12:3a:e1:41:50:bc:6d:04:13:2d:e9:fb:cf:0c:b1:
                    69:09:ba:5b:14:94:67:26:96:ca:3f:15:c1:d0:ff:
                    bc:f4:10:86:87:3f:92:11:a6:ca:86:9e:84:44:bb:
                    23:f0:7d:5e:8e:cb:c5:8c:9e:aa:0d:2e:72:c3:d7:
                    0f:31:2f:e2:40:26:0d:f3:1a:9d:dd:02:ed:83:ba:
                    8f:86:5d:cd:2d:1d:c1:b8:07:4f:81:5d:6c:95:47:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:79:25:12:CD:A8:72:97:E4:A8:60:91:F7:5F:D4:85:09:80:F5:D6
            X509v3 Authority Key Identifier:
                keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:76:33:e7:4d:f0:32:95:b6:5a:9d:cd:e2:de:97:7d:45:
         16:78:06:00:fd:27:0c:8a:7d:89:0d:fa:10:e2:86:39:ab:2d:
         39:42:ca:0b:fa:4f:45:6b:b4:a5:6d:2b:f4:e5:6e:32:17:26:
         1a:87:09:13:15:1a:7c:98:00:30:bf:2e:e8:40:e7:c1:f0:64:
         48:94:af:5e:e7:ef:6c:94:ad:99:6d:8e:31:dc:78:d7:44:ab:
         59:b7:09:4b:c2:97:c2:21:27:da:0e:59:74:68:a7:d9:c1:f9:
         65:4d:f1:2a:97:ae:91:67:fd:87:05:7e:10:16:8f:90:a7:25:
         ec:d2:2f:d9:15:4a:c5:e1:e8:df:43:01:7a:f6:d1:45:4d:3e:
         a8:c7:40:d0:d8:6b:e9:03:ce:b5:08:18:9d:87:02:a8:13:21:
         57:2b:14:8a:79:a8:93:f6:52:71:00:71:8b:22:dc:5d:65:93:
         8d:6c:4c:91:6e:94:39:f1:cd:1d:90:61:bf:7b:03:d3:26:9b:
         a7:84:1a:97:a2:ad:d5:76:13:d0:17:21:05:5e:32:9e:52:43:
         57:72:3d:e5:d8:d0:a2:97:9f:83:0c:5c:b3:1f:eb:17:76:ad:
         88:df:a5:7c:a1:31:fa:24:32:6a:b5:ce:4b:2f:bf:ce:3c:02:
         83:4c:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:48:08 2025 by rpki-client