This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
File:                     EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json)
Hash identifier:          +j+sfGjBoj3n8PteMoA2n7dd+1pMJFBmqT3BlxLLj6E=
Subject key identifier:   6A:FD:07:2F:00:56:5F:0C:8C:74:B6:61:DB:58:7B:B5:D8:32:D4:67
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Certificate issuer:       /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
Manifest number:          0195
Signing time:             Fri 19 Dec 2025 02:37:15 +0000
Manifest this update:     Fri 19 Dec 2025 02:37:15 +0000
Manifest next update:     Fri 26 Dec 2025 02:37:15 +0000
Files and hashes:         1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: 0Ay9LYm5UuLRuqFDSTwXf4sFUAUF+wg/3e8829DBAN0=)
                          2: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: FqhwzXNHRNY+XCePlaMxiVUp2AFCJ34p2xGpiCoaVzQ=)
                          3: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: 9LMpSs1G6DRXbhafQQ/fnV5UTQZp+aLbxUXgbbTPxiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
                          rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
        Validity
            Not Before: Dec 19 02:37:15 2025 GMT
            Not After : Dec 26 02:37:15 2025 GMT
        Subject: CN=6944ba5b-59e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:51:e1:36:04:a1:aa:c3:ca:e7:b1:90:e7:
                    e6:6b:5c:92:9d:bb:f3:f8:31:5d:62:da:96:14:21:
                    d7:3f:39:67:76:df:fd:1a:02:04:47:fa:f8:62:e5:
                    d1:62:36:36:95:30:d7:e8:f5:b0:04:0b:b9:b0:41:
                    bf:73:6f:bc:0a:91:4b:d6:2e:e4:f1:c2:a1:5e:c5:
                    a5:7f:ab:29:6c:66:ba:e3:fb:b2:c1:ee:85:a5:7b:
                    f2:4e:8c:c1:95:a1:24:a2:0c:26:a7:a8:2c:91:26:
                    1f:6c:1e:e9:09:e4:7b:3c:20:45:01:0f:94:b8:b6:
                    3f:e4:0b:83:37:3d:98:ca:8d:5b:69:e7:5e:93:79:
                    9d:d3:12:0a:e8:91:12:38:d0:57:fe:9a:bf:dd:99:
                    51:4c:52:67:5d:be:37:f7:77:e2:d1:c9:5e:51:ae:
                    4b:ed:eb:43:aa:02:73:b6:fa:2a:6e:f1:12:59:93:
                    ef:c1:49:cf:ca:cd:d8:7d:4c:e6:d5:cd:ca:a8:1a:
                    e5:68:a6:45:1d:fd:56:6a:e1:5f:64:8c:96:8c:10:
                    7a:63:44:33:15:d5:56:d8:3f:ef:da:72:b6:e4:ab:
                    2d:86:9a:20:3f:5e:e4:cf:d3:cf:b0:b2:5c:68:8b:
                    29:89:3a:c5:75:20:79:4c:c4:7c:a7:22:c5:b9:7a:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FD:07:2F:00:56:5F:0C:8C:74:B6:61:DB:58:7B:B5:D8:32:D4:67
            X509v3 Authority Key Identifier:
                keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5c:d6:50:03:7a:d9:cc:17:ba:2a:00:40:fe:db:8a:cc:cb:
         12:0b:2e:65:29:47:f3:8a:cd:b0:ff:64:2a:58:a2:7a:ad:c8:
         f6:60:35:bd:2f:d4:d7:d1:86:dd:18:b5:c6:d9:14:1b:f3:86:
         ad:ef:78:45:51:7d:93:e1:03:2a:57:48:3c:83:fa:f8:34:e8:
         2c:82:c1:6e:84:2a:e9:eb:27:87:4a:d9:97:b7:35:c9:82:42:
         ef:20:b3:f5:2a:06:85:5c:16:7c:5e:85:c5:cf:38:da:ca:5f:
         af:b8:f6:05:24:a0:0d:43:f4:4a:d3:d4:ad:ed:30:92:55:71:
         59:9c:a4:8c:d2:6a:f4:a8:05:4c:c7:b5:8c:af:fe:c9:16:4e:
         3d:7f:f6:81:c9:4d:35:f2:6c:fa:b8:e6:62:56:0c:1e:ae:25:
         aa:2e:17:ba:02:35:1b:61:2f:b1:c1:3b:c3:68:52:21:db:f3:
         85:ab:5a:ee:83:ae:4a:cb:28:43:85:87:4c:f5:68:2b:f5:3d:
         d1:10:a1:30:d7:b4:8f:51:a7:90:63:58:f4:19:e1:7a:fa:be:
         22:cf:05:30:11:50:29:e7:9d:70:3e:2f:93:aa:de:fa:40:92:
         cf:0f:30:73:2c:1f:3f:85:fc:d7:71:32:e9:8d:dd:49:fe:5e:
         d1:ad:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:34 2025 by rpki-client