This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File:                     ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier:          5RlSHG5qpfjjL1NEP/3h2VCXsnJF53fKNswnZEYB+aY=
Subject key identifier:   0B:E5:B3:E6:E7:99:42:FA:E0:B4:16:5A:A9:24:5F:51:5D:5C:1B:85
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer:       /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial:       0EE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number:          0EC6
Signing time:             Thu 18 Dec 2025 17:28:52 +0000
Manifest this update:     Thu 18 Dec 2025 17:28:51 +0000
Manifest next update:     Thu 25 Dec 2025 17:28:51 +0000
Files and hashes:         1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: q0lbc162gMJU7vHhRXAPB/TslMtdfDKCcpsSHid7JqU=)
                          2: 93713A1442F311EDA8889068C4F9AE02.roa (hash: EzMv5lO9o81NCglSMIqMm+Knptd/vLNcXJNN5+fG3pg=)
                          3: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: 60vuOkQynjGzHB5ZlHpi78kSHRwd9T4kwsOABZu9eBw=)
                          4: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: ETZXfLUU8V3KJwKDLSCPK2awgHX/8QZCXq5mNJZzacU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
                          rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3817 (0xee9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
        Validity
            Not Before: Dec 18 17:28:51 2025 GMT
            Not After : Dec 25 17:28:51 2025 GMT
        Subject: CN=694439d3-1530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:ee:cf:95:72:52:74:ba:b2:28:0a:b9:2b:
                    65:a3:bf:ee:66:06:8f:2e:ea:2b:01:8a:1c:8d:2f:
                    57:6f:b1:1c:3e:de:4b:4a:e5:94:6e:1b:e7:d3:c8:
                    12:46:df:51:8b:1a:76:ac:4d:21:1d:1b:a8:e0:13:
                    74:35:6a:a2:9c:d8:6b:5e:d0:15:f7:e0:76:d2:f4:
                    f0:e9:08:af:c0:21:d3:9e:13:34:5c:66:c4:60:6b:
                    08:31:a2:a7:75:97:3d:9d:84:97:54:9c:19:1f:d5:
                    1e:a2:28:5a:a7:20:17:c8:ab:b4:ab:a0:03:d7:53:
                    13:56:ec:99:39:4e:43:cd:34:9c:06:38:9c:9c:35:
                    2d:85:41:52:f7:41:20:fd:cc:fe:e3:0b:0d:d3:79:
                    91:bf:23:77:f7:58:53:c2:a2:b9:9a:ee:99:0c:52:
                    4f:f2:3a:dc:a0:87:e5:22:cc:67:b8:84:36:59:d1:
                    d4:24:b7:95:1a:cf:53:d2:26:69:35:b8:b5:c3:2c:
                    dd:61:66:16:ec:f9:4d:41:e9:15:fe:e3:ee:f1:04:
                    a1:ef:9b:17:da:8e:2b:89:86:88:40:eb:61:fa:30:
                    d8:18:a4:1f:1b:79:64:04:17:7f:b1:49:de:39:86:
                    e6:aa:e4:e5:47:c7:1e:a9:2b:4a:96:b0:6e:f2:05:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E5:B3:E6:E7:99:42:FA:E0:B4:16:5A:A9:24:5F:51:5D:5C:1B:85
            X509v3 Authority Key Identifier:
                keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:32:28:ba:7e:2f:d2:6a:04:d6:01:19:96:82:93:dd:9d:41:
         c4:7a:68:29:5c:7d:90:32:20:a9:cb:fa:c9:49:8e:94:d4:f5:
         13:0c:e6:3c:0f:41:09:b7:fe:0e:9e:88:13:bc:4f:e5:4c:27:
         29:a8:7c:c6:38:5e:b9:3e:12:9f:82:7c:95:f2:82:15:dc:fb:
         44:90:1c:ab:aa:88:77:4b:bd:8b:28:5e:28:ae:ad:86:26:09:
         0a:0f:f0:2a:1e:fd:a3:7c:c0:e9:a0:b4:cb:37:94:b8:e0:59:
         16:b1:0c:a2:3e:f4:e0:e8:f2:cd:b5:33:8d:33:77:6e:58:36:
         fb:e2:5b:24:cd:c5:68:cf:10:b7:71:8a:3a:b3:62:20:e2:d2:
         09:59:a5:e4:44:86:53:47:da:ab:35:11:15:9e:58:b7:24:1a:
         80:e3:bc:67:35:d5:28:1e:f2:45:8f:66:ea:6b:8e:33:36:5c:
         61:48:db:c6:1d:31:cc:2b:60:4e:1b:18:62:a7:0d:41:c6:7c:
         de:e8:6c:79:d0:14:cc:d2:c1:d6:9e:b5:7a:54:a0:43:f5:a9:
         f6:9c:b4:15:48:a1:b7:2f:27:e2:a2:cb:f3:e7:35:2b:ee:42:
         42:14:2e:db:9b:ad:65:81:e3:c9:59:ab:b4:a0:0e:c8:f8:10:
         ae:f8:e0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:50 2025 by rpki-client