This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
File:                     ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft (raw, json)
Hash identifier:          z3dVDq+jGAMhGczJaNGk6gTuY21BlPzH938n8at+Ut4=
Subject key identifier:   54:11:AA:0B:DC:9A:23:15:19:D6:54:E3:C8:66:54:F2:8F:16:2D:63
Authority key identifier: 7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13
Certificate issuer:       /CN=A9157B93/serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
Manifest number:          76
Signing time:             Fri 19 Dec 2025 05:50:03 +0000
Manifest this update:     Fri 19 Dec 2025 05:50:03 +0000
Manifest next update:     Fri 26 Dec 2025 05:50:03 +0000
Files and hashes:         1: ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl (hash: kOUglhux7tKgL7dT+FrH1Cix/yUeOt5dTGc9+qI+clo=)
                          2: 7C487C522AD711F0889A9C4CC4F9AE02.roa (hash: dcosUg556kia3puig3z/Vay8g6P730lM2nj6N4MJmoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl
                          rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B93, serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
        Validity
            Not Before: Dec 19 05:50:03 2025 GMT
            Not After : Dec 26 05:50:03 2025 GMT
        Subject: CN=6944e78b-45b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:da:08:3a:0e:14:6d:60:2c:da:09:2d:a1:
                    44:02:47:9f:7f:df:33:b1:a7:b1:27:ca:d7:b8:36:
                    13:af:97:3b:dd:95:ad:40:fb:76:90:cc:00:38:c4:
                    d4:bd:4c:5b:84:5c:4c:0f:12:2f:18:2a:c5:26:db:
                    87:06:fc:2c:02:54:a0:d5:1b:16:cd:7f:00:82:81:
                    e3:b2:50:2d:66:af:25:b5:ee:31:85:64:5b:e4:e0:
                    d4:84:a7:57:f8:fd:0c:08:2b:fa:89:93:a2:7d:aa:
                    0c:4c:82:df:73:8f:80:3b:e1:06:2e:8a:f2:61:fd:
                    ba:42:8b:a3:71:bf:6c:76:2d:c6:4b:0c:87:41:b9:
                    b2:35:a9:94:fc:b7:7b:23:4f:b6:dd:f6:fb:1d:08:
                    03:91:7c:b9:3a:2b:0d:b4:f4:b2:cf:cf:89:67:e5:
                    b3:0e:3a:5c:cc:d2:7e:a1:55:a4:06:79:49:1f:c8:
                    d3:6c:2f:da:19:4c:fc:ad:79:56:d0:96:a2:dd:6d:
                    f1:7a:e4:03:1c:63:d0:9c:3e:40:e7:1a:81:2e:2c:
                    19:cd:e7:a3:f8:23:1b:df:38:51:78:38:4a:41:c8:
                    3c:3f:96:20:ef:54:27:2a:0d:6f:ac:c4:eb:08:05:
                    0c:70:59:02:b8:b5:98:ca:55:18:86:d7:65:dc:8e:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:11:AA:0B:DC:9A:23:15:19:D6:54:E3:C8:66:54:F2:8F:16:2D:63
            X509v3 Authority Key Identifier:
                keyid:7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b9:0a:92:75:36:5a:72:42:45:ec:e4:dc:13:bc:f2:ed:f7:
         61:d2:8a:87:c2:0e:7f:67:00:7e:ba:64:8c:38:50:48:63:33:
         dd:16:04:63:9d:a8:60:e2:68:86:e0:cb:2b:2c:33:af:1e:43:
         3c:56:f5:be:a2:99:e3:84:7a:5b:46:fb:d9:ab:b2:28:91:a3:
         bf:c7:e6:3a:63:f2:05:89:6e:f0:95:95:d6:57:00:6e:eb:d8:
         53:88:8d:5f:04:86:87:24:ac:3b:07:40:c6:61:97:dc:b7:22:
         bc:7c:ee:b0:8d:91:3f:05:41:53:a7:3e:82:d3:6c:07:a9:92:
         0c:a9:30:86:4d:28:24:68:2f:31:ee:d2:3a:ec:28:c2:08:74:
         dd:f3:97:1d:14:55:07:b4:36:b5:57:1c:1b:ab:7a:8e:5f:1a:
         53:ce:2e:83:f2:29:0f:de:8f:d5:99:cb:cc:40:46:b8:45:33:
         90:e1:4a:88:e8:e8:90:b4:18:5e:62:5c:22:f3:12:7e:70:54:
         48:6f:7f:0e:08:e6:de:82:1f:87:68:f9:e8:13:ea:3a:bb:cc:
         56:95:99:20:66:7d:34:a9:e9:5f:1c:e3:c6:c5:a0:c5:5c:c9:
         5e:eb:98:d5:09:29:88:71:8f:78:a6:da:f1:61:d2:04:9c:18:
         fc:19:63:ae
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
N0I5MzExMC8GA1UEBRMoN0IzRjYxNTdFOTk3RUYxN0NBNTA3RTY2MTA3RkM4OUU4
RTNFMzkxMzAeFw0yNTEyMTkwNTUwMDNaFw0yNTEyMjYwNTUwMDNaMBgxFjAUBgNV
BAMMDTY5NDRlNzhiLTQ1YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMj9oIOg4UbWAs2gktoUQCR59/3zOxp7Enyte4NhOvlzvdla1A+3aQzAA4xNS9
TFuEXEwPEi8YKsUm24cG/CwCVKDVGxbNfwCCgeOyUC1mryW17jGFZFvk4NSEp1f4
/QwIK/qJk6J9qgxMgt9zj4A74QYuivJh/bpCi6Nxv2x2LcZLDIdBubI1qZT8t3sj
T7bd9vsdCAORfLk6Kw209LLPz4ln5bMOOlzM0n6hVaQGeUkfyNNsL9oZTPyteVbQ
lqLdbfF65AMcY9CcPkDnGoEuLBnN56P4IxvfOFF4OEpByDw/liDvVCcqDW+sxOsI
BQxwWQK4tZjKVRiG12XcjhSjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVBGqC9ya
IxUZ1lTjyGZU8o8WLWMwHwYDVR0jBBgwFoAUez9hV+mX7xfKUH5mEH/Ino4+ORMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3QjkzLzc3M0RGQjcyMjlG
RDExRjBCRDU1MjAzM0M0RjlBRTAyL2V6OWhWLW1YN3hmS1VINW1FSF9Jbm80LU9S
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZXo5aFYtbVg3eGZLVUg1bUVIX0lubzQtT1JNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3
QjkzLzc3M0RGQjcyMjlGRDExRjBCRDU1MjAzM0M0RjlBRTAyL2V6OWhWLW1YN3hm
S1VINW1FSF9Jbm80LU9STS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABG5CpJ1NlpyQkXs5NwTvPLt92HSiofCDn9nAH66ZIw4UEhjM90WBGOd
qGDiaIbgyyssM68eQzxW9b6imeOEeltG+9mrsiiRo7/H5jpj8gWJbvCVldZXAG7r
2FOIjV8EhockrDsHQMZhl9y3Irx87rCNkT8FQVOnPoLTbAepkgypMIZNKCRoLzHu
0jrsKMIIdN3zlx0UVQe0NrVXHBureo5fGlPOLoPyKQ/ej9WZy8xARrhFM5DhSojo
6JC0GF5iXCLzEn5wVEhvfw4I5t6CH4do+egT6jq7zFaVmSBmfTSp6V8c48bFoMVc
yV7rmNUJKYhxj3im2vFh0gScGPwZY64=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:06:05 2025 by rpki-client