This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
File:                     Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft (raw, json)
Hash identifier:          r7vCvyGK2PSaFsB86HPwWhOx5BkGEW1NohwEso4NmaE=
Subject key identifier:   47:DD:AA:88:37:B6:A8:6F:13:E2:05:9B:63:70:D9:A8:24:C1:39:C3
Authority key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2
Certificate issuer:       /CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
Manifest number:          0135
Signing time:             Tue 23 Dec 2025 03:32:50 +0000
Manifest this update:     Tue 23 Dec 2025 03:32:49 +0000
Manifest next update:     Tue 30 Dec 2025 03:32:49 +0000
Files and hashes:         1: Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl (hash: IFgi+hrlzlL8bbKIgddW8US4PbKvXKTDPnXxgXtEd+E=)
                          2: 66387A6C087211EF9EDFC673C4F9AE02.roa (hash: 6CoZctRh+5TN7bimUtTXkZuJtbaIJypN9r/nRbV8PTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl
                          rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E39F, serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2
        Validity
            Not Before: Dec 23 03:32:49 2025 GMT
            Not After : Dec 30 03:32:49 2025 GMT
        Subject: CN=694a0d61-fbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:e4:c8:94:85:7e:91:d1:a8:0e:05:c9:eb:
                    bf:1b:1f:ee:4f:35:b4:51:b8:92:da:c0:7a:86:ba:
                    87:aa:b1:b5:4b:80:39:91:1b:80:ec:70:6d:0e:36:
                    e8:1b:df:81:24:82:a1:ea:0d:fc:32:fc:b5:69:66:
                    e9:aa:97:27:92:dd:67:5b:b7:d6:a5:08:e6:49:d1:
                    c7:e0:b8:e2:d2:78:45:3a:26:ab:c2:bb:4f:66:6f:
                    a6:7b:53:82:ca:00:ae:36:fd:15:14:ac:09:19:bc:
                    a9:4a:5b:5f:2d:66:9c:d5:df:fe:a8:ec:6f:db:1e:
                    1a:18:6d:43:f8:0f:1f:a2:c1:e5:bb:97:4a:46:69:
                    c1:4c:1f:b5:29:07:6a:7f:ee:b2:de:2b:27:03:44:
                    65:6e:1a:0c:57:b0:85:5c:7f:73:59:fb:97:b2:96:
                    aa:1f:ee:b6:24:84:8a:4e:d6:a1:4f:37:b9:03:a8:
                    75:8c:96:0e:27:01:53:b4:0e:fa:96:dd:ae:53:76:
                    5f:47:ab:32:aa:0a:f9:60:b6:7e:4b:01:1c:f5:6e:
                    1d:a4:aa:98:43:fe:4a:89:6c:98:10:be:2a:d9:a2:
                    ad:ca:dc:35:68:f1:c4:ed:c7:3f:1c:e2:fa:f1:5e:
                    44:04:18:2d:98:88:b8:1f:37:67:74:3e:02:2d:9f:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DD:AA:88:37:B6:A8:6F:13:E2:05:9B:63:70:D9:A8:24:C1:39:C3
            X509v3 Authority Key Identifier:
                keyid:11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:38:f6:ad:7e:83:cf:ed:c4:1d:a1:6c:81:db:03:4a:d4:05:
         1b:21:0f:22:20:84:8b:88:70:1c:90:c7:2e:e5:61:f3:79:d7:
         38:d5:06:20:0d:f2:4b:a0:62:8c:22:04:c4:6c:cd:05:b4:87:
         33:ce:68:87:ca:34:ed:1f:51:19:81:b4:8c:89:f3:71:e0:0f:
         86:6c:a3:19:bb:70:f3:5b:c0:fb:7d:92:74:31:5b:99:f3:29:
         68:9a:7f:4b:e0:b5:a2:48:81:1e:33:3b:d5:4e:81:47:03:46:
         09:04:c8:92:3a:5a:d9:ef:5c:6b:34:f4:b5:0c:a2:1e:de:8a:
         95:82:b6:d5:b6:16:4c:9e:11:86:51:8b:34:c8:ac:50:3d:1d:
         ec:e6:19:64:96:44:12:e7:5f:ea:ec:1c:ec:e8:22:70:a4:03:
         ce:61:c4:e3:e1:10:28:2e:de:7f:c9:21:11:40:85:30:13:1f:
         81:39:3d:48:11:7e:90:80:db:38:35:ac:f3:67:5c:33:4a:da:
         07:12:94:81:ab:7d:54:ac:e8:c9:4e:4b:72:26:ad:85:ee:b6:
         0c:6d:7d:b0:cb:6d:d5:48:8b:5d:89:e6:99:3a:95:a6:3c:66:
         cf:76:3c:e5:8b:a1:a1:81:52:09:64:e1:b8:f9:05:4d:9b:ba:
         f8:dc:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:44 2025 by rpki-client