This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
File:                     ezWJ19jaa93mDzmOflK6heWuM1c.mft (raw, json)
Hash identifier:          IALLMANc/HMcWnGmpRoVegA8QJCOqXxG9HyYzw92Kd0=
Subject key identifier:   DB:CC:7A:07:69:BB:B4:70:E1:CD:B4:3C:0A:24:D5:6E:E1:31:DF:ED
Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57
Certificate issuer:       /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357
Certificate serial:       1866
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
Manifest number:          185D
Signing time:             Sat 20 Dec 2025 16:17:49 +0000
Manifest this update:     Sat 20 Dec 2025 16:17:49 +0000
Manifest next update:     Sat 27 Dec 2025 16:17:49 +0000
Files and hashes:         1: ezWJ19jaa93mDzmOflK6heWuM1c.crl (hash: SnWW2O8/ffPOqLPS0NgkUG960RDJqTqB49FUBu8+O1E=)
                          2: B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (hash: c68+sLs2xncEUmGNGcZAtC/OoTLX/P9kDosbVpUEXIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl
                          rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6246 (0x1866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EF76, serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357
        Validity
            Not Before: Dec 20 16:17:49 2025 GMT
            Not After : Dec 27 16:17:49 2025 GMT
        Subject: CN=6946cc2d-5461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:23:56:36:42:24:ae:bf:eb:8d:47:1a:6f:
                    d4:96:21:f9:11:b7:85:5a:f8:3a:10:a7:09:eb:d6:
                    c2:93:93:05:8c:ca:37:fa:5d:cf:c8:0d:29:d8:66:
                    c1:80:ea:d3:9f:db:09:2e:55:85:33:9e:4f:81:19:
                    d0:d0:a1:0d:83:50:6d:19:81:ac:7f:46:26:4a:62:
                    3d:a8:1c:31:03:2d:a8:e8:6e:48:35:c1:f3:40:5d:
                    d0:9d:f3:7c:7f:28:0e:34:1a:98:47:94:7a:9c:76:
                    61:d9:31:fb:bf:9e:f6:ed:c7:30:96:55:6a:27:47:
                    3e:cb:47:e7:d8:f2:94:ef:58:77:b4:c5:36:45:46:
                    e1:2a:60:b7:f1:df:58:86:5d:9a:24:5e:e5:b7:78:
                    da:cc:82:1d:c9:6c:be:c1:8e:dd:cf:69:f5:a9:e7:
                    5e:8a:46:f9:68:50:c3:ed:85:df:95:a3:6b:b3:49:
                    39:c5:a2:39:8a:a7:aa:34:9d:a9:06:ca:63:83:96:
                    10:2d:21:cf:3c:da:34:ea:05:c9:f1:d5:66:b2:b3:
                    6f:40:9c:50:7e:b9:8f:e7:9c:7a:26:1e:41:85:bc:
                    e5:b6:5f:42:b8:84:96:9d:19:98:a8:4e:68:9f:cb:
                    d6:1d:b8:80:41:33:4a:6c:2f:25:70:50:fa:86:86:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CC:7A:07:69:BB:B4:70:E1:CD:B4:3C:0A:24:D5:6E:E1:31:DF:ED
            X509v3 Authority Key Identifier:
                keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:77:34:81:2d:36:30:a4:2e:19:62:9c:0f:e9:41:46:3f:49:
         fc:26:a2:e7:28:ce:93:b3:22:f7:95:d7:3b:ea:dd:f5:57:34:
         a6:8b:3c:d0:90:e9:ca:21:dc:73:0b:f3:e2:ba:22:52:3a:d5:
         67:93:df:29:ee:56:2e:c7:fe:6a:ad:56:2e:46:0f:8c:bb:4a:
         95:a8:c2:54:96:8d:1e:db:d8:4c:f0:05:75:4a:4e:0a:57:23:
         06:20:37:49:de:88:7e:7a:c4:83:59:0d:7b:44:ac:7b:18:d7:
         13:f0:3d:4a:85:b4:98:99:30:5d:40:6d:bf:33:72:9d:af:52:
         62:ba:49:51:5f:d6:06:62:3f:07:1d:8d:3a:34:a1:49:e8:9c:
         eb:7a:07:b5:ce:5e:b3:68:24:35:f5:67:8e:07:a2:22:e9:9e:
         b3:a3:ff:9c:25:27:80:6e:a9:95:ef:2f:bd:5e:04:bd:c9:24:
         3c:e2:19:8a:b3:fc:f4:b9:1c:8b:d9:f9:da:3c:34:90:aa:c3:
         84:31:d2:88:e1:ef:04:2d:8c:9f:dc:ed:cc:82:c4:6f:df:5e:
         47:1f:c6:18:6f:8e:50:40:b4:cb:39:4c:be:56:eb:e8:6c:cc:
         87:5e:35:1d:d8:d7:df:ad:16:bb:ab:81:4f:a0:e1:98:41:a4:
         0f:c2:a3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:49:15 2025 by rpki-client