This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File:                     EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier:          pX792shCCPO0EngUpCmosq9gkeyJf/pi14ww0EiMjfA=
Subject key identifier:   BA:4E:56:5A:EC:09:2A:BB:73:07:6D:18:6A:38:E3:39:EE:AB:04:9A
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       041A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number:          03B2
Signing time:             Sun 21 Dec 2025 00:11:52 +0000
Manifest this update:     Sun 21 Dec 2025 00:11:51 +0000
Manifest next update:     Sun 28 Dec 2025 00:11:51 +0000
Files and hashes:         1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: JELXtt0v1ectug0XAAkZYKsbFgWKPAoxvZGSWgOl26U=)
                          2: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: O+w5tLUYY2vDAPyyihGdNaVeLcPrzrretQfcUAVViMY=)
                          3: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: KY39ZDloooDTLSWdSYEfYOluFdXRey3d+9IwjJV7kvw=)
                          4: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: q0o0blyQ81NictXAsmCb5KMZ0BzFrp/mj7hc480MWyw=)
                          5: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: PO28TqT7JFAgsJS4OG8H4ivCR2vG+AQUGdE3hSyf+fM=)
                          6: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: QdBFtLVQnvTC0U8ce4xfWA4Knfofq/bGhnYdWQPREvM=)
                          7: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: rjo+bi3dT0jsXGyAaC/7THKFQ/vbxvn37jUfycsRuPY=)
                          8: 7CCE329266F711EF86880681C4F9AE02.roa (hash: 6anx6+tUYpCyea4W0BqwQSGkyUCAr4k+8K9NAhmwsJE=)
                          9: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: R17w/Fkdvp/1oePeXfLYVtvseH7RLcT+pcv0SXzugK4=)
                          10: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: BC1XUzBkjyQzlz4GvtxH81hMdlkimJB+lU8F+PmiFVI=)
                          11: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: ABW3By8YU2W6olwHz1/qOoSOHNFidR8eMB8CQ1rCUFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 00:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: Dec 21 00:11:51 2025 GMT
            Not After : Dec 28 00:11:51 2025 GMT
        Subject: CN=69473b48-276e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:d0:02:f5:15:40:35:36:18:3d:a7:63:43:
                    e3:fa:a6:22:3f:12:d9:1d:dc:d2:6c:a1:0f:35:0f:
                    61:09:99:08:0d:66:be:9d:4a:99:c4:f8:3b:23:d1:
                    ed:fd:9f:a8:7d:5b:cf:e8:c5:15:f7:7d:d8:5e:6a:
                    20:5c:cd:e1:e2:90:41:9e:68:d0:39:a6:a5:8d:a5:
                    7c:1d:a8:27:06:0b:70:e9:eb:3f:18:48:73:e8:6b:
                    e8:be:4c:82:cd:e2:29:e9:bf:10:0b:03:54:4b:fe:
                    3b:d9:0d:53:fd:a7:9b:1a:39:1a:2b:7a:63:c1:67:
                    3d:b1:87:85:b1:40:e4:a5:0d:43:14:52:8b:32:99:
                    fa:71:a0:0e:02:98:cc:8f:f8:a5:0e:e5:9e:32:23:
                    40:86:72:d3:61:20:43:55:5a:85:19:47:b1:21:f6:
                    3d:74:05:fe:27:93:19:ad:2a:99:e4:62:b1:8f:c2:
                    e1:78:8b:ae:f2:b8:e1:1e:05:f3:38:1e:98:62:2c:
                    4a:74:9d:c4:a8:e8:37:ce:a5:20:b8:b6:f5:8f:e1:
                    2d:b3:90:29:5c:33:f3:3d:79:8b:aa:2f:64:a7:43:
                    87:be:23:22:fd:8c:66:00:cc:59:2d:53:8d:1f:d3:
                    bc:7c:23:23:f3:ab:40:77:a8:a3:cc:9d:72:76:91:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4E:56:5A:EC:09:2A:BB:73:07:6D:18:6A:38:E3:39:EE:AB:04:9A
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:eb:8a:01:43:8a:93:fe:c3:82:f1:cc:54:4f:7f:32:ca:45:
         65:3e:3e:39:4b:2e:32:2e:67:47:04:41:5f:65:1d:cc:26:0d:
         9c:3f:0f:34:29:d1:3c:f0:6d:2e:1a:34:5b:d5:1b:18:08:df:
         31:b8:ee:2e:bb:7d:b7:dc:ba:aa:77:a8:dc:90:85:20:30:38:
         40:cb:a0:9c:de:c8:3f:3d:95:c7:60:c4:b0:64:71:01:65:ce:
         d2:c5:e1:e5:3f:a2:33:75:68:69:c2:41:dc:28:e1:ea:de:48:
         03:f5:31:de:fb:c7:cc:be:5d:db:30:21:62:c6:d1:06:f6:66:
         b0:c8:61:81:57:31:3f:8b:2d:4a:4a:0f:40:8c:a9:bb:ea:ec:
         6c:e6:f0:24:f5:1e:e4:7b:27:75:33:52:25:21:c7:cf:5a:dc:
         8a:9c:c6:9a:e2:37:09:41:0b:39:b4:a2:90:07:45:38:39:33:
         38:80:ce:cf:60:28:33:ec:a1:27:15:02:da:07:f0:df:c8:48:
         23:ec:28:c8:9c:24:22:fb:a2:9b:9b:d5:78:fa:a3:64:41:21:
         6d:e0:ff:b5:30:6c:eb:04:db:fc:42:b2:ef:3c:44:f6:a0:9b:
         2a:a7:74:99:d5:af:ff:a3:f6:ce:51:58:6a:55:a4:3b:2b:31:
         c2:49:d9:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4
RjEzRTQxNzIwHhcNMjUxMjIxMDAxMTUxWhcNMjUxMjI4MDAxMTUxWjAYMRYwFAYD
VQQDDA02OTQ3M2I0OC0yNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoiDQAvUVQDU2GD2nY0Pj+qYiPxLZHdzSbKEPNQ9hCZkIDWa+nUqZxPg7I9Ht
/Z+ofVvP6MUV933YXmogXM3h4pBBnmjQOaaljaV8HagnBgtw6es/GEhz6GvovkyC
zeIp6b8QCwNUS/472Q1T/aebGjkaK3pjwWc9sYeFsUDkpQ1DFFKLMpn6caAOApjM
j/ilDuWeMiNAhnLTYSBDVVqFGUexIfY9dAX+J5MZrSqZ5GKxj8LheIuu8rjhHgXz
OB6YYixKdJ3EqOg3zqUguLb1j+Ets5ApXDPzPXmLqi9kp0OHviMi/YxmAMxZLVON
H9O8fCMj86tAd6ijzJ1ydpHdowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpOVlrs
CSq7cwdtGGo44znuqwSaMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw
NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q
dXByZFBTZjRYYU9QRS1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCY64oBQ4qT/sOC8cxUT38yykVlPj45Sy4yLmdHBEFfZR3MJg2cPw80
KdE88G0uGjRb1RsYCN8xuO4uu3233Lqqd6jckIUgMDhAy6Cc3sg/PZXHYMSwZHEB
Zc7SxeHlP6IzdWhpwkHcKOHq3kgD9THe+8fMvl3bMCFixtEG9mawyGGBVzE/iy1K
Sg9AjKm76uxs5vAk9R7keyd1M1IlIcfPWtyKnMaa4jcJQQs5tKKQB0U4OTM4gM7P
YCgz7KEnFQLaB/DfyEgj7CjInCQi+6Kbm9V4+qNkQSFt4P+1MGzrBNv8QrLvPET2
oJsqp3SZ1a//o/bOUVhqVaQ7KzHCSdmw
-----END CERTIFICATE-----
Generated at Sun Dec 21 10:34:19 2025 by rpki-client