This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
File:                     ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json)
Hash identifier:          qJQw5mkrDxlRSMJnRqwyana9hv39xSoH5xdQTfogW2g=
Subject key identifier:   A8:48:3B:D6:7A:ED:36:25:55:F2:D8:FC:0D:61:BC:7D:FF:61:A8:7B
Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
Certificate issuer:       /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
Manifest number:          EA
Signing time:             Fri 19 Dec 2025 04:35:16 +0000
Manifest this update:     Fri 19 Dec 2025 04:35:16 +0000
Manifest next update:     Fri 26 Dec 2025 04:35:16 +0000
Files and hashes:         1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: G4jpU7haIkJEKhNoRffhbsFMyfgRhoFtGSCit2NaRFc=)
                          2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: O99/eUmVrOaInFrLKu3b2QTb8AjH44ACQYMp0A50NSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
                          rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
        Validity
            Not Before: Dec 19 04:35:16 2025 GMT
            Not After : Dec 26 04:35:16 2025 GMT
        Subject: CN=6944d604-3794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:b7:d7:7e:73:c0:16:b4:ea:69:39:9d:8a:
                    be:a3:04:aa:5d:c5:09:e4:1a:cb:c0:e4:e2:e5:c2:
                    fb:31:3d:6e:2f:90:4d:ba:86:13:b4:60:68:d3:a2:
                    1f:b6:a1:40:3c:c7:89:db:34:29:d7:98:99:f9:c0:
                    e1:60:9b:53:19:01:b7:1c:f8:ff:6c:df:94:03:0b:
                    a7:fb:5b:35:08:99:1f:03:0b:74:c4:cd:5a:1b:3a:
                    80:ca:2f:ca:18:1a:2a:c8:64:11:29:db:85:07:da:
                    4f:f4:db:bf:c7:d5:b0:7a:bd:63:66:e1:55:a7:3d:
                    f4:66:af:0e:4e:df:26:12:d9:4d:e2:06:05:48:85:
                    3b:02:52:48:36:63:da:04:c5:08:10:44:4d:cb:cf:
                    af:df:a5:f1:3d:3c:52:47:ba:ac:cc:79:93:05:c4:
                    1a:47:f6:88:7c:d6:ac:f8:30:ea:d2:21:ac:50:1f:
                    0d:1a:6c:93:e5:af:8a:49:15:51:ff:02:a6:32:be:
                    18:f2:d6:7e:44:48:63:5f:04:53:77:a9:4d:63:d2:
                    1e:8c:03:1b:21:92:68:58:bf:de:8c:e0:de:2f:3d:
                    d0:7c:0f:42:a3:4f:f1:ca:22:2d:3f:b4:2e:96:ff:
                    9d:f0:19:e1:69:5f:fa:77:12:90:b2:b3:c6:33:c2:
                    1c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:48:3B:D6:7A:ED:36:25:55:F2:D8:FC:0D:61:BC:7D:FF:61:A8:7B
            X509v3 Authority Key Identifier:
                keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e4:ce:86:00:10:83:c9:25:1d:7c:48:eb:8c:29:20:b4:0a:
         7c:2b:e6:92:de:ee:39:6c:5b:74:16:f4:8a:09:26:11:3a:d4:
         f1:92:10:18:76:af:44:43:7d:99:d9:94:94:89:d4:c5:67:f0:
         e9:60:49:a4:e9:24:e6:e0:57:6d:d6:84:c2:95:30:c0:06:f6:
         aa:1d:59:c4:06:81:94:b4:f9:6f:65:5d:2c:35:ce:89:30:b5:
         d9:4f:21:18:70:59:32:05:df:c1:cc:80:38:73:63:f5:9d:33:
         d2:b2:66:f9:b8:b6:8b:a8:da:84:7b:1e:56:72:c3:a7:73:ed:
         e9:02:14:7b:1f:47:7d:08:cb:b6:bb:09:6b:19:f0:57:c1:6b:
         c5:b3:12:0e:f5:4e:be:74:22:98:98:8d:44:73:db:33:e6:b8:
         21:8d:51:7e:b6:7e:52:90:73:f2:44:f8:f9:02:13:88:a8:a1:
         71:98:af:46:fe:29:97:6c:8d:58:7a:b1:50:82:e0:a7:aa:cb:
         23:d0:0f:69:5b:80:fb:3f:bf:08:44:3c:11:87:2d:d0:cb:53:
         46:f8:24:32:b3:61:18:a9:b1:81:7d:86:6e:be:6f:e5:f7:ed:
         94:03:42:43:17:43:03:b6:4b:c1:a4:a4:35:4c:21:d8:56:8e:
         12:ae:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:01:15 2025 by rpki-client