This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
File:                     E3ay871bTTWtlSsXkNgnRpktQW8.mft (raw, json)
Hash identifier:          dpC4WkFY+0AjP4zgukmYIz8gPB00hlQ2Gdojajgd8ng=
Subject key identifier:   6D:0B:40:0A:E3:85:E9:9B:83:EC:09:AF:C5:68:DE:4A:DF:44:DF:51
Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F
Certificate issuer:       /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
Manifest number:          0547
Signing time:             Thu 18 Dec 2025 23:38:15 +0000
Manifest this update:     Thu 18 Dec 2025 23:38:14 +0000
Manifest next update:     Thu 25 Dec 2025 23:38:14 +0000
Files and hashes:         1: E3ay871bTTWtlSsXkNgnRpktQW8.crl (hash: vJRN7aluOSjzSbgsadW1j5QoxVWHtMfqbHgl+vHFxS0=)
                          2: F03F059C391D11EF9A100142C4F9AE02.roa (hash: 5xPsXsO/x9vu20ZDUf9oCZh2wciZeGjOc7UUq3/XpCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80, serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
        Validity
            Not Before: Dec 18 23:38:14 2025 GMT
            Not After : Dec 25 23:38:14 2025 GMT
        Subject: CN=69449067-9ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:21:d9:f6:74:23:50:7d:92:10:9b:04:a5:
                    df:e4:14:e4:b6:61:a2:bf:c0:5a:f8:0f:72:cf:a8:
                    c9:c3:39:16:df:ff:8c:b9:ea:1e:83:1a:75:51:1a:
                    74:c0:17:43:6b:1b:6d:f5:7e:35:ea:4a:a0:79:85:
                    9e:60:45:6b:d2:23:22:f0:9f:45:b3:dd:8f:e8:61:
                    18:24:31:0d:7a:0f:f1:4a:4b:bf:e8:f5:42:f9:f0:
                    d8:f1:ee:9f:32:76:03:e8:64:10:0a:37:de:f0:d3:
                    5e:97:ef:cc:57:f5:13:bf:27:c3:9a:f2:86:99:17:
                    61:67:15:e4:22:c0:09:65:6b:ff:54:3e:94:e0:36:
                    91:3e:d5:de:26:0f:df:5a:3d:1d:3c:35:49:0c:b4:
                    ad:cf:15:f2:6e:54:81:b8:85:47:de:47:42:7c:31:
                    f6:87:55:0f:09:29:c0:07:dc:d7:d3:1c:7c:5d:4c:
                    6b:dc:1e:aa:d6:1f:6d:2b:56:f0:6a:80:66:f2:eb:
                    79:49:d9:72:a6:91:43:91:c6:d9:06:bd:e6:59:06:
                    12:0c:11:7d:04:cd:e6:70:1a:c7:22:1a:56:62:60:
                    9d:6a:a7:72:ac:e6:4d:e9:07:b8:b4:00:e8:39:1e:
                    e1:60:17:f0:54:bf:eb:48:d4:1d:ef:71:78:06:76:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0B:40:0A:E3:85:E9:9B:83:EC:09:AF:C5:68:DE:4A:DF:44:DF:51
            X509v3 Authority Key Identifier:
                keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:93:f8:43:b4:78:5a:6b:ce:c7:b1:dc:dd:fe:68:80:25:d2:
         42:64:83:66:a1:41:0b:2a:06:53:d0:26:d9:34:cb:f4:66:fd:
         d8:41:42:78:c3:8f:81:6d:b1:6e:67:16:e7:03:f6:43:35:d5:
         a5:4e:20:35:3e:93:99:98:1b:89:68:63:65:53:c5:f9:d5:9e:
         0c:22:96:c1:00:10:39:07:78:3e:24:4b:ed:b1:6e:11:b1:54:
         0e:d9:42:c4:b3:a1:b9:b2:a3:85:00:7f:59:3d:c8:a7:ca:92:
         96:40:56:cc:85:4c:03:12:d7:f4:f5:12:89:2d:a3:ed:2d:06:
         e3:64:8c:85:46:98:22:0f:e4:cf:c5:6e:01:ad:ef:89:14:e9:
         55:cf:49:cf:b7:fd:a2:84:c6:6a:e4:2b:e1:75:fd:c2:d8:11:
         32:c2:87:62:17:22:6d:39:35:5e:99:26:5c:eb:bc:de:0f:90:
         5f:86:ad:bc:98:e4:a7:f3:c4:6e:62:38:2d:a8:c4:62:2d:af:
         48:57:0a:bb:4b:3f:ad:05:0a:64:a2:3c:d1:68:07:26:c3:84:
         c9:a2:4f:b4:35:f4:37:2c:d8:09:43:98:28:eb:47:70:c4:31:
         f4:23:6b:d6:55:69:57:3c:45:84:b4:ea:e0:e8:d1:b3:55:39:
         1f:73:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:01:01 2025 by rpki-client