This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
File:                     e3dUqC3QY6R-jsNdFj72skSNEts.mft (raw, json)
Hash identifier:          Liu0eWiIOP5pRv3zblCbNDvQCg9gg77x2NlFK8ZgqB0=
Subject key identifier:   62:52:E4:72:70:5B:55:7D:57:2D:42:3E:31:25:F8:F7:99:5B:D4:18
Authority key identifier: 7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB
Certificate issuer:       /CN=A9189311/serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB
Certificate serial:       27FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
Manifest number:          27E6
Signing time:             Thu 18 Dec 2025 15:34:19 +0000
Manifest this update:     Thu 18 Dec 2025 15:34:18 +0000
Manifest next update:     Thu 25 Dec 2025 15:34:18 +0000
Files and hashes:         1: e3dUqC3QY6R-jsNdFj72skSNEts.crl (hash: x+V27uPz3EwSo2JqOnEfVZusNggrV3F3YHLCiyxi5dI=)
                          2: F5BBEA5AF6A611E7B40C7427C4F9AE02.roa (hash: xe6VWbvRpGFOK/RE2frEP7dyA5vptpjoq+BvIiHd+Ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl
                          rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10236 (0x27fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189311, serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB
        Validity
            Not Before: Dec 18 15:34:18 2025 GMT
            Not After : Dec 25 15:34:18 2025 GMT
        Subject: CN=69441efb-de2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c3:c2:5d:6c:80:da:92:90:8b:b2:21:a0:e5:
                    a1:db:86:04:db:49:45:07:5a:28:4b:7c:52:36:a9:
                    05:90:3e:2e:6b:f8:04:13:4d:70:f7:df:1e:41:6e:
                    f7:ac:e4:da:6e:1e:35:3f:2d:77:1c:31:d0:50:e3:
                    9f:5b:9f:26:5a:e7:f9:d1:b6:d4:ec:29:29:1d:0e:
                    73:9d:ea:36:9e:62:3f:6b:c0:ee:fe:1e:4e:37:ae:
                    69:46:10:a2:f0:43:61:94:69:67:b4:6f:04:19:7f:
                    14:5f:d4:ee:c6:84:e2:9d:6a:58:84:dd:09:3c:d2:
                    4e:54:f8:03:88:33:46:2a:84:fa:81:8a:2e:a2:66:
                    e0:ea:1c:3a:2c:33:ab:37:13:2a:9b:c9:63:38:30:
                    c1:9b:bb:0d:84:60:e5:ee:14:f7:6f:35:86:70:48:
                    d7:91:ac:c0:3c:11:52:2d:65:ff:14:8f:68:2f:a9:
                    47:b0:c6:1e:38:f5:19:34:19:f0:f1:91:4f:f3:78:
                    45:78:6a:b1:76:42:de:c4:88:38:13:51:34:a9:f0:
                    2e:30:69:4b:e5:54:6b:ca:dc:02:c1:07:3c:33:ac:
                    80:a5:38:18:ac:df:97:e1:36:fd:0a:99:c2:4f:1a:
                    54:21:6c:5f:9f:7c:bc:14:e2:bb:2f:4c:7c:33:2d:
                    09:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:52:E4:72:70:5B:55:7D:57:2D:42:3E:31:25:F8:F7:99:5B:D4:18
            X509v3 Authority Key Identifier:
                keyid:7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6b:bd:3f:8a:4d:c0:5a:7f:04:47:5b:10:1d:28:3a:78:dc:
         63:a7:1e:fd:41:2c:12:ea:3b:14:af:51:09:22:bc:26:e6:34:
         cd:ff:d0:4b:0b:80:d2:ba:3f:10:76:d5:ec:73:bf:2d:bf:9d:
         ce:c7:48:20:6f:b5:d7:23:c3:ff:46:61:20:85:67:77:41:7f:
         84:ad:ba:7e:c9:05:db:91:11:ac:d1:e1:b6:fe:86:f5:d3:57:
         9c:99:81:00:82:72:10:3e:d5:5a:90:57:30:f0:b2:3e:01:23:
         be:40:65:b7:52:2d:de:b5:39:03:81:a1:43:f8:2c:2b:e1:61:
         d8:3a:ea:67:89:e5:a5:83:cf:cc:dd:ca:9e:04:ea:09:1a:2a:
         4d:77:e8:34:87:ee:cc:e3:9a:7a:f7:6c:87:cd:66:19:3a:d9:
         f6:e1:1a:26:a1:04:3c:bc:66:b6:de:77:ae:0b:6c:e6:f1:01:
         df:5c:98:ac:d9:6f:57:fb:d5:82:32:a3:33:d9:a3:e8:8c:7e:
         44:cd:6e:fb:b8:b5:a6:84:2f:81:2c:15:37:70:0d:3b:64:35:
         55:03:2f:76:2b:de:3b:a6:0e:b5:fe:ca:21:3e:e5:9f:0d:02:
         9f:5b:dc:b8:38:e6:d7:c5:75:3e:4e:58:13:0c:a8:98:42:4d:
         d3:99:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:22 2025 by rpki-client