This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
File:                     EEjCfhFLkRMVXq68kL7G3YD4xss.mft (raw, json)
Hash identifier:          8v216WyNIV5exitVtt3hewDU+feqKN7MMKWv+7gfqPg=
Subject key identifier:   74:E3:21:6D:DC:6A:50:73:69:D1:0C:4A:93:58:0B:52:2D:86:79:92
Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB
Certificate issuer:       /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
Certificate serial:       06B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
Manifest number:          06AD
Signing time:             Thu 18 Dec 2025 21:40:17 +0000
Manifest this update:     Thu 18 Dec 2025 21:40:16 +0000
Manifest next update:     Thu 25 Dec 2025 21:40:16 +0000
Files and hashes:         1: EEjCfhFLkRMVXq68kL7G3YD4xss.crl (hash: 8ukcpGXzP3Jl9XbmgpFOrEVJWSU+Fdo9Dbh3lkqilO0=)
                          2: 5F506D7C8C7911EBB7E88620C4F9AE02.roa (hash: AgY8IbFur1Q4oa6eGF7ycAtrRQlqnrORaZ4AABeYzt4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl
                          rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E08E, serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
        Validity
            Not Before: Dec 18 21:40:16 2025 GMT
            Not After : Dec 25 21:40:16 2025 GMT
        Subject: CN=694474c1-dc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:67:46:d0:c2:5c:88:bb:da:05:0e:3a:59:
                    67:0c:9f:93:08:50:b5:f2:53:4a:c3:65:0e:8b:77:
                    fd:a7:45:d8:dd:96:55:5d:8f:14:da:22:84:ae:a0:
                    bc:2b:9c:18:20:a5:90:b3:ff:24:5f:97:18:66:04:
                    76:9c:1f:d1:b7:44:65:8e:5b:e8:0c:eb:a2:38:b1:
                    06:1a:44:ad:8f:5e:61:91:e1:57:9c:5e:69:1e:fe:
                    fb:8c:99:5d:b6:bd:b6:89:25:65:91:c2:11:2e:b1:
                    f6:10:7b:77:94:00:20:aa:a8:bb:82:0d:07:a0:10:
                    c3:4d:fa:58:cf:63:97:f5:15:29:63:e5:fa:42:9b:
                    0d:fd:4f:9b:f5:1b:9f:0a:40:22:ae:10:2c:2b:5c:
                    ee:23:d5:95:dc:d1:28:44:1c:fd:7f:c9:33:83:ce:
                    f9:f8:14:33:14:9f:51:b2:bd:dd:30:e3:a1:8c:25:
                    d8:ec:ab:86:af:9d:f0:f7:ea:44:ce:03:7d:62:d5:
                    11:5e:89:2c:bc:ec:08:80:27:be:6e:81:91:b2:40:
                    4c:97:ca:4c:9f:30:a9:15:c0:b3:47:ec:e3:a3:60:
                    d1:f3:2f:a7:fc:fc:ae:d1:f0:c2:e4:a6:f3:52:c6:
                    a8:42:43:cd:be:82:d6:e7:01:0a:63:cc:c5:96:43:
                    18:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E3:21:6D:DC:6A:50:73:69:D1:0C:4A:93:58:0B:52:2D:86:79:92
            X509v3 Authority Key Identifier:
                keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:1e:e8:8e:2b:aa:70:d7:b9:63:9f:97:fa:35:0b:4a:4d:91:
         9a:71:e0:5c:0b:96:25:20:0d:e4:5f:cf:e9:9a:80:99:9a:b7:
         4b:5f:00:6f:26:f8:73:c4:50:08:b8:53:6f:05:f8:68:8b:4e:
         e1:3a:05:e2:9f:b4:d2:a4:56:55:99:c4:a1:ef:86:82:9b:56:
         b4:f2:e7:be:a3:dc:2d:96:ed:21:11:00:db:cf:0c:a8:ff:22:
         55:23:29:a0:96:68:52:86:41:73:8a:c7:2b:73:a4:6c:2a:18:
         89:85:8f:6e:10:be:2a:b0:18:25:45:7f:18:f5:77:30:bf:da:
         70:b6:ba:c2:8b:be:33:f0:d1:57:51:99:fd:65:9e:d0:72:fb:
         75:ab:9a:c4:ee:1f:f0:fe:87:4d:bb:5d:31:db:10:ba:0f:6a:
         49:95:dc:4b:a5:14:e5:7e:d0:36:aa:66:b9:7b:bb:d6:92:bc:
         f4:04:89:37:c8:b6:f1:31:bd:97:f7:93:3c:fd:77:3b:06:50:
         48:00:fa:ed:17:8b:e1:f4:ef:22:fe:3a:a5:f4:61:52:ba:32:
         88:5a:dc:0c:90:3d:fb:95:83:8a:82:f8:60:b5:ab:50:63:bb:
         47:5a:e4:a6:11:51:5b:f3:58:ba:eb:13:82:f6:ab:6a:6d:d5:
         55:b6:4b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:52:40 2025 by rpki-client