This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          L0ySjfP7s42++ZvoQIs457RcjPaeH7HtnacSdmLvRZc=
Subject key identifier:   05:BE:3A:73:BA:C5:80:62:4D:15:F6:C1:9E:25:CA:08:59:4E:D2:15
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       354D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          351E
Signing time:             Thu 18 Dec 2025 14:30:36 +0000
Manifest this update:     Thu 18 Dec 2025 14:30:35 +0000
Manifest next update:     Thu 25 Dec 2025 14:30:35 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: ewcPMSXTnpyAirQF0nB8MuahmkwMsP7/y9FRC5KW2Ic=)
                          2: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: sRvMLmzA3faCvCgnj9Kc1Nyq/athaxPg1qdQG6qTSjA=)
                          3: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: CUUb/coZVwybMNB3Q6DnZxhNxSXx7mieErXaIHIRyww=)
                          4: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: pLIkppbdFI2Dvba2mWRCPANXKzDe4Q3IfvnPWtwGOsc=)
                          5: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: gkYrWkhbDnSZnPzaW3pf3edvz0FUTHjNjGt5hZNgUcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13645 (0x354d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Dec 18 14:30:35 2025 GMT
            Not After : Dec 25 14:30:35 2025 GMT
        Subject: CN=6944100b-5559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:b6:22:c7:68:9d:06:95:2a:19:27:8a:98:
                    84:59:1b:be:a2:2c:95:14:76:f5:8f:38:09:c6:d4:
                    ee:ef:84:bc:31:9a:71:82:d9:2d:b9:63:46:bc:6c:
                    68:36:ff:56:3d:90:65:6e:fe:50:d2:84:14:e4:6a:
                    c0:cc:eb:76:23:93:99:20:03:b7:40:38:b8:3f:ec:
                    b4:e6:20:e9:bd:16:5c:0c:54:e1:a4:ed:52:39:88:
                    6c:49:21:90:a5:06:74:8d:73:c3:44:78:72:6b:f4:
                    4d:d2:09:b2:8d:22:6a:52:60:f5:70:3d:e5:fc:58:
                    4c:6c:44:a6:76:ec:34:6b:1b:af:01:4d:4f:e6:2d:
                    bb:5f:92:16:d0:21:b6:55:59:0d:9e:d3:16:e3:83:
                    9c:93:05:94:cc:0e:82:a0:18:55:2b:f0:06:0d:22:
                    b3:4b:10:0d:8d:f8:5b:4a:f7:cb:3e:5d:4a:a5:45:
                    c1:15:c2:37:3c:70:cd:84:11:ca:dc:6f:99:c0:d6:
                    bc:6b:87:ac:4a:19:66:b9:fc:81:2f:20:0c:35:5e:
                    de:6a:0c:cb:8a:2a:99:38:93:37:1b:62:3d:2a:5c:
                    06:b2:1b:36:48:5f:cd:e2:8e:b9:25:51:bb:8d:00:
                    49:1d:3a:ca:27:c2:67:43:72:ad:f5:6b:e8:73:cd:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BE:3A:73:BA:C5:80:62:4D:15:F6:C1:9E:25:CA:08:59:4E:D2:15
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:16:a9:09:4c:60:55:82:46:68:53:88:d7:3f:0e:5a:f9:61:
         18:14:f8:28:4f:c7:3f:08:69:ce:5f:ca:23:a0:53:53:d0:cd:
         36:17:dd:a1:50:a1:66:47:8e:26:a9:06:e4:fc:ab:fa:73:1c:
         0a:28:35:4a:63:fa:5b:3d:e7:6e:27:49:de:61:3e:6a:93:96:
         a7:0e:28:9d:38:09:51:06:be:40:f5:e1:fc:61:8c:a7:44:66:
         71:d0:9b:72:2c:c3:a2:76:43:71:c6:51:e1:b8:d4:c9:10:d1:
         b8:84:5f:bd:e8:3e:0e:3b:ce:1c:1e:4a:e9:9c:6b:8c:8c:ff:
         89:2e:65:cd:7b:c0:85:1f:50:d6:80:dd:fc:55:86:ee:a0:88:
         f5:31:1e:66:63:cf:bd:61:39:d8:46:73:7f:ff:7e:bc:79:4d:
         1e:42:35:ef:e7:6d:11:93:64:f8:7a:f1:39:df:13:58:68:21:
         80:7e:72:d0:c1:32:97:26:af:00:2e:e7:20:84:7b:37:32:f4:
         df:93:2d:72:b3:ae:2d:7b:96:ae:58:9d:f4:8c:53:b1:0e:c7:
         31:dc:d4:25:ff:86:05:52:10:9a:ed:71:44:bb:3f:86:93:67:
         1f:3b:64:72:b3:06:a0:16:82:32:5f:d6:6e:79:28:e0:ef:82:
         6d:60:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:44 2025 by rpki-client