This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
File:                     EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json)
Hash identifier:          G/UzX8jAuld4HLNT/0OBUK3e78p3pFBA4bdpxD83vo8=
Subject key identifier:   09:B8:EE:FC:8E:D8:FB:66:7A:17:77:32:FC:00:E2:E5:F2:7F:58:1A
Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A
Certificate issuer:       /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
Manifest number:          0163
Signing time:             Fri 19 Dec 2025 03:12:13 +0000
Manifest this update:     Fri 19 Dec 2025 03:12:13 +0000
Manifest next update:     Fri 26 Dec 2025 03:12:13 +0000
Files and hashes:         1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: vRpff4Zfjhepoebvd2hJtEvIeLGWxfsGWLiUkclxOas=)
                          2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: YLouRJayszJ+YXIZjA0nYlRHirFmGMZNUS3tAUGchSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl
                          rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A
        Validity
            Not Before: Dec 19 03:12:13 2025 GMT
            Not After : Dec 26 03:12:13 2025 GMT
        Subject: CN=6944c28d-73b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:8f:45:21:45:08:9a:71:9f:d8:fa:07:00:
                    c9:e1:44:e7:f3:ba:5c:52:ec:ad:50:cd:b8:34:a3:
                    eb:c6:9d:e7:19:72:4e:8a:b7:8e:cf:96:28:84:bb:
                    4f:96:9f:a3:3b:bf:68:8f:bb:49:f4:f9:e4:9a:3a:
                    4a:b6:ca:d1:dd:e7:ea:68:5d:27:e8:cd:18:07:3d:
                    00:7f:16:51:c8:96:2a:33:04:29:c3:21:09:58:62:
                    52:ac:6e:21:0a:26:91:55:cb:86:6e:7f:5c:00:ec:
                    8d:8d:74:13:c3:a6:35:d7:62:b6:1c:14:c2:75:75:
                    8e:bc:cb:99:2c:e3:79:92:19:f7:ed:6d:26:ae:0b:
                    64:01:9d:37:ee:9d:9c:84:78:bc:59:f6:02:29:a1:
                    d1:f6:20:a9:0d:e4:45:95:7e:d5:32:51:03:96:f1:
                    eb:a2:84:a4:a7:54:7d:36:ed:64:50:d1:21:86:e8:
                    4d:16:0e:43:32:68:81:20:f9:19:cf:79:6f:8f:8b:
                    30:bb:6b:fa:94:98:e4:d3:93:33:8e:05:ed:c8:a4:
                    ce:6d:1b:ec:91:b9:68:8d:9c:1d:74:ce:f6:45:aa:
                    f2:1a:fd:f5:7c:05:c0:be:89:c4:17:c3:ee:45:eb:
                    d9:c7:55:8b:5d:18:27:aa:f7:2d:cf:99:15:a4:18:
                    56:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B8:EE:FC:8E:D8:FB:66:7A:17:77:32:FC:00:E2:E5:F2:7F:58:1A
            X509v3 Authority Key Identifier:
                keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:22:83:e4:67:c9:6c:8d:b7:96:1c:b1:2d:05:64:41:b2:15:
         5a:ab:e0:c1:fd:46:39:31:73:ac:0d:ac:bd:d2:b1:7e:9b:e7:
         08:7c:c3:77:be:68:a6:d0:47:62:0c:ca:e8:f1:f3:a8:34:8f:
         d8:e6:ca:76:db:c8:44:23:27:be:cc:9d:de:0f:4e:a7:1a:ba:
         44:12:a5:a1:e7:73:ab:97:b3:5e:ad:15:d2:b9:43:13:49:f6:
         a0:ad:e1:d8:89:8e:ff:47:09:85:cb:ae:cc:e1:44:1e:4a:6a:
         d9:38:c9:41:60:05:4d:4f:09:af:5e:53:6d:f0:f0:a3:0e:d7:
         ec:8f:b4:ef:42:ff:93:e2:34:a9:3a:09:cb:d9:9b:e6:5c:c9:
         8e:f6:e4:de:20:5d:32:94:58:51:6c:ef:5a:b8:0b:c8:7c:1a:
         2c:01:d0:4a:92:8c:f2:5e:5a:43:ec:f7:be:c8:67:9e:2c:ff:
         53:96:97:f1:e6:1f:31:25:51:85:cf:05:4a:a2:52:b1:b1:f5:
         91:8c:20:df:8b:53:92:ac:36:6b:f3:1a:76:06:68:4e:45:d7:
         36:0a:78:6a:b4:98:23:b4:f7:53:e5:af:31:d1:73:a8:6c:9f:
         57:fd:8a:5e:cd:d8:7a:43:ac:ac:ad:4c:42:ea:39:c2:5b:ee:
         d3:88:ff:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:54:42 2025 by rpki-client