This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
File:                     e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft (raw, json)
Hash identifier:          z1PtoDi4Z3zEtiN16ewHGziQst4p1r10yCdHfICMhiU=
Subject key identifier:   13:EE:66:F0:4D:23:0D:6C:AC:44:9A:EB:22:E8:27:01:AC:F8:19:93
Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88
Certificate issuer:       /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
Manifest number:          0163
Signing time:             Sun 21 Dec 2025 03:12:48 +0000
Manifest this update:     Sun 21 Dec 2025 03:12:47 +0000
Manifest next update:     Sun 28 Dec 2025 03:12:47 +0000
Files and hashes:         1: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl (hash: 9yS3UqIO1yXa6jBkpM35p/hZNbfScq+V8mQd/XUy1Xw=)
                          2: 4CC50DB2BB7811EE9416DD42C4F9AE02.roa (hash: zPBkBX8TSXO+DP7kaXxBDzxvo14LuZd67QJ/cyraKFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
        Validity
            Not Before: Dec 21 03:12:47 2025 GMT
            Not After : Dec 28 03:12:47 2025 GMT
        Subject: CN=694765b0-7f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:d6:3a:41:fc:2a:0b:30:03:c4:1e:c7:75:
                    8a:41:f6:7a:67:30:93:f7:b9:fa:3c:af:55:dd:29:
                    08:f4:83:e3:61:fa:bb:ed:ac:15:5c:9c:04:d1:19:
                    ea:67:28:02:2c:fb:04:d4:c1:bd:a6:89:08:64:30:
                    79:00:7b:62:cf:06:56:34:d7:90:ad:e1:64:8e:8e:
                    1a:f0:62:a0:c4:68:fc:95:08:46:13:ea:3e:ad:5f:
                    c7:7c:d4:c3:33:7c:64:7c:a0:6d:28:2c:14:8d:2d:
                    ae:06:79:fe:fa:73:af:56:35:ab:12:a5:40:e5:5c:
                    c1:d1:4a:b1:6a:83:b9:e9:2b:5d:4f:34:4c:f2:2e:
                    72:84:91:cf:cc:cf:a4:c0:43:21:28:ba:93:2b:15:
                    e7:6b:50:0e:2f:21:1b:71:69:06:46:1e:6f:6c:16:
                    2a:b2:04:23:16:2e:26:dd:1d:2e:39:63:7f:b3:d6:
                    aa:da:5f:ba:b4:6f:f0:5e:dd:76:c7:d0:c2:2d:65:
                    fd:b5:0a:8f:91:02:19:99:fe:5a:89:4f:3c:7b:df:
                    bd:d4:3b:e6:c3:37:ac:73:74:83:a9:a6:87:c6:1b:
                    d2:0f:ba:f2:a1:81:aa:fd:69:12:ed:43:01:cc:72:
                    c4:3f:ee:ea:96:b6:9d:b0:22:58:16:7e:cb:75:f7:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EE:66:F0:4D:23:0D:6C:AC:44:9A:EB:22:E8:27:01:AC:F8:19:93
            X509v3 Authority Key Identifier:
                keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2c:1c:62:24:11:41:22:8a:31:b5:d8:de:46:09:e1:07:72:
         28:db:e0:8f:da:fd:ef:85:60:02:f7:b2:1e:14:ca:29:ae:5f:
         4a:53:72:be:a0:ad:31:e4:51:2c:bf:16:18:7c:cc:6a:7e:11:
         26:39:de:b3:2d:18:94:ad:a4:99:71:0f:a7:d1:1a:9a:92:65:
         d8:91:e9:18:53:48:ab:bb:b3:8e:14:c4:78:14:03:30:6c:87:
         05:e4:b2:7b:12:18:cb:1a:a1:dc:d5:14:01:d8:1b:bd:74:2a:
         0b:ca:86:a5:37:52:c8:38:ca:bf:a8:77:53:bf:fe:e5:08:2e:
         59:8a:a9:42:40:3b:44:9f:0c:0e:44:94:9b:ec:44:cf:e4:bd:
         28:be:3e:18:fb:8d:74:c8:0b:5e:7d:e5:03:ab:e4:57:65:27:
         2b:4d:36:83:f5:f4:39:85:9a:d7:df:d4:eb:c3:f3:0d:5b:ed:
         71:71:0c:ee:ec:7f:17:87:2e:61:59:e1:f4:57:4f:cf:ed:47:
         13:96:a4:ce:16:16:b9:ae:bc:e9:3b:cd:61:6e:19:93:26:56:
         93:8d:ae:78:9d:b0:e2:95:2b:71:6d:17:04:37:1b:7a:35:18:
         10:c2:6b:04:ae:cf:57:03:01:0f:eb:ef:49:e3:58:91:93:c3:
         10:4d:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:01:20 2025 by rpki-client