This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
File:                     l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json)
Hash identifier:          TCpdKA9VlUCgVzspMqMQjuv1JfU1DFYYGAl+2V0tnXg=
Subject key identifier:   3B:46:DE:FF:5A:3A:81:43:F6:E8:F9:9A:AE:9D:95:67:F0:F4:25:88
Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
Certificate issuer:       /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
Manifest number:          01EE
Signing time:             Sat 27 Dec 2025 01:45:49 +0000
Manifest this update:     Sat 27 Dec 2025 01:45:49 +0000
Manifest next update:     Sat 03 Jan 2026 01:45:49 +0000
Files and hashes:         1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: J67Nu6HLx9SLhFHVA38e30W+BFTBB7jD31DmFB04Nbc=)
                          2: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: gvjJNiO9vqYIhsYjJBaQQlt1G1Z/kYCgfliXikgsWHQ=)
                          3: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: ROkkzatt5V9Pz+AtU25/WOuwZ/bxAOBTVtr/gp1mTRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
                          rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 01:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
        Validity
            Not Before: Dec 27 01:45:49 2025 GMT
            Not After : Jan  3 01:45:49 2026 GMT
        Subject: CN=694f3a4d-0161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:35:f8:6a:3b:0a:9c:20:91:91:8f:98:cf:
                    51:5b:8a:a3:57:49:2f:62:1a:47:bc:a2:e0:15:98:
                    4d:fd:28:59:85:f8:b2:bf:6f:ce:c1:7b:d6:8a:d8:
                    2f:5b:37:80:86:12:39:ae:43:9b:45:46:bd:f2:42:
                    29:4c:19:e7:90:db:6a:e5:37:1e:98:2c:a3:27:cd:
                    81:33:bc:fa:0c:8e:3c:12:86:5c:e1:3f:1b:f2:dd:
                    ce:fb:69:4d:f5:37:2f:1f:24:64:47:05:7e:ba:15:
                    32:aa:88:6c:44:f1:75:db:69:fb:ad:8a:e4:c5:12:
                    8f:99:e0:d1:df:7c:24:c9:7e:22:e4:62:64:a8:fb:
                    be:80:ad:74:6f:fd:79:d6:6c:97:23:90:27:4b:14:
                    c8:2b:4f:32:da:a0:86:1b:f7:5c:51:fc:85:77:0e:
                    1b:97:a6:90:fb:f3:7d:1a:be:01:45:dc:a1:54:c8:
                    20:b4:7f:b5:a4:e0:d2:c8:6c:bb:84:08:60:7d:2b:
                    64:ff:c7:49:e0:2d:89:07:87:fb:5d:bf:a9:80:83:
                    f4:bf:37:5b:92:3e:b5:62:57:bf:6e:9e:00:2e:01:
                    bb:02:a6:37:8e:5e:fe:ad:6b:9a:a3:85:3b:e1:85:
                    00:61:0d:7c:ce:13:46:63:60:09:4f:d2:ba:f2:37:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:46:DE:FF:5A:3A:81:43:F6:E8:F9:9A:AE:9D:95:67:F0:F4:25:88
            X509v3 Authority Key Identifier:
                keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:11:aa:41:45:29:13:f2:cc:66:3e:ce:2c:18:2b:3f:c5:01:
         87:71:3f:17:a9:36:79:48:b6:80:29:33:b7:7e:0c:0d:d9:98:
         28:42:81:76:55:a8:74:73:e7:14:b6:f7:1c:47:9f:29:c3:f5:
         52:23:da:cc:91:28:ab:c3:00:c9:4a:2e:ae:8a:1e:97:78:2a:
         06:97:d1:4b:1d:b7:3d:83:25:74:2a:de:59:48:36:bc:1b:1b:
         f8:c3:00:98:da:0c:ab:81:89:38:83:e1:9e:1c:8c:ce:35:a9:
         a4:9f:09:50:7a:c9:01:bf:eb:20:84:44:80:98:bf:04:f6:fc:
         57:33:51:68:9d:59:fc:58:4c:ce:dc:71:8e:34:50:b9:fa:7b:
         02:89:d6:6a:ad:02:b1:f4:15:0c:8c:f5:81:c1:16:07:75:3b:
         74:5e:2b:0d:7c:7b:f8:ab:ab:c9:08:d5:87:08:25:56:c7:3d:
         5e:e6:d4:7a:09:1b:74:4a:06:a0:9d:94:31:85:1a:8a:9d:6f:
         f7:dc:01:50:18:9f:90:23:07:da:48:7c:83:33:ab:d0:1c:c1:
         64:19:32:d2:e6:ec:67:59:f8:8c:b1:e6:d6:41:13:2f:2e:44:
         1b:1c:50:f7:10:01:17:d5:20:1a:83:4c:a8:14:35:55:0d:f4:
         7f:c9:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 05:52:57 2025 by rpki-client