This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
File:                     ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json)
Hash identifier:          itVAchxQceDhop76m9ehn6OHS9RDS9BTQkJ7Kd99SeY=
Subject key identifier:   07:5F:16:CB:A0:DF:44:40:44:0C:76:83:53:87:14:A5:A5:7F:9D:48
Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E
Certificate issuer:       /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E
Certificate serial:       251C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
Manifest number:          24EE
Signing time:             Sat 20 Dec 2025 14:57:25 +0000
Manifest this update:     Sat 20 Dec 2025 14:57:25 +0000
Manifest next update:     Sat 27 Dec 2025 14:57:25 +0000
Files and hashes:         1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: d2BtB2k66giNdvgqToMxJUTKQV5s10Oin6MLL68Wjmw=)
                          2: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: /t91K13z6WAVt7TlFvUwr5tZKY0UNdGRc/y4NhFwh6I=)
                          3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: zj4FMoo2BFk+RmoPIRljJ9QowF2nkk9k+fxlmrrzCzE=)
                          4: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: zd2Mp+JliwOB/WE8I35a0tiSuKliGO1s4BV4PHkpP1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl
                          rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9500 (0x251c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E
        Validity
            Not Before: Dec 20 14:57:25 2025 GMT
            Not After : Dec 27 14:57:25 2025 GMT
        Subject: CN=6946b955-8e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:bd:eb:26:b6:0e:bf:83:e7:52:9b:bc:82:
                    2d:12:ff:71:d2:f9:6d:2f:4b:da:7d:a2:b7:99:63:
                    8e:c2:aa:5d:7b:c7:2a:e8:d6:dd:88:9e:e6:e4:45:
                    f8:5e:13:cc:ac:2f:d6:a3:9d:d4:c4:de:a4:b3:31:
                    e7:66:5f:9c:8d:64:8d:b7:b7:2a:a9:dc:72:a4:bd:
                    55:ca:97:84:a5:65:13:2d:d0:b0:f5:aa:65:18:29:
                    39:96:ff:e4:c7:d9:c6:a3:e6:c1:65:8e:fc:e1:0e:
                    44:29:49:8d:dd:38:53:b6:ed:45:a4:bb:c3:9b:e0:
                    cc:03:ae:09:f7:78:44:f0:94:1e:1e:ca:f3:d9:b8:
                    c1:00:4a:a1:b2:a6:51:6b:c1:d6:a1:ac:bb:21:8e:
                    f3:83:42:bb:84:55:2c:16:90:74:51:3d:56:36:9b:
                    c9:76:eb:35:c0:42:62:b5:40:59:5f:f0:a6:06:46:
                    2f:ee:0e:53:11:cd:92:86:4c:78:50:0f:2a:bc:90:
                    a3:86:14:f8:76:14:f4:21:84:2d:20:27:5e:e4:52:
                    95:cb:65:92:7b:3a:7a:b4:0a:b5:a7:1b:3f:0f:d3:
                    51:9d:ce:0c:7b:7f:3e:67:da:b2:69:7b:cd:ea:86:
                    95:5f:f1:c3:be:d7:1b:62:a9:58:0f:4c:92:bb:f5:
                    3e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5F:16:CB:A0:DF:44:40:44:0C:76:83:53:87:14:A5:A5:7F:9D:48
            X509v3 Authority Key Identifier:
                keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c6:8b:87:9b:f4:b9:2f:6d:14:c3:b4:24:e9:ae:ee:e2:64:
         c5:46:c8:2f:7c:e0:e0:06:13:94:42:4e:c8:e6:c9:fb:21:87:
         06:98:68:28:2f:2c:4e:86:f8:c6:3f:41:40:4a:e3:bf:93:a9:
         bc:6f:e8:1f:63:02:1d:a1:9d:bc:7b:3e:f5:69:33:5e:3f:1f:
         73:bf:a6:19:c7:1a:3f:70:f4:a2:99:e1:7d:57:c9:21:18:9e:
         1d:b3:20:11:d7:a6:3f:68:f7:f8:2b:32:ea:58:09:7d:88:24:
         a4:1d:80:d0:fb:8b:4d:7f:66:c5:99:41:15:e1:6d:2b:38:cc:
         27:b8:1c:31:ae:22:d3:3c:fe:ef:98:27:f8:f4:43:70:a3:88:
         67:0c:51:5a:90:ca:e9:c7:bf:f2:81:a7:a1:79:8a:58:78:fe:
         26:3e:24:69:c5:b1:d9:56:5e:b9:0c:48:68:20:7b:69:c5:09:
         5a:b9:85:39:04:b4:35:13:96:27:d0:ce:87:4e:9e:13:f8:47:
         4f:82:f9:2d:7a:43:d1:99:e3:89:78:ea:8a:04:01:6f:b2:10:
         bc:c2:fc:97:9d:7e:39:06:37:7c:1f:2b:e6:0f:1a:c0:a3:93:
         80:32:7e:af:19:ef:a0:ae:81:75:ee:a0:fd:76:f8:31:f7:37:
         13:c8:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:59:23 2025 by rpki-client