This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
File:                     enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json)
Hash identifier:          r9nUESHJwRYlivOmsQVNczu+3vjLLpy/S9uM0id9Xp4=
Subject key identifier:   C6:59:FB:5A:68:08:E0:A6:99:3B:A6:B6:E2:A9:5C:3A:23:38:1F:15
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Certificate issuer:       /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
Manifest number:          6E
Signing time:             Tue 23 Dec 2025 05:48:51 +0000
Manifest this update:     Tue 23 Dec 2025 05:48:51 +0000
Manifest next update:     Tue 30 Dec 2025 05:48:51 +0000
Files and hashes:         1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: wM1N7HuKQjz55CvBegeiA4XKNSbugQBAKVORnQfMG5o=)
                          2: 27D35A2A7CFD11F0A33DEA21C4F9AE02.roa (hash: WMBMTYm4zJmJb6l3lGaR3MIPCoKpE7rld4fHZdKyhLk=)
                          3: 28BB8F3E7CFD11F0A33DEA21C4F9AE02.roa (hash: r4KaPqqtCXW7b+8GzlZoQ18nPDvw2xoi898WdJXVWq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
        Validity
            Not Before: Dec 23 05:48:51 2025 GMT
            Not After : Dec 30 05:48:51 2025 GMT
        Subject: CN=694a2d43-6c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:fb:08:c8:e1:1a:1c:10:81:21:e8:23:c9:
                    f8:2a:8f:c0:ab:80:b0:52:f3:f4:39:7d:6f:4b:1a:
                    d0:10:e5:b5:66:66:f9:49:f4:58:8c:89:9a:9d:1b:
                    ef:0e:9a:a0:6b:da:aa:ea:88:8b:6d:4a:26:e7:d4:
                    cd:0f:ae:57:be:19:f0:2f:f6:4e:df:ef:24:73:d2:
                    4b:9e:e5:85:fc:3e:02:18:67:dd:78:70:79:74:3d:
                    66:2a:43:7f:10:0a:0c:2f:e8:f9:cd:ec:a1:72:ae:
                    65:fb:3c:9f:64:dd:ef:3c:ce:dd:37:19:ee:db:78:
                    14:cc:ed:c8:f7:bc:42:84:ed:de:34:36:1c:db:a1:
                    65:b6:cf:f9:08:07:ed:43:a5:b3:79:f0:51:3a:a3:
                    3a:0b:f0:85:46:b1:06:88:78:86:44:06:d5:28:83:
                    09:f4:70:82:8c:b5:f8:ee:de:e9:f5:e6:d7:90:41:
                    7e:54:23:21:c9:b7:e6:a9:02:7a:8e:ef:99:36:f0:
                    b4:65:bd:19:eb:e2:4a:f6:88:05:8b:16:dd:74:aa:
                    ba:54:c2:03:ed:7e:1b:74:8a:71:95:1b:be:32:13:
                    e4:f2:31:fb:7a:b5:24:31:78:a6:3b:e5:3a:2b:99:
                    c0:37:6e:35:34:13:dd:9c:d3:83:5a:49:e8:e7:67:
                    b6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:59:FB:5A:68:08:E0:A6:99:3B:A6:B6:E2:A9:5C:3A:23:38:1F:15
            X509v3 Authority Key Identifier:
                keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ef:c0:50:5e:ac:ad:95:84:86:c7:35:6d:8b:57:bf:25:fd:
         7e:76:8d:56:19:c3:64:ab:c2:33:7b:d3:53:b0:3b:5e:d0:77:
         04:a3:ce:de:2d:98:b5:a3:d8:c0:eb:71:b6:07:5c:e6:ec:36:
         63:d1:ce:26:3d:ed:8b:58:97:82:98:22:7e:23:ae:0b:b9:9b:
         87:b5:df:f0:82:9a:57:af:2b:74:4f:e0:6b:c7:00:61:a2:0d:
         c1:cf:f8:4b:21:54:2a:7a:e0:42:2a:25:c5:f8:23:d5:ed:7f:
         87:1b:f5:b0:0f:ac:5d:94:28:ad:63:c2:43:10:31:cf:1a:bf:
         9b:62:a2:84:2d:97:55:f7:ee:b7:33:72:5b:f3:db:21:7c:4b:
         67:37:17:dd:c3:09:75:90:2e:dd:55:af:83:23:34:0c:00:0d:
         e5:e7:61:bc:e8:5f:e1:03:5d:5d:20:f0:8a:11:cb:98:dd:f3:
         2a:52:fb:88:bf:ed:c3:dc:ee:2e:54:65:f4:46:66:51:89:41:
         a4:d8:3c:6a:b6:c1:72:08:3a:fc:0b:57:e9:15:24:fc:df:62:
         97:da:ed:0a:2c:cb:0b:66:24:95:88:95:a9:1e:53:29:4b:51:
         7b:59:42:04:e9:01:61:4c:bf:f3:26:81:48:2d:c6:c3:86:f9:
         f5:78:a2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 13:10:35 2025 by rpki-client