This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
File:                     5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json)
Hash identifier:          PDm8jBDXsEx7N/cias0rEJzQdT1poSIMvOcV2bQA7co=
Subject key identifier:   66:E2:13:2F:83:1C:5C:32:3E:EB:C6:AF:7A:23:14:F4:AA:44:EC:0E
Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
Certificate issuer:       /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
Manifest number:          01E3
Signing time:             Fri 05 Dec 2025 00:57:10 +0000
Manifest this update:     Fri 05 Dec 2025 00:57:10 +0000
Manifest next update:     Fri 12 Dec 2025 00:57:10 +0000
Files and hashes:         1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: S0k+VQL+akaUibNXWXnlZbzIJAJCr+CK5UQckqM+AEk=)
                          2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: HWnaY2EEm6u/FMZ1I67pi/PyglY7//JccNuuPPpBYpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl
                          rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115122, serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
        Validity
            Not Before: Dec  5 00:57:10 2025 GMT
            Not After : Dec 12 00:57:10 2025 GMT
        Subject: CN=69322de6-200c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:31:ff:06:93:04:25:5f:be:50:a4:dd:e7:
                    56:9e:d2:55:59:05:fb:59:2a:b7:e1:b0:80:9b:d0:
                    7f:84:f7:08:3f:9e:56:2a:fd:15:92:05:a9:ed:28:
                    9a:28:7d:89:3d:c5:08:fb:16:9b:63:bf:b0:34:05:
                    f5:0f:7f:42:7a:6f:84:17:b2:46:80:7b:a7:27:92:
                    e3:72:c7:7a:b1:c0:17:1f:ff:62:98:1c:e4:7f:44:
                    e7:79:de:b6:36:b0:6c:8d:14:db:f7:d2:32:d8:8b:
                    d0:1d:86:e2:01:86:80:c2:60:f3:c4:95:20:a7:e2:
                    db:64:bc:a7:78:67:c1:a4:74:09:ac:8d:fc:9e:04:
                    dc:9e:f4:3e:7a:91:17:0d:7c:55:21:45:ee:a7:b6:
                    19:c9:24:a0:63:2e:14:b5:5e:b3:b8:13:a7:98:0a:
                    16:18:86:79:62:e5:56:a9:30:f3:94:49:74:d0:64:
                    9e:ac:67:ed:0a:54:cd:86:cb:3f:0a:a3:f7:ab:f3:
                    43:a3:2f:19:d1:5a:85:f5:6d:1c:f8:af:36:de:ad:
                    a1:62:e1:4c:46:6f:50:ce:3a:76:10:42:c3:b9:d7:
                    54:03:22:8f:b2:8e:c3:8d:0c:2c:e7:88:ec:fd:cd:
                    60:40:a2:60:e8:20:84:33:93:14:47:71:3a:0b:7b:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E2:13:2F:83:1C:5C:32:3E:EB:C6:AF:7A:23:14:F4:AA:44:EC:0E
            X509v3 Authority Key Identifier:
                keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6c:e2:45:2f:31:b9:d3:68:22:11:68:23:50:0b:47:65:b0:
         84:a7:f6:36:76:4f:16:f6:c5:a0:0a:f0:7c:68:3a:41:dc:2e:
         fb:fe:52:30:41:65:e1:5c:ed:05:e9:31:17:79:c5:6d:d8:ba:
         ac:4d:86:1d:5c:57:dc:d1:43:65:0d:db:46:ee:48:d6:7d:25:
         8a:fe:0e:d6:3f:0b:37:d6:de:5b:57:d0:89:ef:ff:61:ef:c6:
         68:33:bb:e1:fc:0b:83:88:64:d7:e4:bb:e9:f8:bc:5c:7d:91:
         7c:5e:12:0c:9a:9f:d1:38:1c:9b:08:5d:e7:bd:0e:9b:31:f9:
         bb:4f:e0:05:e8:b7:73:e8:43:15:11:11:a4:24:1d:64:87:fa:
         fb:62:87:86:ba:59:12:da:39:a8:6c:42:e0:34:c4:d1:e1:a4:
         dc:dd:c5:22:53:de:d6:6a:3f:67:31:b6:e7:32:c5:da:91:e5:
         45:44:ce:1e:5d:7e:55:a8:28:dd:e0:a8:49:af:8a:a2:50:12:
         ac:29:37:0d:6c:1e:97:32:8a:4c:e3:2f:bd:2c:62:04:86:10:
         68:73:84:6f:b0:d4:73:48:06:af:b6:ef:fe:6e:f8:bc:e5:5e:
         6b:56:23:44:1c:98:a5:5e:da:99:16:42:65:f2:9b:e1:cf:9d:
         6d:8a:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:44 2025 by rpki-client