This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
File:                     5tdlUVTja2lxFXTiB5a2gCxDtxU.mft (raw, json)
Hash identifier:          7PFopGTUI0Qc860ecBxnC0zdZJfU7OZjaSDasPwejkE=
Subject key identifier:   DE:9B:D9:1A:D5:0F:CD:FA:59:DF:BA:D0:88:8E:28:14:E4:29:4B:8E
Authority key identifier: E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15
Certificate issuer:       /CN=A9118EDB/serialNumber=E6D7655154E36B69711574E20796B6802C43B715
Certificate serial:       0541
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
Manifest number:          053B
Signing time:             Thu 04 Dec 2025 22:04:41 +0000
Manifest this update:     Thu 04 Dec 2025 22:04:40 +0000
Manifest next update:     Thu 11 Dec 2025 22:04:40 +0000
Files and hashes:         1: 5tdlUVTja2lxFXTiB5a2gCxDtxU.crl (hash: OODNlsfkLh5pcJ8igRi8xo4WkRS7iYXiTJIp/gdqN7Y=)
                          2: BA4D01561DE011ECB872BC27C4F9AE02.roa (hash: wf1/Eq3D00+NNmg7EFhhzne2/Whu9vsX8s0Y7UfB8bU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl
                          rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118EDB, serialNumber=E6D7655154E36B69711574E20796B6802C43B715
        Validity
            Not Before: Dec  4 22:04:40 2025 GMT
            Not After : Dec 11 22:04:40 2025 GMT
        Subject: CN=69320578-2054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:23:24:52:48:cb:10:3b:64:9b:10:40:fc:
                    09:4d:e1:32:10:1a:76:20:de:67:93:73:36:ea:c6:
                    fe:dd:fe:38:ad:83:83:c6:9a:cc:e5:b2:42:15:43:
                    80:d6:23:63:a6:f4:b4:4b:33:0c:07:d5:ec:69:90:
                    c1:e8:0b:a1:82:00:73:bf:a0:64:39:3c:7d:9d:68:
                    7e:e4:7a:47:97:50:b9:bb:bf:f5:30:78:f2:2d:a3:
                    f2:e2:54:71:16:27:3e:c6:a2:39:1d:a7:95:09:1b:
                    fc:e0:ef:44:59:9f:37:0a:8e:75:db:b8:49:02:92:
                    30:20:3f:71:bd:b7:59:4c:2b:cd:8e:29:55:1c:41:
                    f2:d5:a9:9c:98:0e:0a:20:d6:28:e7:8c:2f:2c:da:
                    ef:38:92:21:14:80:8d:ec:23:94:e8:77:93:79:84:
                    60:58:fd:fc:51:f6:9c:a2:ab:de:de:52:42:29:54:
                    12:23:ae:91:34:b1:ee:fc:be:a0:71:35:d6:43:2a:
                    b4:18:18:a4:41:a5:a9:a9:26:87:94:94:b6:ba:76:
                    79:90:12:11:3e:60:6b:58:d5:0d:f7:09:23:3d:69:
                    fd:76:89:0e:3d:c4:45:ec:e4:10:c5:da:b1:45:2c:
                    87:2a:3d:12:c6:93:06:18:73:b7:c9:49:bc:e5:0c:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9B:D9:1A:D5:0F:CD:FA:59:DF:BA:D0:88:8E:28:14:E4:29:4B:8E
            X509v3 Authority Key Identifier:
                keyid:E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1d:65:53:54:7b:d2:20:de:52:87:91:b5:d5:44:48:bd:09:
         5c:80:4c:22:68:73:83:ae:f8:c2:2c:1d:51:37:5e:d2:72:ae:
         61:2c:1c:1a:2d:67:27:f1:80:c9:22:64:a1:b5:67:9f:e9:bb:
         47:0a:32:bc:bd:d4:ae:65:62:b9:d9:e9:09:5c:d4:7a:54:36:
         b6:13:4c:80:97:42:5c:af:d9:67:a3:49:6e:4d:26:0f:c8:a9:
         2b:50:10:3b:5b:a5:50:14:05:a5:0c:77:6b:08:84:04:ea:6e:
         e2:f7:90:96:9c:b5:88:0d:dd:fb:a2:a8:8d:d9:97:45:f3:c9:
         f5:d9:06:45:18:82:77:c1:a7:21:c5:6a:0f:37:07:c3:3a:cb:
         3a:09:1f:7e:78:38:be:a0:26:83:78:d6:2c:ea:c2:d4:91:b5:
         b5:9d:7b:d3:e9:55:a6:71:8b:ef:ad:6b:34:da:9a:b5:3b:86:
         d4:f9:7c:a5:54:1c:35:c5:e4:56:8f:64:f6:c1:6e:e7:fa:a7:
         1d:41:a0:58:e7:04:33:a7:d5:7c:a9:ff:7f:49:97:61:dd:8a:
         43:00:ff:08:ca:81:89:ac:3a:b8:67:f0:84:a0:6e:5c:77:e7:
         46:b5:25:db:d6:ad:16:56:80:f9:8b:23:63:96:f3:b4:68:88:
         38:16:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:00:05 2025 by rpki-client