This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
File:                     keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json)
Hash identifier:          +rTqUC77bCvzilo8BhBh7VDw5iNlEkecdcf53Jt2PbI=
Subject key identifier:   63:0E:0F:62:2F:59:01:6E:67:FE:7C:BF:EF:4D:AE:53:86:2D:76:DF
Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
Certificate issuer:       /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Certificate serial:       051E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
Manifest number:          0512
Signing time:             Sat 06 Dec 2025 22:24:12 +0000
Manifest this update:     Sat 06 Dec 2025 22:24:12 +0000
Manifest next update:     Sat 13 Dec 2025 22:24:12 +0000
Files and hashes:         1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: qwhIkap/FAYW4spQJT4WEUl2wJcsLK26qvhTwPttlzU=)
                          2: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: BHc0YO4uerOV3pChxVjG7O544zd2LrVw+gOJhxCdrB0=)
                          3: 1295B5943FA611EF94664041C4F9AE02.roa (hash: FuWrvkmDIg3mxhyAWWbi/ukBRQacmBTwsE71FX0nX8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
                          rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
        Validity
            Not Before: Dec  6 22:24:12 2025 GMT
            Not After : Dec 13 22:24:12 2025 GMT
        Subject: CN=6934ad0c-7b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:0c:1b:81:0d:a6:e7:0d:40:2b:27:51:ee:
                    6f:8e:43:f5:88:ba:5d:5f:0d:9f:97:de:3b:0f:af:
                    e9:1d:4c:48:2d:8c:73:d4:3f:36:a4:63:4c:05:5b:
                    b7:a4:26:46:5f:cd:4b:a6:24:a4:ab:59:bf:be:35:
                    2f:53:12:4b:2b:30:71:1e:f3:c3:66:60:7e:e9:dd:
                    f1:6e:75:d1:8f:fd:eb:2c:36:56:82:b7:c9:ad:4f:
                    59:8d:75:00:98:84:4a:4c:e3:d0:94:65:8b:39:73:
                    fc:52:67:73:28:8a:1b:70:f8:4f:9d:a8:99:07:e9:
                    aa:11:24:2c:ff:ac:5e:29:8c:33:d3:b8:00:62:ec:
                    ce:58:34:c3:d4:2e:90:e9:1a:f0:6e:e0:f6:eb:06:
                    bc:5b:1a:ef:9d:7c:0b:c1:5f:e8:31:ec:d3:11:a0:
                    58:c8:f0:e9:a6:67:d9:ef:08:b7:d0:2d:b9:13:76:
                    2a:7d:3f:c0:0c:cc:4a:66:f6:05:91:7f:d9:2f:d2:
                    cc:17:15:51:58:5a:2b:3a:8b:3a:e2:37:bf:10:eb:
                    a0:38:24:a5:10:fa:84:1a:a9:54:2b:1d:2d:ec:93:
                    85:a1:1b:44:6f:9a:9e:4f:2b:3a:87:b6:ca:61:09:
                    ad:5b:cb:d0:0e:0d:93:db:3d:a7:77:fc:74:e6:b2:
                    ec:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0E:0F:62:2F:59:01:6E:67:FE:7C:BF:EF:4D:AE:53:86:2D:76:DF
            X509v3 Authority Key Identifier:
                keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:96:4b:45:8c:ea:02:76:89:00:9e:e5:e5:8b:fc:ba:de:34:
         4a:b1:1e:ec:85:28:1c:4a:66:3b:79:e9:e7:4e:ac:05:25:d7:
         2f:6d:f2:80:8f:24:0c:66:64:fb:ae:f1:00:e9:49:1b:67:cb:
         01:bd:41:06:e5:c6:44:83:94:2b:d0:8b:7f:eb:9f:f7:57:60:
         24:ab:be:85:34:e7:34:27:b1:47:7d:6c:3b:81:0c:d9:b6:d3:
         25:ff:f9:bd:39:b2:e7:4c:b4:72:6d:5c:00:c2:c3:b2:69:c2:
         d8:41:a9:bd:c1:f0:3f:18:0d:b9:c2:5c:76:90:5c:50:e5:b8:
         89:f5:4b:e6:2c:ed:f6:96:83:48:36:5c:ef:44:e8:1a:28:81:
         28:ac:17:b7:70:c8:9f:05:6c:e9:8b:c3:2b:c0:ed:db:c3:25:
         63:10:20:27:2b:4b:cc:a1:3a:c0:18:c7:2d:e4:c6:46:30:5b:
         84:56:52:23:8d:c5:c5:e0:46:66:b3:97:3b:bf:79:f5:11:67:
         51:84:4b:eb:06:3f:d9:3c:56:65:ac:d8:26:15:60:a2:aa:41:
         fa:e9:f6:32:8e:6e:52:e0:7a:65:e0:eb:c2:a7:4e:90:bf:39:
         f7:6a:34:77:90:72:09:7c:dc:6e:49:37:ed:52:6d:8b:31:d6:
         a4:f3:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:24:39 2025 by rpki-client