This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
File:                     N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json)
Hash identifier:          3rgZ/zKKP3tuuGRMEBMQbhiupt5J13w16/yK4BGYIuk=
Subject key identifier:   21:D5:16:86:30:6B:D9:F2:92:6A:2E:FE:24:30:C0:18:31:1F:FC:97
Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
Certificate issuer:       /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
Manifest number:          02CF
Signing time:             Thu 04 Dec 2025 23:44:56 +0000
Manifest this update:     Thu 04 Dec 2025 23:44:56 +0000
Manifest next update:     Thu 11 Dec 2025 23:44:56 +0000
Files and hashes:         1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: Kgna9LiIaXFefqGtO8Y1m0fJTWqIQlO0fBxDeBjvD9Q=)
                          2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: CEfMKREa1ZAXvKW/qUPDnjrCIBcW6uxSr04LzHPmGnQ=)
                          3: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: IATepVmo1KvC0hGjJmst1dGBkl9Ds09b6R3QzisHd5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
                          rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
        Validity
            Not Before: Dec  4 23:44:56 2025 GMT
            Not After : Dec 11 23:44:56 2025 GMT
        Subject: CN=69321cf8-423c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:95:eb:2f:30:20:b9:50:dc:54:a9:15:a8:9b:
                    e0:32:e1:40:ef:e2:a3:11:4d:31:16:a7:b2:d0:99:
                    4e:f1:92:42:70:55:bb:45:55:3a:0f:db:91:7a:8d:
                    a6:a3:64:76:d4:a5:94:f9:94:5c:71:05:e2:02:18:
                    8f:4a:cf:cc:05:73:b4:4a:7c:7c:6b:13:55:f9:4d:
                    32:c6:1b:c6:48:a4:0c:c7:ac:1c:6c:76:50:bd:81:
                    f6:83:e3:21:e1:7d:cd:6f:43:d8:17:ff:fe:60:84:
                    73:6b:32:3a:01:9d:a2:db:42:aa:0f:4e:20:33:0b:
                    09:a6:ac:6c:26:0f:d6:31:3b:ac:58:e8:09:74:3f:
                    09:3c:4d:94:e2:13:80:ea:48:1d:e0:a8:63:18:0b:
                    c3:ce:ef:12:d4:a3:9a:75:62:2e:86:7b:1c:9e:35:
                    ec:ca:79:b1:14:a0:0a:56:a4:a6:0e:02:7d:c6:f7:
                    84:87:80:d6:97:f6:f1:1d:da:cd:ba:20:3b:02:ce:
                    41:a8:81:fc:19:ee:9e:24:36:55:2c:da:ba:5b:da:
                    ab:94:3d:34:2f:3d:11:93:9c:75:ee:99:32:e7:91:
                    31:37:90:91:6d:44:d8:d8:9f:a8:8e:8c:3c:2f:c1:
                    17:06:39:68:0a:46:a7:35:fa:54:69:a0:fd:2c:59:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D5:16:86:30:6B:D9:F2:92:6A:2E:FE:24:30:C0:18:31:1F:FC:97
            X509v3 Authority Key Identifier:
                keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:44:06:36:66:0c:c0:08:a5:0f:c6:90:60:35:93:f7:b0:
         48:09:5a:80:d4:3f:dd:d1:89:8b:a2:8f:fa:80:c6:ff:70:60:
         14:9a:09:b5:57:58:24:89:f5:3f:20:6e:a7:52:72:ef:be:65:
         f9:74:6c:95:0e:6f:9e:fc:eb:17:9d:3d:f0:0f:5e:5f:cf:c1:
         35:3f:e2:98:02:75:da:5f:ba:bb:5e:5a:f5:83:e2:fd:a1:bd:
         35:33:5a:9f:8d:43:a8:57:6b:01:0c:21:55:d9:ae:9f:61:a8:
         72:0c:e5:2a:13:8c:bb:9e:15:2f:2c:50:92:2b:b9:cb:ab:b9:
         ad:ed:72:f0:6c:ee:c3:27:2e:35:0c:55:bc:1c:44:5f:01:52:
         23:20:ae:b6:3d:c2:d0:b5:55:20:f0:d1:c7:37:2e:04:b5:38:
         a1:a6:a0:f9:8a:c0:85:bd:eb:f2:97:53:44:40:c4:9b:08:53:
         98:90:9b:cc:db:84:d0:d1:07:dd:0d:45:b3:e5:a4:a9:5f:f8:
         1d:7f:d5:dd:ee:d4:1e:f3:a4:d5:ce:ff:e6:b2:ef:26:80:ec:
         95:80:3b:b7:c6:fb:37:70:1c:d6:e7:77:77:ea:ac:5e:58:fd:
         a1:ae:45:ed:07:b8:70:f9:24:52:51:4f:61:eb:01:84:a3:de:
         e4:07:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:10:37 2025 by rpki-client