This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
File:                     28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json)
Hash identifier:          fpJ/VRuwOqbDfuJmzKVmj6Qrt7QdswJHhXZNxhJv8hc=
Subject key identifier:   5D:FC:86:19:4E:41:38:80:94:59:88:E2:06:CE:88:E3:DA:1D:50:D3
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Certificate issuer:       /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
Manifest number:          5C
Signing time:             Fri 05 Dec 2025 04:59:20 +0000
Manifest this update:     Fri 05 Dec 2025 04:59:19 +0000
Manifest next update:     Fri 12 Dec 2025 04:59:19 +0000
Files and hashes:         1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: sqBOztjHc7rdXX8FdR2Rf8j85hPbsUIeYDr/f9c9Dec=)
                          2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: 0gESDeiknT1uDimkCFfPCuziTgWG/TNYoJv8MT/MXRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
                          rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
        Validity
            Not Before: Dec  5 04:59:19 2025 GMT
            Not After : Dec 12 04:59:19 2025 GMT
        Subject: CN=693266a8-93f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:c8:09:20:35:a2:b3:d4:ba:46:20:28:4c:
                    c4:31:25:b7:2f:81:c1:72:65:a2:92:92:34:f4:c1:
                    32:32:68:af:d5:ce:b7:cf:0e:4d:9e:c6:2a:d5:49:
                    d3:62:43:a1:cb:b7:33:50:92:a5:97:48:b5:3e:51:
                    c1:3b:fb:82:ee:97:74:35:e8:fb:bd:06:79:70:ea:
                    71:9b:49:4a:5d:df:fc:cd:1b:ba:be:18:6e:20:5a:
                    7e:ee:e0:41:48:e1:3d:c4:28:f2:b3:ac:5f:be:f5:
                    54:e6:1d:b9:1b:ab:da:48:bc:04:f6:20:96:a5:58:
                    f5:b1:74:84:b5:cd:5a:d3:ca:b7:6a:62:97:3a:03:
                    ef:9f:b3:a4:5e:2d:91:1d:17:04:10:aa:66:22:22:
                    f9:48:bf:23:ad:71:99:a0:55:b3:7b:97:65:59:de:
                    41:4f:f5:ae:66:c2:ed:de:24:6a:f4:e0:ff:06:67:
                    e4:92:36:03:f3:6e:00:22:50:03:75:cf:b0:f1:f1:
                    f1:fd:4e:51:ed:59:7a:a6:d3:a1:de:9a:5c:ea:8c:
                    20:51:2f:ee:0e:c2:95:24:08:bc:87:cc:f6:5c:8d:
                    41:f6:53:f1:db:b7:34:e0:86:b5:68:ca:02:b1:ce:
                    75:42:20:4e:23:ea:1a:86:73:ec:53:a7:63:e3:ad:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FC:86:19:4E:41:38:80:94:59:88:E2:06:CE:88:E3:DA:1D:50:D3
            X509v3 Authority Key Identifier:
                keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ec:2b:fc:a5:49:a4:f8:69:53:61:04:a3:65:ae:f6:ba:7d:
         e3:54:cc:c9:18:ee:f1:cc:ad:f7:6a:2f:98:08:41:37:9c:57:
         37:c7:cc:46:2e:47:bb:3a:4e:6e:c2:f3:66:da:e3:18:55:08:
         61:48:be:e4:3e:ef:04:9e:94:d2:c7:e6:75:67:f7:f2:80:b6:
         06:ad:bc:de:85:05:9a:74:f4:2f:aa:e7:b6:1c:50:5e:66:ea:
         0c:6b:3d:9f:e1:6c:40:b5:f1:42:51:a9:27:91:b6:3e:4f:54:
         05:7b:e4:bf:31:3f:c6:96:d7:49:1c:d7:92:7c:8a:34:13:b9:
         70:f2:1e:94:5d:ab:70:8d:5b:a0:a3:d4:b5:5c:6b:20:d6:f8:
         5e:1a:77:f4:a5:24:f6:65:7e:f1:94:32:27:ea:56:f4:13:9c:
         e0:1a:de:b8:4e:82:72:fd:90:e1:50:30:75:2a:23:22:c5:bf:
         7c:ea:94:bb:9d:a8:a8:5f:da:78:4b:27:c1:62:0a:70:58:10:
         1c:2e:45:42:f2:54:60:51:5f:77:e0:9e:d5:35:4f:4a:62:6e:
         55:6b:4f:0d:02:50:95:9f:cb:00:be:df:b7:67:3f:3c:e6:aa:
         f7:ec:ac:b5:c5:14:6d:61:59:0e:94:68:c8:f9:02:43:ac:89:
         47:39:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:28 2025 by rpki-client