This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
File:                     5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json)
Hash identifier:          tOCFVYD649umqGzwUcHy5Qgy+uo3hRZF+YjfzQuq3gM=
Subject key identifier:   F9:E4:0C:65:04:B1:C2:67:E6:C7:E8:D3:F1:D9:10:2A:89:24:76:33
Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94
Certificate issuer:       /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
Certificate serial:       0E36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
Manifest number:          0E2D
Signing time:             Sat 06 Dec 2025 17:15:03 +0000
Manifest this update:     Sat 06 Dec 2025 17:15:02 +0000
Manifest next update:     Sat 13 Dec 2025 17:15:02 +0000
Files and hashes:         1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: WWVHgoOU0tnUBrn/Q2R+iJCpAEsJ8/Zdt9DL+NvfQE0=)
                          2: 1801797EB79211E986129837C4F9AE02.roa (hash: I7CEbkBg9Av7yOv0PNqj77FDrgxZjjIl1US16C5a7sQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl
                          rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3638 (0xe36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
        Validity
            Not Before: Dec  6 17:15:02 2025 GMT
            Not After : Dec 13 17:15:02 2025 GMT
        Subject: CN=69346496-8368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:46:95:81:d3:98:36:5c:44:8a:21:84:e2:
                    1c:7a:d6:53:72:46:b0:7f:86:ff:c5:5f:c8:c8:0a:
                    cf:89:b7:7d:58:09:ac:dc:ea:d9:e8:8a:75:b1:f1:
                    f0:13:e5:25:8d:f2:4d:b3:51:32:5f:11:f8:d5:9a:
                    04:cf:e5:91:34:79:41:6c:cb:bf:85:0c:f2:42:d3:
                    c2:94:4c:14:96:c0:74:1a:72:b1:14:b4:bd:c4:62:
                    68:af:0d:01:c5:82:a3:ee:70:06:1c:8e:78:fb:4f:
                    c2:c2:41:c2:0d:67:45:6b:68:b7:ea:aa:a3:70:96:
                    4f:d8:b6:70:1f:81:7f:91:db:32:5c:55:6e:50:df:
                    0d:e2:a8:e8:76:05:e4:75:bf:c9:fe:e2:ca:3f:3e:
                    86:2e:90:cd:c7:ed:d0:dd:48:00:fc:10:50:99:b6:
                    ea:18:d1:ac:3e:49:31:ba:78:73:b2:49:13:b4:39:
                    bf:05:7d:bb:57:25:d2:c4:11:c9:7b:ba:ac:86:3c:
                    1c:81:1f:3e:bd:59:a8:8f:69:80:64:59:63:28:82:
                    1c:12:2c:0e:00:a4:2f:3a:b8:eb:2f:d6:39:6e:57:
                    0f:88:63:18:78:c7:e5:d6:a4:78:1e:c4:33:87:98:
                    30:ed:4f:58:73:17:9b:f2:57:67:be:b2:09:a6:62:
                    a1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E4:0C:65:04:B1:C2:67:E6:C7:E8:D3:F1:D9:10:2A:89:24:76:33
            X509v3 Authority Key Identifier:
                keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:fb:a7:19:8a:30:1d:4e:c6:d9:ae:a1:0f:c9:83:18:ed:83:
         ea:62:21:9b:37:8e:40:ff:10:42:5c:f2:cc:46:4f:94:10:e2:
         f8:d2:65:e7:46:a3:24:b5:6f:2a:88:8d:a6:4b:38:8b:1a:8b:
         97:63:88:3b:99:e9:cb:65:48:14:3d:1e:b5:f5:fc:7d:aa:85:
         d5:3b:06:3b:b7:0f:ee:67:3f:2f:41:7d:4b:51:a7:98:5c:9e:
         11:ce:83:2e:8c:da:3b:35:24:cd:f2:7f:ab:ff:ae:d5:8c:41:
         7c:9f:c5:c1:90:8f:09:0d:33:03:ac:23:ab:38:ce:5b:3a:d5:
         60:6a:6a:62:8c:33:47:49:b8:94:d3:de:d0:f7:43:06:2d:42:
         d6:0f:76:5b:aa:da:ac:22:a4:67:ec:dc:57:2c:81:2a:66:8c:
         89:8e:5e:86:08:73:7b:52:e8:8a:85:6b:7b:7a:84:68:e8:89:
         92:a5:6e:a3:ff:46:71:96:a1:15:fc:4f:9d:03:74:a1:b2:c3:
         e2:d0:d8:a8:7d:10:ab:32:a3:6d:11:0c:4c:e4:58:08:24:c8:
         27:37:f1:c9:8c:54:df:b4:0c:28:fc:f7:dc:04:7d:87:ea:8e:
         68:9e:83:09:01:da:7f:0c:ea:1a:f7:84:92:76:82:8b:54:9c:
         21:49:1a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:15 2025 by rpki-client