This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
File:                     5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json)
Hash identifier:          IRgPumWW70KB9gdT4CjXxpjoU7HL06/mZGUCQEAjnb0=
Subject key identifier:   AF:16:7A:89:F8:09:A9:60:9C:43:03:8C:3E:75:C8:AE:3C:61:CD:48
Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
Certificate issuer:       /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
Manifest number:          01F9
Signing time:             Fri 05 Dec 2025 00:49:57 +0000
Manifest this update:     Fri 05 Dec 2025 00:49:56 +0000
Manifest next update:     Fri 12 Dec 2025 00:49:56 +0000
Files and hashes:         1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: KbFe83L4IYsR55G3z+RM+LfIPU4wQoYsZ5YPEcFcPKI=)
                          2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
                          rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
        Validity
            Not Before: Dec  5 00:49:56 2025 GMT
            Not After : Dec 12 00:49:56 2025 GMT
        Subject: CN=69322c34-e1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:13:3f:f1:93:bf:fe:b2:a6:3f:77:53:b8:e6:
                    17:26:59:75:5e:fd:a7:2b:9a:47:63:91:57:37:f5:
                    e3:4b:aa:2a:08:fb:02:c9:b7:da:a9:ef:7b:95:26:
                    f8:04:68:54:85:f4:06:6a:e8:0c:60:79:5e:04:fe:
                    96:b6:93:f0:ac:dc:cf:95:ea:4e:0c:c1:95:41:32:
                    40:e3:f9:09:09:dc:1c:36:7c:37:e1:93:25:75:1d:
                    d5:9d:db:0c:f1:4c:d5:d0:a5:28:63:02:76:c2:11:
                    92:ca:3d:a7:d7:d1:75:e9:4f:9f:65:07:39:b5:64:
                    e8:f5:86:ec:b8:70:26:72:84:67:e0:1b:14:9a:44:
                    06:15:36:16:e2:85:b4:71:5e:b5:92:70:fb:90:40:
                    cd:8f:62:3f:0d:57:e8:48:d0:b0:82:f0:cc:f7:d9:
                    e5:16:ef:4f:27:b4:e0:29:b7:6e:63:40:04:98:8e:
                    12:ce:8a:ed:ff:0d:f3:01:7e:29:e7:55:88:72:0a:
                    8e:1b:11:0a:85:4d:7b:52:08:14:ac:86:0b:20:41:
                    98:57:39:b0:18:e2:f2:d5:56:c3:f2:bb:60:4f:3d:
                    41:56:0a:2a:d1:f7:79:d2:75:1a:64:f4:7d:18:5c:
                    55:cb:98:fe:49:f5:a8:6d:d2:75:59:5e:ad:2c:90:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:16:7A:89:F8:09:A9:60:9C:43:03:8C:3E:75:C8:AE:3C:61:CD:48
            X509v3 Authority Key Identifier:
                keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:27:6c:0a:3e:91:3b:be:45:47:28:46:e4:7b:ee:e7:5c:db:
         32:cd:27:c2:bf:1a:b5:29:8f:07:27:60:37:a8:34:a0:97:dd:
         1a:2d:c5:fe:14:7a:db:aa:d5:4e:69:95:b8:32:b6:af:d7:9a:
         a7:8f:55:02:29:8d:68:10:c3:e9:bb:f3:22:04:cf:70:4c:da:
         63:d3:52:7a:95:28:c5:ea:f5:a2:b5:7f:99:45:06:ed:35:b5:
         64:40:98:99:3f:08:e8:2a:cd:49:62:36:e0:36:27:a1:20:22:
         39:33:dd:89:e2:ad:24:4d:96:34:01:d2:1a:e5:bb:8d:df:68:
         cc:74:e9:d0:da:29:44:f0:f3:c0:e4:2a:c3:95:cc:1c:b8:e2:
         b8:de:0b:2d:a7:8a:a5:7f:48:8d:1e:b3:f4:ba:94:43:6c:42:
         e7:a4:66:40:67:0d:eb:ad:6e:57:a2:c8:7d:6f:5f:2a:83:0a:
         aa:f1:4d:52:9e:7d:60:59:4b:2e:ee:83:5e:07:ac:66:9e:bb:
         4c:26:db:59:e4:59:90:31:22:47:fb:ce:db:84:8b:96:0c:9a:
         1f:d5:31:ae:68:ca:6f:12:a2:d6:4a:c1:d9:bf:04:fe:6b:f4:
         9d:18:f0:28:c0:49:ca:c6:5e:a4:fb:d6:c3:a4:ab:c4:44:52:
         20:e8:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:10:19 2025 by rpki-client