This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
File:                     P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json)
Hash identifier:          SpL9Haf2tzbFnNUrCp8gH7N4T4WTsMW9ln1qgDcK+n4=
Subject key identifier:   7A:EB:9A:22:38:62:DC:51:9F:90:16:0C:7A:07:E9:64:56:32:AB:F8
Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
Certificate issuer:       /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
Manifest number:          01BC
Signing time:             Fri 05 Dec 2025 01:19:48 +0000
Manifest this update:     Fri 05 Dec 2025 01:19:48 +0000
Manifest next update:     Fri 12 Dec 2025 01:19:48 +0000
Files and hashes:         1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: Iy6YkTlhurQwydfr0dokHnJPUxZ5pgLmvX/N9wHDkg0=)
                          2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: Q3p56EBz1xC365ZPw62kRQzqXww33xOtvu79Twkm2RE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
                          rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917429C, serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
        Validity
            Not Before: Dec  5 01:19:48 2025 GMT
            Not After : Dec 12 01:19:48 2025 GMT
        Subject: CN=69323334-5e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:89:09:aa:25:66:d8:4f:e4:91:09:e4:5e:
                    a4:ef:c5:b8:9c:95:24:d4:8e:ae:04:81:8a:29:6e:
                    c3:3c:3b:c2:c3:8c:95:00:8f:2c:61:6b:5c:da:8c:
                    b4:77:0d:28:19:9a:ce:3b:a9:6c:0a:05:5f:df:b8:
                    4f:60:21:13:8f:8c:4b:86:2e:1d:ee:4c:af:61:1b:
                    ed:a9:6e:bd:c1:55:77:2e:46:17:5b:d2:c7:42:dc:
                    04:38:32:7c:fa:b1:99:22:30:12:02:92:22:60:5e:
                    07:ae:c6:4f:28:74:e9:ee:4b:f3:f5:ed:77:26:86:
                    47:29:37:54:45:c0:f7:da:5e:6f:cc:01:1b:a2:6e:
                    a8:a0:51:e8:1b:ab:79:4b:d4:8e:33:98:ed:70:50:
                    a9:59:72:08:8d:fc:2e:12:67:fc:dc:cb:26:0e:df:
                    45:32:74:80:d6:29:b9:a2:c1:2d:3a:de:74:2a:13:
                    63:6f:ee:68:7f:38:0b:41:64:d9:23:47:60:06:1f:
                    e5:db:9d:86:c1:30:6f:6f:0e:f1:8e:b9:5d:0f:0f:
                    85:8d:4e:74:34:24:29:1a:3e:ca:28:1f:fd:5e:05:
                    f0:26:d2:db:14:a4:a6:5e:2f:1e:cc:27:53:5b:0d:
                    37:94:94:ee:22:b1:81:47:56:f0:96:ac:55:39:1a:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EB:9A:22:38:62:DC:51:9F:90:16:0C:7A:07:E9:64:56:32:AB:F8
            X509v3 Authority Key Identifier:
                keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fc:f5:2f:1b:23:9b:09:9c:11:41:3e:d4:06:d2:56:a0:be:
         ca:d5:98:90:56:a7:36:bf:79:55:aa:ff:12:51:da:41:92:08:
         b8:83:d6:43:0e:03:7d:ef:3f:1d:a9:e6:68:36:e3:12:ef:be:
         1c:db:8d:d7:e8:41:44:ad:9a:50:54:4d:90:f3:7a:46:4f:e2:
         f8:f2:90:a8:d8:a1:18:16:79:cf:3a:b9:c3:a1:2f:a3:68:a3:
         a3:b4:4b:e9:52:6f:d4:43:01:c0:1d:23:3e:40:b2:dc:f4:4e:
         35:1d:e5:e8:c9:b7:10:00:39:94:4c:73:53:ce:f3:dc:17:bc:
         a4:cb:7f:26:37:a3:c1:2f:1d:2e:10:2e:8d:02:b0:a9:1d:c0:
         c8:db:7d:9e:a9:86:fd:34:23:06:85:29:65:4b:13:10:c8:6f:
         c8:89:f3:71:77:0a:a6:0a:6b:24:3b:18:96:17:4a:3a:a3:22:
         f2:a8:27:d5:d2:ad:d6:7c:ea:36:2f:57:a8:6b:a8:7f:e5:32:
         4e:39:05:a5:1d:7b:4a:2b:70:b5:46:19:d3:f8:fd:1a:92:ab:
         35:20:a7:a7:36:ab:e8:dd:93:75:6c:fb:e9:47:63:56:39:1f:
         02:27:e0:d3:b8:79:82:65:62:9e:bb:e6:5a:3b:de:b2:7b:6f:
         a6:cc:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:36 2025 by rpki-client