This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File:                     0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier:          1czEuwGOg3T/aAJleREi4BSZQK79TJpaxR+h3YbrI7U=
Subject key identifier:   2D:89:EC:43:0D:97:ED:CD:8D:5F:58:38:64:4E:30:F8:3F:58:C2:94
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer:       /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number:          016F
Signing time:             Fri 05 Dec 2025 02:04:29 +0000
Manifest this update:     Fri 05 Dec 2025 02:04:29 +0000
Manifest next update:     Fri 12 Dec 2025 02:04:28 +0000
Files and hashes:         1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: 3yyXn47Xpq379x6rJle1ZDErC/Q5B3HLNRY+a2MtevY=)
                          2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: 7696MMuvciabX1nFuz0iuQ3b+zF4t5sdAPgAUCluYpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
                          rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
        Validity
            Not Before: Dec  5 02:04:29 2025 GMT
            Not After : Dec 12 02:04:28 2025 GMT
        Subject: CN=69323dad-c374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5b:d2:fd:8c:97:82:b8:29:d6:c8:06:12:e0:
                    2e:38:9e:d1:17:2a:31:e6:08:73:87:33:15:bc:e4:
                    80:0b:6e:12:e4:39:48:cf:19:22:60:e0:90:a6:40:
                    7e:90:2b:ef:39:4f:10:ed:4e:c5:19:4a:8a:b3:54:
                    0d:8e:50:4b:70:b2:91:ba:1e:a6:23:9f:f0:bd:3a:
                    a1:62:da:e8:3f:9b:2a:c5:f8:20:8a:30:e0:53:16:
                    7c:88:f8:1a:7a:c9:ae:a4:98:05:d7:b4:ca:9d:1c:
                    b9:75:9e:ca:16:77:9b:78:b6:66:3a:55:01:d2:23:
                    28:91:c0:11:85:ad:40:2c:35:5d:97:51:3d:74:02:
                    6f:88:a5:0a:78:f4:0f:dd:f9:20:9a:07:70:ca:1e:
                    af:b5:26:6d:7f:7e:be:3c:1a:40:f3:25:0d:82:f1:
                    de:3d:e1:3a:32:fc:9f:49:81:f9:82:47:85:ed:e9:
                    45:dd:56:a0:db:88:d1:92:0e:c0:f5:8f:b2:83:07:
                    1b:1b:4c:80:25:e8:71:b0:13:73:2c:5e:a7:06:86:
                    c1:0b:45:ae:a2:a5:47:b6:f0:f5:81:88:9c:b3:4b:
                    76:1d:d2:19:41:a0:35:e2:23:7b:e0:05:2c:0c:5c:
                    2b:e5:da:a0:91:b3:82:4f:5f:a9:8f:78:3e:9d:d6:
                    17:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:89:EC:43:0D:97:ED:CD:8D:5F:58:38:64:4E:30:F8:3F:58:C2:94
            X509v3 Authority Key Identifier:
                keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:73:89:9e:49:ad:be:80:0d:87:0d:04:c9:f1:b2:d4:46:43:
         0d:b5:43:f1:fa:ca:cf:d2:32:3f:d6:9c:ad:87:78:fe:57:09:
         00:a6:34:0e:31:58:1a:ac:eb:4a:ce:56:c9:05:24:5e:b0:7c:
         df:96:cf:7e:aa:c2:e3:ca:b8:c1:63:71:86:40:39:c1:49:01:
         f8:c0:fe:05:79:49:48:28:7a:f3:55:4e:e2:c9:38:3f:fe:d2:
         6b:f4:85:ae:b3:4b:b7:41:51:14:0d:b6:d2:48:7c:68:aa:e8:
         20:b0:09:51:71:bd:59:be:d7:04:ee:f1:ef:32:30:29:28:1c:
         c4:ca:b5:44:8d:51:d3:6f:a7:35:56:f9:ff:8d:e9:7c:4b:be:
         cf:b2:33:77:b1:11:d0:f8:6c:66:7a:d1:02:5f:10:4f:24:94:
         1d:04:2a:a9:9a:58:af:8a:26:e7:d4:57:bc:d8:40:34:57:14:
         ca:cd:3f:8c:d7:ce:55:12:ae:be:9d:2d:ea:29:21:1b:ba:fe:
         06:bf:9c:7e:eb:16:b1:aa:4f:de:f9:80:45:d2:ad:79:74:ef:
         f1:4e:b4:3b:44:ec:9a:86:2b:d2:9d:09:74:f2:33:c1:a4:a4:
         14:1b:19:e7:ed:d4:f6:14:c2:ab:9c:59:4c:8a:c1:4d:1a:7b:
         69:cb:94:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:16:55 2025 by rpki-client