This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
File:                     5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft (raw, json)
Hash identifier:          ZYIRb85OEfQD7pCMh5nQp0JIxFi1c0jEd3cuNNtyHXY=
Subject key identifier:   AA:FB:3E:AC:86:17:49:56:91:6C:50:85:EC:BE:D8:CF:6E:F7:BB:D1
Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
Certificate issuer:       /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
Manifest number:          43
Signing time:             Fri 05 Dec 2025 05:18:30 +0000
Manifest this update:     Fri 05 Dec 2025 05:18:30 +0000
Manifest next update:     Fri 12 Dec 2025 05:18:30 +0000
Files and hashes:         1: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl (hash: H+Xn6P/ZjEp+m5tyQJ2CEHcv8j12/CYqV6QJKau+GuI=)
                          2: 707ABBBE73F811F0B8A9582CC4F9AE02.roa (hash: aeXdNNQNabgrgBCmkQacK1+L1cNE5fkHv7C0sQiLMEA=)
                          3: 7013EE7A73F811F0B8A9582CC4F9AE02.roa (hash: gsI9bZIEgenwvA+Pmylv8BqkOrAikmMP6MwW5zxivFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
                          rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
        Validity
            Not Before: Dec  5 05:18:30 2025 GMT
            Not After : Dec 12 05:18:30 2025 GMT
        Subject: CN=69326b26-0966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e3:77:3e:3b:35:3b:0c:14:60:86:07:6f:60:
                    01:b3:26:80:e6:c5:fa:f2:dd:57:be:c3:22:75:9f:
                    13:1f:de:b5:39:4e:fd:8f:93:f2:95:72:db:5f:37:
                    13:ea:d7:36:9d:76:0e:dd:bb:f4:20:d7:a0:e3:86:
                    30:89:0c:4c:af:ea:a5:ea:90:1d:0f:b5:c2:5e:c4:
                    dc:bf:df:ff:b8:b9:99:be:2a:9f:b3:c8:c6:e1:eb:
                    17:be:e0:4c:6d:3f:de:f0:b1:d4:08:68:39:16:6d:
                    5f:3b:cc:94:a6:f8:3d:dc:d4:e6:7b:70:53:30:36:
                    cb:91:23:61:0b:40:c3:39:82:95:0d:88:bb:0f:3c:
                    38:07:e8:d8:0d:00:8b:71:1c:4d:85:45:cf:2d:5d:
                    94:72:40:73:ae:9d:f2:85:30:f0:66:23:63:ca:1d:
                    ad:cc:13:72:c2:c4:c0:67:ad:db:25:60:fc:c2:ee:
                    be:1a:e2:1d:aa:37:e7:8b:97:c1:f3:c2:1d:56:e0:
                    03:e9:e9:69:e4:4e:4d:e7:8e:85:f0:36:70:e2:f0:
                    be:0a:e3:06:70:12:b3:b3:85:34:d5:d6:f3:7b:3c:
                    8c:34:30:f5:99:3c:60:d5:6c:1a:bd:3e:b2:34:26:
                    f2:84:6d:33:fa:b4:03:c0:b6:82:42:02:41:e1:c8:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FB:3E:AC:86:17:49:56:91:6C:50:85:EC:BE:D8:CF:6E:F7:BB:D1
            X509v3 Authority Key Identifier:
                keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:30:5c:f3:8d:43:7d:03:e5:bc:95:89:75:37:5f:68:11:
         9d:99:39:40:68:bf:c6:9d:9b:9b:7a:ab:38:f3:6c:80:4e:b8:
         0e:01:cb:06:50:e6:ea:02:2d:f9:6c:8a:ca:a3:41:b6:c5:de:
         8a:4b:0e:97:3b:36:49:ff:6a:1b:bb:64:75:76:4d:1e:e4:2c:
         c2:75:68:70:b5:da:58:76:3d:8f:af:85:2b:6c:ad:f6:c3:d4:
         86:ce:57:37:5d:78:59:e0:a6:15:e0:5a:c5:e7:7d:77:bc:b9:
         34:71:6b:49:b4:95:b6:c5:97:dd:29:7b:96:0d:47:f3:ef:ac:
         1e:69:f0:a4:91:9a:c0:cb:05:b0:94:61:e1:6f:a0:68:f6:83:
         85:69:67:ec:27:0a:8d:43:56:7e:d3:0a:76:fb:13:48:31:8a:
         3c:17:54:f7:88:61:3e:9d:fb:8e:40:41:fa:64:13:e8:08:fb:
         69:de:ec:8e:a7:18:f8:5c:0e:27:d7:07:8a:5c:33:88:d0:01:
         14:93:38:7c:82:57:7b:04:33:7a:0b:dc:e9:cb:aa:43:5a:bc:
         e8:bb:d9:ef:e6:b1:1f:11:eb:0d:9d:e5:bd:a9:06:df:a2:39:
         93:fc:94:d1:b5:73:e7:43:03:e5:fd:ac:52:1a:dc:9d:93:11:
         15:87:85:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:52:17 2025 by rpki-client