This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File:                     vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier:          /v81f4mYTPma2vuqszQvFXtJhVHtnhSnwfDTinYYWc0=
Subject key identifier:   93:FD:AB:F9:5F:13:68:FF:50:40:00:DE:E4:EC:07:1F:F5:F9:F9:90
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer:       /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial:       0566
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number:          055A
Signing time:             Thu 04 Dec 2025 22:01:11 +0000
Manifest this update:     Thu 04 Dec 2025 22:01:11 +0000
Manifest next update:     Thu 11 Dec 2025 22:01:11 +0000
Files and hashes:         1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: miWgEXkL5t1FR4WR+aIulW2A5I4NxUAdJbd5Tl9Zh6k=)
                          2: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: EaQ615UaoSlbYGe5kp9Ft1URPJxHKbUFtgfGcBgBPeU=)
                          3: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: GLm2AKslZ/503xaJdyFMTW6e2t7uEKz1XmKi3aW5E9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
        Validity
            Not Before: Dec  4 22:01:11 2025 GMT
            Not After : Dec 11 22:01:11 2025 GMT
        Subject: CN=693204a7-a59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:15:7c:fc:c8:50:02:c1:fa:6d:ec:71:7b:
                    65:22:ad:86:d1:7e:24:bc:26:33:b1:65:1b:32:08:
                    f6:06:cc:d6:1c:b8:94:bb:3c:64:70:a5:7d:14:34:
                    fd:40:82:1e:f0:64:df:b2:4d:cc:71:62:6f:a5:ae:
                    c9:76:42:ca:d6:8b:6a:2b:f7:b6:66:9e:f7:e0:fb:
                    a2:bf:8d:e6:13:be:79:03:63:78:48:0e:c8:d7:24:
                    68:dc:3a:be:5f:48:ff:fe:74:74:4c:c8:0e:e8:68:
                    e1:46:ee:29:6c:ba:5a:f2:ad:e7:05:1d:d4:4b:ca:
                    94:30:e1:5e:04:d3:0a:e8:6a:c4:06:85:70:56:5a:
                    c2:93:fb:47:d9:ce:af:0b:47:39:81:2c:64:f8:be:
                    c6:83:f6:fa:b9:28:3a:b5:0c:2f:de:5d:9f:43:17:
                    00:f3:fc:c5:5b:e8:7f:d1:23:74:6f:61:8c:67:b7:
                    fe:64:23:c7:a0:93:ee:66:58:3f:0a:d2:d1:32:86:
                    04:8a:65:a3:e6:2f:77:e8:96:bc:e0:c2:a3:71:89:
                    ae:c3:34:2a:d2:e7:a1:54:4f:76:83:c7:41:ba:30:
                    31:e6:a8:2a:c0:91:db:c1:56:9f:09:9c:c5:be:57:
                    17:6f:b0:2e:2c:47:0c:07:65:5a:57:75:17:39:32:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FD:AB:F9:5F:13:68:FF:50:40:00:DE:E4:EC:07:1F:F5:F9:F9:90
            X509v3 Authority Key Identifier:
                keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:66:6c:6f:1d:b3:ac:3c:fa:4d:b8:c7:2c:74:fe:53:4f:12:
         0e:2b:6a:5e:48:df:fc:15:14:af:18:39:b2:a1:9b:7d:68:b6:
         7b:96:59:ce:c8:53:68:57:64:ed:87:66:37:e9:87:1a:94:58:
         73:55:51:cd:30:a4:e3:9f:d5:f0:44:6e:8e:a5:50:13:31:d2:
         7d:b1:6a:4f:3a:d0:23:18:26:33:d9:ba:3e:9c:7d:ba:52:4d:
         b9:36:4f:01:b5:62:c7:c9:2c:16:c8:6a:e2:38:1f:2a:48:6e:
         15:f0:09:46:c2:5e:56:92:db:b1:a5:3f:f6:99:bd:ee:b9:3c:
         58:4d:c8:c7:67:4e:9a:27:01:6f:29:11:1c:2d:1c:91:3d:42:
         eb:65:ed:92:17:82:46:57:c4:12:94:92:fd:27:be:82:0c:54:
         49:ea:05:d5:2f:7b:13:9d:99:11:23:c3:69:0c:84:c8:b6:ab:
         1b:e3:91:75:52:09:f4:22:9e:7b:fc:ed:c8:02:94:ea:8a:99:
         c7:b5:4f:93:ee:70:33:2e:33:e7:17:73:f6:96:1c:0a:52:36:
         e1:e7:0b:75:3a:4d:3a:ca:49:98:93:6c:7f:fd:d2:02:cc:9a:
         66:f6:e5:f6:76:c1:7e:1c:b4:d7:d2:a7:60:2e:2d:b6:7f:67:
         89:38:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:51 2025 by rpki-client