This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
File:                     C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json)
Hash identifier:          ehBd2+YUSOZmsB69EB26djoZchnqXNRDrparNvk9GXw=
Subject key identifier:   09:10:87:BE:B8:35:77:15:24:F4:08:21:82:BA:52:DC:18:D7:7F:5A
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Certificate issuer:       /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial:       122E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
Manifest number:          1219
Signing time:             Thu 04 Dec 2025 16:46:49 +0000
Manifest this update:     Thu 04 Dec 2025 16:46:49 +0000
Manifest next update:     Thu 11 Dec 2025 16:46:49 +0000
Files and hashes:         1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: UDMIPQL81AYWgof1xxrnikOBxO5AAFYtMbkK02wwxY0=)
                          2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: TiqURCOWDtFV1lphAi7QXXgszXNq/kYQUGQ1WC3OpiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
                          rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4654 (0x122e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
        Validity
            Not Before: Dec  4 16:46:49 2025 GMT
            Not After : Dec 11 16:46:49 2025 GMT
        Subject: CN=6931baf9-4ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:f9:51:9d:2a:b3:f7:ab:4e:d6:21:34:ae:
                    27:b2:de:98:c6:45:c4:0c:b1:f7:8c:95:d2:07:8a:
                    48:5d:bc:d9:28:2a:e8:cc:15:73:ef:fc:84:88:a8:
                    6c:94:88:21:fc:1b:e9:f9:5d:00:4e:cc:91:d1:0a:
                    01:6a:e7:87:6e:26:c2:9b:61:74:95:7a:a8:ce:f1:
                    12:d6:cd:f9:bb:6a:d2:24:35:5d:45:29:d7:3a:85:
                    3d:6a:8a:b9:4f:5f:bc:c2:59:02:8c:37:03:26:1d:
                    1b:37:e8:a2:f2:e2:58:e6:1c:44:3d:e3:de:87:ee:
                    30:47:8e:3b:9d:e0:2b:95:6f:3b:7a:78:c7:1a:da:
                    ef:85:3a:b1:a8:32:4f:34:1e:28:2d:40:fa:32:87:
                    64:32:3a:5b:27:32:2b:65:40:5b:d7:30:f6:b9:25:
                    90:27:ad:a2:ce:9e:b2:2c:14:65:80:04:04:f8:1c:
                    a9:22:32:08:18:7b:56:4d:87:49:b8:5b:1c:b9:e0:
                    76:28:51:a9:86:21:d7:d8:c6:18:54:5f:c2:82:c6:
                    d1:a9:45:19:6b:77:18:33:7d:c3:ab:c8:fd:f2:fa:
                    e2:bc:e0:e2:d7:13:51:c1:74:64:d1:93:2e:58:a0:
                    91:56:32:c5:8d:f1:b7:eb:7d:2a:76:0d:ad:19:5f:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:10:87:BE:B8:35:77:15:24:F4:08:21:82:BA:52:DC:18:D7:7F:5A
            X509v3 Authority Key Identifier:
                keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:79:57:aa:89:a2:cd:7f:98:76:36:5c:17:af:d5:ba:0d:
         57:77:ce:ac:5c:21:cd:d1:1c:80:67:bd:6d:21:82:5f:62:90:
         71:ea:8f:97:05:a2:87:77:10:1a:14:ca:43:69:e8:b1:d3:aa:
         7a:51:44:1c:93:b2:1d:b0:5c:b0:f3:0d:4a:6f:00:70:27:ed:
         d2:48:ca:49:c3:e8:8d:19:c9:08:7c:5e:de:e6:ba:76:14:45:
         b4:29:d1:35:cd:71:83:7a:42:31:36:bd:9a:42:b3:37:de:cb:
         67:ae:45:bf:9e:d9:73:0d:c3:8c:f6:9d:1b:73:6f:a8:0f:da:
         b0:65:6b:12:92:6c:8d:d0:19:64:9f:42:af:50:02:29:9b:0c:
         df:94:34:9c:c3:38:dc:53:df:5a:46:57:0f:fa:a4:2b:c0:38:
         23:7d:4b:2e:ad:d2:45:a1:02:18:bb:7d:4b:78:10:ef:02:56:
         16:7e:51:d0:d9:0f:0c:39:04:fc:7e:27:4b:13:8e:da:c1:cd:
         ec:d4:9c:76:b9:c7:f0:08:d6:6e:c8:fc:a3:1d:2d:fb:4f:e8:
         e1:85:d5:0c:43:34:56:d1:9c:51:c2:46:35:59:43:32:9f:ba:
         10:a8:71:63:4f:c4:86:d8:cf:ee:f7:16:87:a4:9c:64:29:ad:
         73:ae:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:56:39 2025 by rpki-client