This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
File:                     5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json)
Hash identifier:          MI8gqH3ZUK/Q4YQgbp1JIKgsqXLgPYd6cZmTYE9CSoU=
Subject key identifier:   91:73:D7:38:08:BE:9F:03:0F:81:9B:03:DC:DF:63:61:0C:40:08:E3
Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9
Certificate issuer:       /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
Certificate serial:       10BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
Manifest number:          10AF
Signing time:             Sat 06 Dec 2025 16:50:23 +0000
Manifest this update:     Sat 06 Dec 2025 16:50:22 +0000
Manifest next update:     Sat 13 Dec 2025 16:50:22 +0000
Files and hashes:         1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: 51LngEyfCABXMUIet/NEck/C99tKvTwx4dczMpKzB28=)
                          2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: GBYQ/lKi3z5roPUPwktfDVMLitw965pomXZAG5jfako=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl
                          rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4283 (0x10bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
        Validity
            Not Before: Dec  6 16:50:22 2025 GMT
            Not After : Dec 13 16:50:22 2025 GMT
        Subject: CN=69345ece-b1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:1a:ef:1d:49:37:b9:1a:20:67:dc:6a:b8:
                    9c:9e:95:4a:d9:f1:d6:7d:b0:01:1f:9e:f3:74:f7:
                    7d:58:b0:05:4a:68:46:8f:62:22:57:2e:e1:c0:23:
                    51:cd:d6:d0:bd:d6:fc:28:0b:72:aa:c2:4f:d6:0b:
                    b2:f4:f8:9a:88:08:c9:d7:35:ac:9f:97:98:70:b8:
                    1d:4d:c4:93:64:f1:58:f1:82:8e:b5:34:7a:a2:f6:
                    63:16:13:2c:eb:ac:6d:5e:87:b6:01:5b:0a:cc:3b:
                    e1:85:5b:05:2c:57:09:dc:b2:6c:33:d2:da:e3:33:
                    c6:81:b3:f2:25:d3:59:0c:d4:57:7f:ef:e1:cf:38:
                    80:fd:9b:21:cf:50:0b:89:5a:ab:56:08:03:66:32:
                    84:e3:98:e6:4c:b4:67:64:40:bc:c1:b8:9a:ca:b3:
                    28:e8:bd:c7:1b:cb:ba:26:cf:1b:8e:5a:84:ba:b0:
                    0e:90:7f:4f:2f:14:9a:f8:00:f9:06:84:a6:8c:27:
                    6f:f5:fe:76:b3:d5:89:81:d7:57:eb:8f:4f:83:9c:
                    da:66:89:0a:12:78:62:d3:79:57:7f:f3:20:91:6e:
                    db:30:0d:8d:d3:76:3c:ac:98:d1:44:12:dd:72:31:
                    ea:11:bc:e2:23:23:99:9f:ac:c6:2f:44:3a:ce:59:
                    29:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:D7:38:08:BE:9F:03:0F:81:9B:03:DC:DF:63:61:0C:40:08:E3
            X509v3 Authority Key Identifier:
                keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a3:5f:2c:5d:87:cb:f0:4e:1a:e9:99:17:8d:8d:09:11:17:
         80:cf:f0:30:f3:bd:22:e3:c2:0c:0c:76:f0:21:af:ca:65:7b:
         6a:09:82:a4:c7:44:97:97:73:82:90:5c:cc:81:5c:01:03:31:
         1f:de:0b:df:13:78:2b:d0:ac:13:c2:da:19:f8:43:02:de:ef:
         ea:d0:69:fd:4c:33:78:d4:26:2d:0e:00:1a:c7:1f:59:9e:8c:
         d1:e1:38:31:55:54:35:fd:0d:41:64:42:bb:e2:d7:6f:b5:ee:
         16:d7:25:1b:4d:35:1b:b5:b8:14:ee:7f:e4:5f:20:6e:7f:92:
         51:b5:c3:23:06:f0:ec:34:86:06:74:1e:26:4e:c3:d1:b6:d3:
         5b:2c:63:ac:3e:d8:11:fb:bc:40:57:54:22:f1:fe:4a:f2:19:
         30:2a:f5:4b:c6:c8:41:70:52:61:4e:cf:25:32:ff:a8:c8:27:
         f5:a4:23:9e:54:41:e8:79:b0:73:18:c9:d2:a1:b0:4e:0f:49:
         1c:f5:f8:4d:bf:86:c7:40:5a:74:9b:f9:b6:09:24:a1:1c:31:
         0c:82:85:f4:d4:d2:14:e3:7b:44:ce:ae:f0:de:15:8f:a4:e2:
         4c:0d:67:a7:30:93:4d:af:0e:5c:71:09:8d:86:19:9b:c5:8d:
         33:d9:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:08 2025 by rpki-client