This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
File:                     M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json)
Hash identifier:          iiIl9kRIE8GpCBZ8fa5bxn/YKMGvAQMRutaO4ph0Hk8=
Subject key identifier:   67:04:79:04:8D:E3:65:B3:F4:EF:0D:77:14:70:93:4D:3F:97:C6:4A
Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2
Certificate issuer:       /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2
Certificate serial:       34E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
Manifest number:          34E5
Signing time:             Thu 04 Dec 2025 14:53:35 +0000
Manifest this update:     Thu 04 Dec 2025 14:53:35 +0000
Manifest next update:     Thu 11 Dec 2025 14:53:35 +0000
Files and hashes:         1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: zwVJv3TVLIcjEL3GvlQTO8CNpu7p8MKfXJu1QSw0ntc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl
                          rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 14:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13541 (0x34e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2
        Validity
            Not Before: Dec  4 14:53:35 2025 GMT
            Not After : Dec 11 14:53:35 2025 GMT
        Subject: CN=6931a06f-1d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:48:bb:5a:69:c5:43:80:46:af:42:f6:d7:26:
                    e8:47:92:45:d7:8f:d7:bd:01:f0:bd:76:de:3a:fc:
                    cd:ad:eb:09:10:3b:56:11:4a:f9:c3:37:53:0f:fd:
                    f3:54:ad:5b:02:b0:a7:c5:58:53:ef:66:04:03:a0:
                    ab:94:f3:af:76:c3:af:4b:9b:ae:58:28:ed:c6:c9:
                    c6:14:de:94:f9:13:ef:05:fa:b1:f1:5b:de:c0:6f:
                    0d:83:97:d4:06:c8:0d:15:9f:c7:94:3f:0e:43:d0:
                    38:94:8f:2f:04:fe:4b:f6:ba:5e:d6:b3:95:7e:f4:
                    78:b4:e9:dc:1c:2b:c2:b0:31:39:87:e8:c0:04:e4:
                    62:9b:64:aa:1b:4b:1c:22:0d:e1:0b:1b:a2:8b:8a:
                    f7:8a:dd:0c:20:21:aa:7e:a0:fb:68:1e:bb:17:a8:
                    c8:69:02:8e:76:34:ab:7c:0b:13:62:ea:13:ac:3a:
                    a3:de:36:bb:be:b2:d9:5c:ea:7d:78:07:ba:df:d1:
                    79:37:22:b6:f9:d1:85:3d:66:90:16:8b:ed:30:ec:
                    71:76:f6:e7:75:e3:c8:00:04:2a:e3:46:5b:2c:f7:
                    41:d3:46:7b:39:40:42:a4:d2:59:00:aa:e0:f5:d1:
                    95:3e:75:7a:9c:ca:be:7e:87:2e:38:66:df:a7:f4:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:04:79:04:8D:E3:65:B3:F4:EF:0D:77:14:70:93:4D:3F:97:C6:4A
            X509v3 Authority Key Identifier:
                keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:0d:48:cf:22:f0:90:fc:30:29:e0:4d:3a:f9:a6:3d:da:
         52:6d:37:44:a6:4f:77:a6:33:66:d0:cf:94:49:16:2e:22:14:
         8c:20:5c:79:5b:cd:0a:59:47:80:8d:09:ea:2c:79:91:a9:4b:
         a8:62:19:b6:48:af:5d:37:2f:87:25:e4:0a:55:d8:89:a2:71:
         ef:1b:19:0a:b6:cc:54:a5:ce:51:9d:5f:d8:b1:c8:a6:86:eb:
         77:f8:24:0c:a3:33:14:30:cd:eb:a1:78:dc:02:bc:41:c7:97:
         f1:73:68:30:a7:96:00:ba:a4:b1:df:c2:fd:11:ab:a6:d5:5d:
         0b:58:2a:c7:13:73:c8:a1:cc:3c:64:51:9b:a3:08:ab:f7:ed:
         17:45:8b:24:f1:df:fb:27:0b:79:45:ee:11:a3:6c:3e:2e:15:
         bd:d8:3d:e8:12:17:86:11:c0:b0:33:33:6f:80:28:a2:89:35:
         65:b8:fa:14:d9:84:56:51:96:8f:06:30:a4:ae:06:ef:d1:2d:
         17:3b:d3:7c:17:24:ff:ce:6d:eb:a9:c9:7f:db:0f:db:47:08:
         27:1c:c2:56:34:32:b5:77:d4:b4:5a:45:62:81:32:ce:1d:5d:
         dc:c9:ff:ea:16:b6:5b:b2:7c:6c:f8:aa:97:46:4f:37:f0:19:
         54:5d:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:48 2025 by rpki-client