This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File:                     WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier:          qp7KHONwl3k2kHOZNioLfKl77zhrcfVI0Z5jOkAikmg=
Subject key identifier:   C3:5E:1F:48:62:7E:F9:29:B0:48:9F:8F:A6:AC:BF:C5:74:5F:A7:BF
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer:       /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial:       05FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number:          05F5
Signing time:             Thu 04 Dec 2025 21:38:53 +0000
Manifest this update:     Thu 04 Dec 2025 21:38:52 +0000
Manifest next update:     Thu 11 Dec 2025 21:38:52 +0000
Files and hashes:         1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: JLo4ctfGMLR/KqAAF1pHazRIHCkOEu8rF7dfUWLsCmQ=)
                          2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: 1L+jLLrprvKBkFZBr/XRqOG/ctfBn+soIRnPIIukpBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531 (0x5fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
        Validity
            Not Before: Dec  4 21:38:52 2025 GMT
            Not After : Dec 11 21:38:52 2025 GMT
        Subject: CN=6931ff6c-ff24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:70:72:54:78:57:dd:c7:cc:d5:2e:4d:dd:
                    e4:e5:d9:cf:72:f5:e2:99:c4:24:12:33:99:bb:7f:
                    e7:1d:0e:f3:a2:72:9a:5b:cf:7d:10:c9:e5:74:83:
                    6d:bb:b6:53:2e:ef:f0:76:32:24:a2:3d:66:1d:42:
                    bd:3a:41:14:38:9b:71:62:15:39:5a:fd:47:7a:55:
                    ae:7d:b4:26:51:a2:61:10:84:69:41:64:b2:fe:2b:
                    41:87:6a:81:5f:e6:e7:6a:17:21:ec:7b:1c:eb:01:
                    7b:ca:82:ed:88:18:32:0b:87:b2:a3:23:83:96:b9:
                    24:de:71:f5:c9:73:79:ac:b3:0f:92:80:e4:a1:5b:
                    ae:53:7e:eb:38:d0:ef:88:05:b8:cc:24:1e:64:56:
                    bf:10:06:81:1b:b1:c2:76:c8:99:56:88:c7:8d:f9:
                    29:25:b9:30:c0:b9:59:0c:2a:71:8f:a0:f4:d9:c4:
                    4c:27:47:19:a9:95:f8:79:c3:fd:12:81:0d:18:d5:
                    48:7f:34:e1:c9:36:f8:7c:72:a7:8e:88:3d:14:b2:
                    f0:43:31:1d:b9:5e:8c:26:48:a4:8a:3c:7d:d1:da:
                    fe:64:3b:1d:68:7a:9e:bb:d8:90:f5:74:a1:d5:a0:
                    8e:ec:8c:95:1f:a6:f5:66:3a:4c:07:93:88:9a:59:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5E:1F:48:62:7E:F9:29:B0:48:9F:8F:A6:AC:BF:C5:74:5F:A7:BF
            X509v3 Authority Key Identifier:
                keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:19:f9:e5:e4:5d:0c:96:b8:5e:e9:23:1f:dc:29:a4:44:61:
         86:c2:64:af:98:74:fe:7b:ab:b6:c0:50:37:b8:b3:c3:44:93:
         84:35:5b:4a:e5:cd:75:48:f8:c7:39:4f:b1:d4:4b:d8:02:e6:
         81:64:41:e6:54:10:af:eb:68:20:2e:27:f2:3c:4a:d3:6b:6a:
         41:62:44:6b:b8:5f:f4:40:c8:68:38:d2:5d:f5:0f:ea:6a:a7:
         bf:25:b7:7e:35:fa:2d:b8:2a:50:58:66:dd:8a:8c:95:54:fa:
         0c:b0:53:09:c1:34:34:b8:91:9a:14:c3:c3:33:d3:da:95:f1:
         be:8e:da:e0:65:79:38:f8:b8:d4:e5:72:d4:7e:a2:55:e9:7f:
         1a:1d:4c:f9:a5:e7:9e:d6:1f:3f:d6:f8:4b:f2:d9:a1:6d:e0:
         a0:b0:d8:6d:f1:c0:57:49:f2:63:f0:88:f9:73:5b:95:bc:3a:
         8d:e8:a8:08:65:df:cc:c2:6d:26:97:08:a1:10:20:6f:d1:33:
         e1:1b:32:ae:fd:cd:05:e8:d8:24:1a:24:a9:ed:a3:e3:6d:37:
         9a:9f:a8:17:4c:4c:93:81:4e:a7:6c:5f:6e:20:6f:de:b4:b7:
         05:3c:a7:96:e8:26:57:e1:22:98:48:7e:31:c0:ed:60:7a:69:
         7c:18:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:33:31 2025 by rpki-client