This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
File:                     5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json)
Hash identifier:          GcuG6KjTkOssNXEscH7HZhA6JtaI8JOCaaaPrJcdI30=
Subject key identifier:   96:39:9A:A2:19:7F:41:8A:C2:C9:9F:D2:2F:70:84:09:71:E7:68:F1
Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D
Certificate issuer:       /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
Manifest number:          D4
Signing time:             Fri 05 Dec 2025 03:45:02 +0000
Manifest this update:     Fri 05 Dec 2025 03:45:02 +0000
Manifest next update:     Fri 12 Dec 2025 03:45:01 +0000
Files and hashes:         1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: QvwjEAXKt/OZ/nyMwJVi0aC9RA428mN9nndT1/Txdns=)
                          2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: sqDKPZ1qrocmicYcNGEqHeOR7eFUFOhb8W65lVkqel0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl
                          rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
        Validity
            Not Before: Dec  5 03:45:02 2025 GMT
            Not After : Dec 12 03:45:01 2025 GMT
        Subject: CN=6932553e-8245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:39:9f:40:0f:18:8b:bb:09:4a:88:21:72:0b:
                    7c:8c:6f:b7:cd:1a:99:73:37:70:5d:93:52:15:4c:
                    77:c5:b4:fc:46:eb:53:96:60:6f:20:b7:6d:2d:08:
                    b5:e4:4e:95:bd:64:65:a7:18:94:20:46:7f:28:20:
                    22:86:cf:17:e7:77:07:9c:98:44:cc:4c:69:cb:04:
                    09:01:54:05:38:1c:73:bb:e8:28:fc:0c:ab:5c:bc:
                    91:f2:d2:e0:81:31:24:1e:34:b2:d0:3e:b7:0a:78:
                    ee:76:d6:51:b3:d7:29:53:95:58:51:25:1c:05:c7:
                    81:c2:d5:d3:97:f4:5c:9c:bf:98:3d:c7:8f:a5:41:
                    f9:d6:1b:aa:a3:f6:61:09:5e:e5:ef:fb:fa:df:a8:
                    82:5f:3f:c9:13:f4:e3:ba:c9:a2:e1:0a:03:8d:68:
                    f3:6c:4b:c2:ee:49:cc:c0:52:5b:63:e0:bf:38:03:
                    b7:a3:08:83:94:a1:eb:cc:e8:fb:66:62:e6:bd:53:
                    fb:e0:2b:a8:ab:76:45:d4:18:72:c2:da:85:de:62:
                    02:90:b5:6c:f7:5b:95:82:c7:d3:f9:ec:91:76:e6:
                    f7:b8:3f:85:89:c0:fe:08:07:8a:86:38:66:8f:b8:
                    79:65:c5:ef:cc:75:0a:7f:2c:3b:41:f7:e6:0d:bb:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:39:9A:A2:19:7F:41:8A:C2:C9:9F:D2:2F:70:84:09:71:E7:68:F1
            X509v3 Authority Key Identifier:
                keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:26:fe:ad:10:12:64:d5:0e:54:be:5f:32:72:66:5d:2b:fa:
         8f:1c:c9:97:30:fa:93:32:b2:6d:0a:d3:72:8c:2f:3f:3e:7e:
         17:26:e3:fa:2c:53:98:9a:1c:67:65:4a:e2:a2:26:54:e8:df:
         e6:0c:a9:d2:77:52:bb:1a:46:4d:ea:e9:bd:e5:ed:6d:cd:a5:
         01:ff:17:32:14:5f:ae:f4:a8:93:c3:a5:98:02:2d:7c:97:17:
         26:e4:87:87:14:43:eb:d3:f4:af:5b:f2:a3:6f:09:c5:e2:c6:
         90:14:6c:c9:db:27:ee:24:4c:1f:fb:c6:6a:a0:ee:90:d5:27:
         11:7e:1b:d9:8e:da:b7:c6:c6:a4:38:4a:2c:63:ca:4a:c3:c0:
         14:14:80:57:e7:26:57:58:80:e1:06:0b:fd:23:58:1c:16:a5:
         3c:97:28:2e:8b:a5:1b:2c:be:b8:9f:6b:3d:d7:2b:2d:ac:39:
         f5:19:e3:84:08:8e:1b:50:ab:98:68:3c:21:59:55:83:a6:3a:
         73:e6:0c:c5:d0:be:26:53:7e:6c:50:5b:55:f0:2e:69:b5:89:
         33:c1:9e:f2:12:98:9b:5b:bd:8a:14:f7:d3:23:a2:07:6a:5e:
         7f:77:01:36:51:84:60:70:34:41:f7:18:1a:97:bf:a6:36:58:
         d4:f1:e7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:24 2025 by rpki-client