This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
File:                     1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json)
Hash identifier:          u0uM+RjzCPVhLJ4AMqbVoQMhk9EfzXTbe2vfX01/IG4=
Subject key identifier:   57:6A:A5:91:3A:0C:FB:7C:27:85:27:F9:63:B9:8A:DA:C6:DE:4E:8B
Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
Certificate issuer:       /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Certificate serial:       05E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
Manifest number:          05DE
Signing time:             Sat 06 Dec 2025 21:50:27 +0000
Manifest this update:     Sat 06 Dec 2025 21:50:26 +0000
Manifest next update:     Sat 13 Dec 2025 21:50:26 +0000
Files and hashes:         1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: W3Xe5JM4gEORUvq7F4ulG1rV5443nxwC3NC48oWm/+k=)
                          2: 05A2A4008FE811EEACB1296AC4F9AE02.roa (hash: OvWek+7GoTr0MOzRQOUQXIl3oHCUTRccIlCGDYFLUR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
        Validity
            Not Before: Dec  6 21:50:26 2025 GMT
            Not After : Dec 13 21:50:26 2025 GMT
        Subject: CN=6934a522-d66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:67:a7:26:36:83:8e:22:5e:d9:10:c7:9a:
                    e7:8d:2a:8b:4c:de:59:3b:89:1e:7c:e8:34:9b:f6:
                    b4:8b:90:28:92:8f:84:73:08:76:fe:e7:c7:99:ef:
                    c3:c5:85:fe:d2:be:b4:0c:1e:c3:57:cd:03:20:d7:
                    55:98:5c:67:93:f3:29:71:92:9b:87:b6:52:3c:03:
                    f4:cf:cc:2d:64:54:de:90:10:9d:2d:07:a0:9c:98:
                    72:53:87:57:87:09:12:fa:7d:81:02:97:23:12:ed:
                    83:c0:88:bb:e1:79:4a:12:eb:21:bd:6e:13:22:55:
                    01:ad:f6:51:39:a3:6b:3b:95:e2:01:b6:80:2e:07:
                    c8:08:78:cb:4e:9e:eb:dc:7a:7f:29:ec:63:c3:77:
                    ee:75:dc:12:4b:d3:e2:17:9f:9e:fd:3c:34:e5:1d:
                    1c:66:40:c4:16:6e:5b:05:e4:2c:7a:dd:33:01:23:
                    26:fb:92:56:88:8c:bd:12:4c:4f:4d:f5:39:6d:73:
                    38:c0:e2:a2:74:a6:96:8f:a7:75:ce:44:77:39:13:
                    ec:b7:ef:6c:fe:e9:c0:53:e5:e8:89:5c:06:18:7d:
                    37:b3:a1:9c:da:93:44:74:7b:68:66:53:8a:5d:e0:
                    b1:90:e9:38:f8:4e:71:84:fe:77:f8:bb:a0:83:d6:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6A:A5:91:3A:0C:FB:7C:27:85:27:F9:63:B9:8A:DA:C6:DE:4E:8B
            X509v3 Authority Key Identifier:
                keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:52:0b:c2:c5:d7:af:59:11:92:1d:1c:b7:2a:5e:72:37:be:
         c1:9d:74:87:7d:65:c7:57:4f:40:5e:47:63:33:33:81:bf:eb:
         d4:35:1e:76:a2:63:94:eb:eb:cb:c5:86:b9:a4:c3:0b:59:4a:
         13:79:7b:8b:b8:2c:23:c4:c7:9f:30:de:d5:4f:c1:4e:51:c6:
         c5:fe:bf:f0:1b:a0:16:fd:54:43:08:ec:1f:cd:16:a3:88:75:
         3c:c3:8e:df:9b:10:09:bf:8f:7c:19:ca:34:85:f4:df:b0:c4:
         98:6b:7d:d4:e5:a7:84:4f:2d:09:df:79:fc:b1:44:99:1a:cd:
         a5:0e:60:37:d4:ee:53:58:62:b4:02:08:a0:3a:df:34:6c:9f:
         11:de:62:5d:3b:6a:43:b4:8e:0a:8a:aa:de:3e:c0:6d:c9:d9:
         a7:ec:1a:b2:6c:77:1a:6e:4a:f3:e0:72:83:2e:a9:01:2a:54:
         f2:69:66:42:18:93:ee:e6:91:5f:c8:01:64:ce:ec:1c:a5:ad:
         e8:ae:e5:80:41:f5:17:37:01:18:51:17:19:2f:6f:c2:e6:33:
         03:c5:a0:d0:13:3c:2f:cc:22:ef:80:b6:bb:52:88:95:f0:d3:
         ea:ce:37:aa:79:29:b4:1e:96:dc:58:b3:51:51:65:b2:d1:e6:
         68:4c:3a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:49 2025 by rpki-client