This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
File:                     4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json)
Hash identifier:          epE1tGqG6duMZrUHhEmXO/HyJcicv8A4wWnVqAE/M80=
Subject key identifier:   BE:7B:AF:98:49:6E:2A:20:E1:83:F0:57:DF:4F:67:11:CF:4A:FE:A7
Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
Certificate issuer:       /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Certificate serial:       02DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
Manifest number:          02D9
Signing time:             Thu 04 Dec 2025 23:42:27 +0000
Manifest this update:     Thu 04 Dec 2025 23:42:27 +0000
Manifest next update:     Thu 11 Dec 2025 23:42:27 +0000
Files and hashes:         1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: fwh5wgmD1+/WhZXH2rFtmSIL2qJ3X/fKIrFKsCYurqQ=)
                          2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
                          rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
        Validity
            Not Before: Dec  4 23:42:27 2025 GMT
            Not After : Dec 11 23:42:27 2025 GMT
        Subject: CN=69321c63-e65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:2e:47:3b:44:2d:16:e7:e8:d3:af:26:78:
                    d9:af:ca:89:74:c4:bf:cf:5d:1d:c4:8a:e4:0b:5f:
                    75:7d:17:c8:75:b1:5e:37:9c:7b:39:7d:e0:47:d4:
                    4e:eb:f7:39:96:4c:60:06:64:51:d2:b8:34:68:c3:
                    12:a3:90:ba:98:5f:69:7e:3a:f9:f1:22:00:36:26:
                    73:28:d1:d0:8b:d3:98:55:bb:d6:d2:4f:ec:b5:b7:
                    a1:9e:b3:d7:ac:b5:7b:03:9c:d5:a0:99:cc:eb:ef:
                    26:a5:fe:92:17:26:84:74:9b:dd:64:b0:97:a7:21:
                    de:ad:dc:a3:78:73:84:c5:4a:3f:1f:10:58:6d:53:
                    31:30:4d:67:dd:10:e6:ec:6f:15:f3:41:1a:cb:e6:
                    d4:95:17:5e:cb:c7:ae:ef:03:54:f9:86:12:f6:20:
                    f5:02:53:56:9e:69:07:82:ee:da:b2:d8:7d:6a:65:
                    9c:71:1c:97:3f:62:be:5b:68:68:3c:45:df:c3:52:
                    c8:1d:ca:c2:3e:d0:e1:09:ec:1d:94:6b:f8:2f:a7:
                    15:bb:5e:3f:11:b4:4e:1e:3a:a4:98:75:0e:64:30:
                    89:0a:0d:6e:dd:b1:05:57:8c:c5:8d:ef:18:b9:2d:
                    e4:cd:65:b6:27:29:6a:34:37:25:52:24:19:8d:79:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7B:AF:98:49:6E:2A:20:E1:83:F0:57:DF:4F:67:11:CF:4A:FE:A7
            X509v3 Authority Key Identifier:
                keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ef:5c:de:df:a8:6a:f5:5c:90:22:fb:48:69:be:9c:f8:db:
         a0:41:01:61:fd:d3:f3:f0:7c:a4:ab:8d:ed:cd:01:6c:0e:a3:
         2e:f7:9f:86:c0:51:08:c1:37:24:0e:c5:3b:2c:27:af:be:f3:
         1e:71:70:94:d8:f8:ac:42:e8:2f:4f:43:1c:72:e3:df:77:68:
         13:c4:be:07:88:d4:3a:83:24:7d:a8:2e:f5:8d:0b:9a:53:21:
         a0:94:77:6f:38:d2:2f:dd:b5:94:8b:0b:cf:1b:5c:24:be:eb:
         d0:ff:0c:47:18:5b:d1:ef:1c:ea:fa:77:8a:d2:c4:d7:dd:d5:
         97:7a:47:d1:02:85:90:40:59:91:ea:1f:b5:e6:3b:e0:a8:df:
         cc:5e:e3:c4:bb:3d:31:08:ea:f5:bc:e4:37:86:99:b9:fd:74:
         16:60:c9:76:12:b6:aa:7d:d8:e5:f6:36:38:ec:24:19:56:6a:
         3d:5b:72:a6:63:f5:a1:81:11:73:12:fd:85:45:be:96:72:f2:
         1c:74:2e:81:11:08:90:2a:ae:fb:23:78:71:c9:79:b3:7e:99:
         5c:39:a4:a2:5d:71:c5:db:52:7f:bb:3a:90:3e:05:e9:6c:a3:
         36:8f:27:21:d7:77:08:5f:32:d4:37:78:d1:63:24:13:79:93:
         3e:1e:a1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:12 2025 by rpki-client