This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
File:                     5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json)
Hash identifier:          socH8XxT1vSSgFxcpnUBxMRyD5A91WUtQ3hXijpffDM=
Subject key identifier:   19:90:0F:4F:34:8C:2F:61:B9:8A:34:4B:76:23:74:0C:EE:D7:68:C1
Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
Certificate issuer:       /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
Certificate serial:       0B3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
Manifest number:          0B2C
Signing time:             Sat 20 Dec 2025 18:48:46 +0000
Manifest this update:     Sat 20 Dec 2025 18:48:46 +0000
Manifest next update:     Sat 27 Dec 2025 18:48:46 +0000
Files and hashes:         1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: HM3cCeMzFujHQZo7xtWxqVPWHz3YLkEEEVLIPkcKKWw=)
                          2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: lHB3EjiVIRGj7eZK04nTZOWleSjetiCEVc7tdPvMiiA=)
                          3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: iND3Lx5ArlZCn+bmlp3Mm/3K9nvCqz4EFEYZ5pfFFhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
                          rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2878 (0xb3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
        Validity
            Not Before: Dec 20 18:48:46 2025 GMT
            Not After : Dec 27 18:48:46 2025 GMT
        Subject: CN=6946ef8e-03fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4d:b8:a1:c4:56:83:dc:85:02:ba:9b:b2:fa:
                    e1:fd:29:b2:11:50:ca:7a:09:65:b7:47:1a:26:dd:
                    79:68:5a:65:de:b4:f1:55:f6:a8:ad:4b:7a:6f:e9:
                    cb:d3:96:ef:3b:04:c4:ef:b8:5b:f2:a4:f6:84:ed:
                    36:3a:c0:ff:58:c5:ee:4d:fb:5b:18:09:86:5d:b6:
                    a9:39:47:5c:fd:6b:e7:78:fd:61:3d:92:04:d7:86:
                    07:c6:ac:16:3b:15:60:7e:ac:5b:cc:fc:57:8d:6a:
                    8d:81:ba:c7:ca:8e:55:e5:3b:8c:38:76:36:32:ce:
                    0e:cd:fd:4d:f1:7b:e4:56:ac:b0:12:24:8a:c1:db:
                    83:9a:fc:54:69:f8:63:2a:44:85:d7:c2:fb:1d:e1:
                    82:4e:69:8c:29:af:21:77:1e:76:ee:10:43:20:d7:
                    54:80:67:7f:7e:5d:85:ac:b2:2e:6f:8a:0d:a3:a0:
                    64:f1:c6:53:ad:ae:59:1f:8c:7a:a9:f4:06:c4:8f:
                    be:9c:0a:c6:c5:19:e6:0b:cb:d5:3a:48:d8:bb:0d:
                    c4:bd:ef:b9:89:a4:68:4d:71:0a:f6:c6:b1:36:ed:
                    09:10:b7:3f:90:6f:18:9e:5b:a7:46:dd:8c:89:4e:
                    37:7a:08:f0:bb:09:ba:c8:16:f8:41:43:f3:04:42:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:90:0F:4F:34:8C:2F:61:B9:8A:34:4B:76:23:74:0C:EE:D7:68:C1
            X509v3 Authority Key Identifier:
                keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:03:fa:68:7d:04:09:f5:e4:c0:75:71:7f:f5:17:19:6b:53:
         40:af:22:ad:73:61:fa:01:f0:cb:da:fb:3c:16:e9:2a:1c:98:
         b2:16:c9:cc:2a:42:80:e6:3a:7d:72:d5:95:79:6a:94:63:4d:
         00:62:07:00:ae:ed:38:af:ad:c2:a6:38:49:85:38:33:fa:2c:
         43:07:0f:81:c3:12:c4:66:fd:08:a4:02:1f:27:93:10:8c:16:
         89:89:63:d6:21:bd:a9:df:b0:bf:e7:5b:60:94:e9:b8:66:4e:
         a5:20:4f:46:f6:b9:7d:e1:dd:49:0f:f5:56:e4:9d:3a:e4:bf:
         0b:54:8d:ac:ef:89:5b:d2:c5:11:10:fe:87:d3:3c:8f:19:9e:
         6a:78:11:db:e6:9f:9f:1f:56:26:c9:6b:0d:56:8f:97:f9:4b:
         c8:f0:98:4b:18:48:5f:96:ac:53:c1:16:57:35:47:08:11:8c:
         4d:7f:fb:47:4c:c3:3f:5c:b0:16:ff:43:81:fb:b5:9b:78:f1:
         f2:bb:46:2d:ac:c2:8d:7f:52:74:87:3d:ac:71:95:42:72:74:
         07:a0:e7:fe:14:ca:c8:94:9c:b9:1d:07:b0:c6:b1:b8:28:54:
         16:f6:8b:3b:7a:cf:27:cc:d2:69:f7:8a:66:95:2c:e9:9a:3a:
         37:ed:08:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:50:01 2025 by rpki-client