This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
File:                     5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json)
Hash identifier:          NYz0bWV92AljqVHPu2lyYveeWTzhxfPVzyJIFlAWTsE=
Subject key identifier:   8C:07:EF:6D:A4:E3:8C:28:30:E6:6A:55:8D:ED:A1:F3:E8:C3:3E:EB
Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
Certificate issuer:       /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
Manifest number:          01F0
Signing time:             Wed 31 Dec 2025 01:42:33 +0000
Manifest this update:     Wed 31 Dec 2025 01:42:33 +0000
Manifest next update:     Wed 07 Jan 2026 01:42:33 +0000
Files and hashes:         1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: HYzKzswMPGVYA/xib6KmnoNKTjgGWm1yp6K/i2UF82g=)
                          2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: HWnaY2EEm6u/FMZ1I67pi/PyglY7//JccNuuPPpBYpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl
                          rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 01:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115122, serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
        Validity
            Not Before: Dec 31 01:42:33 2025 GMT
            Not After : Jan  7 01:42:33 2026 GMT
        Subject: CN=69547f89-2712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:28:b8:c8:77:df:01:0f:7e:89:79:1d:a1:
                    42:ab:7e:a2:46:e9:68:90:ac:aa:c6:4a:eb:7c:58:
                    c3:e0:72:19:4f:ff:57:fe:eb:ab:b9:c1:f5:26:bb:
                    e4:bd:7a:5d:55:97:fa:5c:80:87:f0:d4:a8:25:6b:
                    13:5b:75:ff:86:03:d5:ef:d8:c3:e7:8f:81:a0:1a:
                    e4:6b:92:69:4a:67:dc:0a:9d:01:a1:90:12:a0:a2:
                    37:89:96:3f:84:fb:32:42:20:61:41:e4:b5:af:e5:
                    d5:90:67:b5:54:9a:96:f3:5a:66:0b:78:53:42:ba:
                    39:16:b9:1e:da:ed:a0:88:8f:e5:59:a4:f0:04:ba:
                    a4:4d:fc:0b:6e:ab:3e:d7:de:cc:20:dc:8a:a9:e5:
                    a8:2f:6a:4e:47:b6:cd:dc:c5:e9:17:82:e3:9d:cb:
                    dd:b8:4b:3b:7f:29:66:0d:2e:54:bd:f1:eb:b1:a6:
                    4a:6e:0c:37:8c:e3:5d:e2:c1:76:52:92:19:6d:20:
                    2e:b9:1f:82:04:1c:3e:1d:0e:5d:33:44:f1:8c:63:
                    5c:7b:2b:60:7c:0c:f0:33:0a:d1:9c:b4:54:cb:1d:
                    8f:82:2b:5e:54:45:03:24:ef:f8:43:dd:c0:f5:44:
                    7d:ec:11:9f:cf:88:ac:d3:e9:ea:7a:12:03:35:31:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:07:EF:6D:A4:E3:8C:28:30:E6:6A:55:8D:ED:A1:F3:E8:C3:3E:EB
            X509v3 Authority Key Identifier:
                keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3e:54:e6:16:ca:50:47:36:f2:c1:03:36:ac:cd:07:fc:f0:
         ec:6e:20:6d:0a:7b:bf:1b:6a:2a:15:a0:bd:2b:1d:75:c2:5f:
         b2:e9:ea:58:12:0a:b9:26:ce:f2:6c:34:11:23:77:fc:ad:28:
         39:9e:17:7c:d1:21:3d:f6:ad:90:89:ac:5d:e0:fc:7a:bc:2f:
         62:65:c8:c7:b4:ae:05:1b:9e:0f:4e:73:e4:84:ab:34:cb:58:
         bd:70:64:01:d5:65:b5:ea:17:fe:df:06:ce:5c:4e:a7:09:1d:
         79:d1:70:91:7d:cd:ed:05:85:b5:0b:61:36:93:22:1a:90:64:
         fa:31:ba:76:c2:9c:d8:e3:71:58:80:7a:44:70:e9:95:10:fb:
         b6:48:d7:1b:ed:6a:f2:8c:7f:f0:6c:5d:73:4b:ba:52:13:cb:
         a1:74:bc:47:ea:fc:94:f7:fc:a3:51:c8:aa:fd:44:72:18:39:
         58:91:5c:51:bb:77:68:42:2e:5f:34:4c:7d:5a:d5:85:24:e2:
         4f:bb:a0:0d:f2:82:43:d2:3c:6a:9b:7f:85:a4:74:88:30:87:
         26:b6:b1:df:6b:d9:81:98:9b:57:9b:62:38:47:69:26:ad:e7:
         41:fb:f7:8d:f8:2a:0a:5f:50:5a:ae:98:e1:a9:62:70:cd:58:
         76:fd:13:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTUxMjIxMTAvBgNVBAUTKEU1MDY5M0NBMTg1QkI2NUQ5MkNBRkIzMEUzNzZGNTFC
OTU5QUQyRDgwHhcNMjUxMjMxMDE0MjMzWhcNMjYwMTA3MDE0MjMzWjAYMRYwFAYD
VQQDDA02OTU0N2Y4OS0yNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5gUouMh33wEPfol5HaFCq36iRulokKyqxkrrfFjD4HIZT/9X/uurucH1Jrvk
vXpdVZf6XICH8NSoJWsTW3X/hgPV79jD54+BoBrka5JpSmfcCp0BoZASoKI3iZY/
hPsyQiBhQeS1r+XVkGe1VJqW81pmC3hTQro5Frke2u2giI/lWaTwBLqkTfwLbqs+
197MINyKqeWoL2pOR7bN3MXpF4LjncvduEs7fylmDS5UvfHrsaZKbgw3jONd4sF2
UpIZbSAuuR+CBBw+HQ5dM0TxjGNceytgfAzwMwrRnLRUyx2PgiteVEUDJO/4Q93A
9UR97BGfz4is0+nqehIDNTHHZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwH722k
44woMOZqVY3tofPowz7rMB8GA1UdIwQYMBaAFOUGk8oYW7Zdksr7MON29RuVmtLY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTEyMi8zMEM3QTM4RUVG
MUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRsMlN5dnN3NDNiMUc1V2Ew
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVRYVR5aGhidGwyU3l2c3c0M2IxRzVXYTB0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTEyMi8zMEM3QTM4RUVGMUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRs
MlN5dnN3NDNiMUc1V2EwdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCVPlTmFspQRzbywQM2rM0H/PDsbiBtCnu/G2oqFaC9Kx11wl+y6epY
Egq5Js7ybDQRI3f8rSg5nhd80SE99q2Qiaxd4Px6vC9iZcjHtK4FG54PTnPkhKs0
y1i9cGQB1WW16hf+3wbOXE6nCR150XCRfc3tBYW1C2E2kyIakGT6Mbp2wpzY43FY
gHpEcOmVEPu2SNcb7WryjH/wbF1zS7pSE8uhdLxH6vyU9/yjUciq/URyGDlYkVxR
u3doQi5fNEx9WtWFJOJPu6AN8oJD0jxqm3+FpHSIMIcmtrHfa9mBmJtXm2I4R2km
redB+/eN+CoKX1BarpjhqWJwzVh2/RNj
-----END CERTIFICATE-----
Generated at Wed Dec 31 08:00:46 2025 by rpki-client