This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
File:                     5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft (raw, json)
Hash identifier:          rUypdc2oIUOf/eylr3OJXlIkJaSSDBcZeVAEtooedY0=
Subject key identifier:   B1:EF:04:A1:53:1F:DB:B5:1A:54:DB:00:EC:1E:21:F4:FB:CF:93:58
Authority key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE
Certificate issuer:       /CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
Manifest number:          0198
Signing time:             Wed 31 Dec 2025 02:35:49 +0000
Manifest this update:     Wed 31 Dec 2025 02:35:48 +0000
Manifest next update:     Wed 07 Jan 2026 02:35:48 +0000
Files and hashes:         1: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl (hash: UIL6ge4Xp0u1XZqf8CUATHjOLBnLfTCOerLxrYx/uhg=)
                          2: 63EC7E9476C211EE9FDED166C4F9AE02.roa (hash: 5kehy6INc2ToLeOi19J6b3LvAIXj1iv4FwMeLT93MH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl
                          rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 02:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91164FE, serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
        Validity
            Not Before: Dec 31 02:35:48 2025 GMT
            Not After : Jan  7 02:35:48 2026 GMT
        Subject: CN=69548c05-b53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:63:f5:1a:28:91:9a:b5:0d:4f:78:7a:26:a2:
                    88:0b:df:7e:d4:77:3c:e0:ee:b8:7e:e3:35:4c:7d:
                    e5:e8:f0:c3:d7:6f:e0:ae:1e:49:9c:aa:31:c6:bb:
                    11:be:0f:6a:77:e7:b7:a2:9b:c1:3b:5b:97:08:0f:
                    e9:36:1c:7f:ee:b9:cd:e6:f5:8e:84:e6:73:d1:9a:
                    43:6a:f9:ef:62:69:9c:6a:bf:78:37:89:ee:d6:6c:
                    e6:d5:71:37:f5:dd:97:ac:1d:87:9a:43:77:76:21:
                    7a:35:cf:5c:5f:6d:b2:b3:ab:4a:25:91:83:49:d7:
                    de:89:e6:7c:39:bf:fe:2f:0b:c6:eb:96:14:ec:9b:
                    67:1c:34:bf:01:e0:10:a2:26:d5:6d:6a:5f:d0:71:
                    a6:17:d9:e2:93:38:0d:1d:d9:38:63:71:e8:c4:4f:
                    a6:7c:90:8d:89:99:88:e7:91:a7:c7:73:ae:59:95:
                    bf:19:f1:d5:86:c2:50:0d:9a:e2:46:52:09:74:ff:
                    35:67:19:e4:18:56:c4:2b:06:6c:97:92:d0:4e:b8:
                    ed:a3:ff:9d:b1:82:c3:f9:d2:d7:6f:cf:a0:0b:13:
                    bd:57:de:4a:1d:f5:f7:dc:14:d8:ec:52:61:85:8e:
                    cd:64:50:a5:4d:ba:08:60:58:26:70:79:79:ce:43:
                    ad:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:04:A1:53:1F:DB:B5:1A:54:DB:00:EC:1E:21:F4:FB:CF:93:58
            X509v3 Authority Key Identifier:
                keyid:E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:d4:fc:e5:8e:fe:d8:95:5f:02:b0:fd:40:54:48:9c:63:0a:
         83:34:e3:28:e3:3b:af:c8:ba:2b:20:a9:24:5f:cc:36:1f:bb:
         33:4a:ed:e6:0c:3b:9b:54:d2:30:a2:41:41:9a:3c:b6:c0:30:
         74:72:db:43:2b:0d:f6:78:d6:eb:41:e5:81:6a:3c:16:ab:73:
         0d:89:e5:0e:c1:52:92:53:26:c8:a7:cd:72:2a:a3:a3:41:2f:
         80:9d:4a:23:c4:c2:c8:ed:34:8e:b3:d7:71:1e:f8:f4:2a:af:
         77:e3:0b:c7:e7:ee:43:22:08:22:09:bc:14:3f:ca:c9:63:1e:
         fb:47:b8:67:40:d8:b5:11:1f:51:95:48:bc:84:5f:ed:26:76:
         db:07:7c:90:c7:9c:ef:bb:6d:47:66:64:3c:ce:6c:1f:e5:b6:
         ff:e2:8b:1b:a9:2f:4b:60:77:6d:01:78:60:e6:5a:25:f1:89:
         cc:62:23:39:4f:d2:b3:b3:18:8d:ef:88:be:52:73:f7:50:bd:
         1d:41:50:cc:6d:55:51:2b:61:38:c6:cd:d9:20:18:6a:9b:c9:
         4e:9a:0a:29:f6:70:a7:02:a9:c0:0c:a6:63:98:53:e8:53:b4:
         18:ea:7a:3f:81:04:53:09:9a:6e:97:2d:21:c2:f5:f4:e8:ac:
         f2:86:61:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 09:21:25 2025 by rpki-client