This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
File:                     5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json)
Hash identifier:          MrW5TOuTxHKOmmDqFpNvGbDvIp5LYTldgkBdMxT01O4=
Subject key identifier:   D1:45:26:75:51:77:23:A9:D0:D5:AB:E3:75:FF:0E:4B:3C:BB:6C:B7
Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Certificate issuer:       /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Certificate serial:       34F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
Manifest number:          34F0
Signing time:             Sun 28 Dec 2025 14:39:31 +0000
Manifest this update:     Sun 28 Dec 2025 14:39:30 +0000
Manifest next update:     Sun 04 Jan 2026 14:39:30 +0000
Files and hashes:         1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: C91+rVXc61hdmkCG0NkqO/1Ae1FtSlMY1Do1wmJ1K3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
                          rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 14:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13552 (0x34f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
        Validity
            Not Before: Dec 28 14:39:30 2025 GMT
            Not After : Jan  4 14:39:30 2026 GMT
        Subject: CN=69514123-6373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:de:84:84:cb:78:b3:56:ba:88:e1:f9:a5:
                    38:2c:48:b6:6a:a5:c2:3a:01:9c:9a:f4:f4:b8:51:
                    83:91:fd:8d:b9:58:82:2d:88:fb:b2:23:3e:6d:36:
                    06:ff:f8:6f:2a:cc:af:30:34:0b:98:7c:80:f3:09:
                    aa:5a:06:01:7f:5a:0d:82:29:9e:1c:d7:06:23:30:
                    75:20:a8:cf:1f:da:e9:c3:1f:d6:a2:a8:70:ac:40:
                    e0:cf:58:ff:89:73:e5:6a:35:9c:75:21:8f:c4:a3:
                    c3:2b:4a:49:71:e3:48:78:e9:11:b3:05:c0:30:e6:
                    30:a5:c2:52:da:f3:f3:ab:63:e6:8f:ec:57:a2:b3:
                    81:1e:cb:02:88:c2:25:b0:09:44:26:83:2f:3a:79:
                    7e:0e:5d:bc:f3:da:f6:be:a1:f8:7b:28:93:27:ca:
                    06:f7:ae:f7:62:a2:e9:ea:1c:8d:ab:dc:fb:c7:b5:
                    e8:3e:5b:31:6a:b9:5d:bb:7c:15:de:48:f9:df:fc:
                    23:2f:40:fd:47:21:e9:fc:08:df:84:2a:45:6f:c8:
                    2d:7b:90:6a:82:74:31:ad:50:76:f9:d4:b2:cc:16:
                    1f:c7:4a:90:55:f8:78:33:40:29:40:9e:24:8b:57:
                    85:a3:2e:bf:f3:ec:15:0e:e5:89:84:ad:4b:0a:e0:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:45:26:75:51:77:23:A9:D0:D5:AB:E3:75:FF:0E:4B:3C:BB:6C:B7
            X509v3 Authority Key Identifier:
                keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:e8:49:27:dd:6e:1d:69:0f:48:95:fa:0f:0a:2f:2f:a4:
         37:15:94:26:76:60:20:d9:4e:74:30:f1:f5:c5:b8:d2:09:b3:
         83:de:64:9c:65:25:26:36:bf:20:41:5c:7a:73:81:0d:b9:84:
         22:1e:b1:eb:6a:40:49:4a:4e:3e:66:7c:55:15:e3:70:b9:11:
         eb:77:e7:45:95:61:17:1f:38:88:c3:2c:44:47:bd:ce:22:c6:
         fd:35:72:2b:f4:87:25:03:87:c8:58:b3:6b:75:0f:cf:bb:a9:
         49:b5:1e:d7:fd:46:9e:64:12:42:b9:9c:c9:77:c9:21:00:c6:
         d5:0b:3d:3b:ee:69:52:4c:78:69:16:c6:a8:69:15:2c:0d:2f:
         64:e7:a4:06:8d:2b:69:a7:03:38:44:f2:92:1c:37:26:ab:11:
         e9:aa:d5:7a:15:64:89:9c:f9:fa:65:22:7b:8f:e5:80:b3:f9:
         b0:0a:88:5a:cd:36:9e:fe:74:bb:5c:21:c3:d4:35:94:54:35:
         c0:ee:3b:97:a2:f4:71:af:cc:32:4c:03:2b:8f:95:fe:c0:d9:
         c2:2f:99:f1:1e:9a:a3:a4:75:3b:a6:d9:bd:44:6d:f3:33:e8:
         fa:91:b1:78:6a:ea:e3:e2:4c:ad:69:90:03:c4:43:b0:7c:87:
         8d:b8:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:07:19 2025 by rpki-client