This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
File:                     l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json)
Hash identifier:          /dWfaVq/z2mioSBfXn3UF/I40AoAQqnsIbmaIQ5AKuQ=
Subject key identifier:   76:31:A1:98:D1:A6:68:A8:AF:19:45:D9:1B:10:44:FA:98:39:DC:CE
Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
Certificate issuer:       /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
Certificate serial:       0470
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
Manifest number:          046B
Signing time:             Thu 18 Dec 2025 23:29:35 +0000
Manifest this update:     Thu 18 Dec 2025 23:29:35 +0000
Manifest next update:     Thu 25 Dec 2025 23:29:35 +0000
Files and hashes:         1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: WIMXCrwDZmr7lVC9sOTDPxbBesmX4qwznbN423XV/UE=)
                          2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: 6m2q3lRXLAFrPlHDZxzNnpenf3mKGBo+gMVhi6EnOZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl
                          rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91309C9, serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
        Validity
            Not Before: Dec 18 23:29:35 2025 GMT
            Not After : Dec 25 23:29:35 2025 GMT
        Subject: CN=69448e5f-9117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:25:dc:27:0e:ff:25:1e:3c:92:ae:73:13:
                    07:1f:2f:f1:43:09:2e:65:d0:3b:ae:5c:26:06:cf:
                    f5:f2:1e:41:a5:35:be:cc:34:45:13:16:3b:fe:32:
                    6d:99:80:26:98:a1:e9:40:de:41:e1:0d:5b:35:18:
                    5c:b1:5d:85:83:41:86:58:34:f6:26:af:2e:4d:0a:
                    d5:d4:50:9a:50:70:b7:ef:4a:0a:2d:25:05:f6:02:
                    32:e4:7d:8f:d8:69:78:da:bc:92:28:0f:46:bb:d1:
                    0d:f0:46:97:64:5b:c1:ab:13:18:79:33:e2:a9:37:
                    8d:98:ce:3b:b7:9e:99:75:d6:48:7d:52:4b:b6:67:
                    68:c2:d2:d7:62:6d:cd:51:9d:e3:88:6d:c3:c6:e1:
                    eb:66:68:95:1c:5f:a6:30:cc:ec:86:c3:0b:ff:e9:
                    90:4d:79:9d:68:59:f8:5f:bd:d7:6d:5e:c8:c3:4a:
                    f7:b1:55:80:85:a3:23:3c:e8:82:cb:bd:4b:66:ed:
                    ee:fe:4a:f9:62:7a:df:ed:e5:d1:a6:2c:f0:af:a4:
                    00:a7:9a:56:89:04:a4:b3:ff:69:65:9d:89:99:d4:
                    d6:7d:81:af:c1:c8:e0:a7:61:0c:16:a4:d7:8a:fd:
                    45:c1:fc:52:45:70:22:93:a8:7d:3a:49:c3:be:c8:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:31:A1:98:D1:A6:68:A8:AF:19:45:D9:1B:10:44:FA:98:39:DC:CE
            X509v3 Authority Key Identifier:
                keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:ed:ed:52:39:f8:97:e9:4a:76:bc:ba:38:ea:21:5f:3c:
         78:a9:bf:86:77:9e:14:94:24:98:1c:56:a3:42:3e:de:68:c0:
         34:3b:51:61:a9:6b:7c:ae:85:77:9e:0e:3a:8c:d5:1a:b2:74:
         24:bc:38:46:0c:e1:df:d9:19:9d:86:e6:86:85:2c:df:96:a9:
         5d:85:f7:b8:c6:6e:6d:6e:7a:ec:48:df:3c:d6:9f:ad:5e:e2:
         91:13:d2:19:05:f2:bd:06:39:35:01:dd:10:a6:08:07:7c:e6:
         d1:ed:da:69:34:0b:8d:34:c6:73:fc:b9:eb:fd:e1:9e:dd:25:
         4c:46:5f:f2:32:90:31:77:c4:e4:52:56:c2:ce:bd:9c:78:fb:
         4e:10:bb:e2:5b:19:7e:65:be:f8:17:11:b2:31:e5:0a:e9:d2:
         f6:83:1c:f5:59:05:4e:ca:c2:82:39:a2:0e:75:93:26:0c:5f:
         ba:4b:db:31:79:b9:08:88:a1:c7:1d:31:ee:2d:d9:91:ea:d4:
         41:63:fa:f5:13:75:0c:e5:9a:a0:89:ab:42:aa:26:53:12:64:
         64:d3:88:16:80:3b:8c:31:80:9c:ce:13:59:d2:2a:83:3d:63:
         88:41:e9:bb:9a:d4:15:51:16:b9:94:2c:08:1a:c3:fc:80:60:
         dd:c0:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:41 2025 by rpki-client