This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
File:                     L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json)
Hash identifier:          wUVhpQSoVdQurzr0aRiGV+kfgJVSR4Yl1a5uCJFLEEg=
Subject key identifier:   F3:B5:42:88:A9:21:5C:2B:F9:C8:05:46:B0:DD:57:6C:89:E4:F0:26
Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
Certificate issuer:       /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
Certificate serial:       058A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
Manifest number:          0581
Signing time:             Mon 22 Dec 2025 22:25:59 +0000
Manifest this update:     Mon 22 Dec 2025 22:25:59 +0000
Manifest next update:     Mon 29 Dec 2025 22:25:59 +0000
Files and hashes:         1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: +WkG1DzPrArWSmjRfEvcxjNHvtEahhWRHEHBAtji0xw=)
                          2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: nbAwbUJb6JF/EVgcBuo6b8RRtXcpwDWvIQu43r6H87s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl
                          rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144266, serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
        Validity
            Not Before: Dec 22 22:25:59 2025 GMT
            Not After : Dec 29 22:25:59 2025 GMT
        Subject: CN=6949c577-4fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:db:ad:77:8a:e2:96:31:a6:36:c2:79:bf:
                    5c:2a:85:0c:2f:69:b5:89:91:04:fe:68:5e:62:9d:
                    b7:49:37:c9:8f:33:ad:04:72:8d:9f:d6:47:08:01:
                    fe:5c:0a:b5:a0:b6:a1:de:e9:8f:f5:e0:88:ff:ac:
                    89:81:46:64:f4:43:6e:64:3f:b4:4e:b7:a8:2c:56:
                    86:53:27:24:8b:c1:78:74:a6:68:c0:f4:07:86:0d:
                    d7:e1:0c:52:f0:72:83:98:fd:ea:9f:1c:ee:15:94:
                    ef:c4:9b:e1:97:40:e8:46:25:5e:be:a1:64:a7:36:
                    99:a2:fe:5b:0a:ca:f3:06:7b:d2:4c:48:82:57:4f:
                    b6:a6:73:6d:7d:fd:1d:31:8c:e4:23:96:be:a3:6b:
                    a6:7b:ab:19:b9:8f:16:2c:aa:98:03:eb:a0:b9:33:
                    86:04:8a:04:87:7e:41:fa:de:66:d1:68:82:67:1a:
                    70:1f:40:fe:b6:bf:6f:8f:a2:71:c5:15:2b:d1:99:
                    5f:8e:e3:6b:3c:24:b5:48:e5:d9:9a:87:e8:42:11:
                    1b:13:d5:b7:25:83:2e:7f:fc:ab:4f:fb:c8:ec:2d:
                    b9:7b:3b:fa:5e:dc:14:f8:70:36:29:b4:5b:87:0f:
                    87:97:0e:dd:0d:db:d3:64:21:a1:9a:a6:03:9a:5f:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B5:42:88:A9:21:5C:2B:F9:C8:05:46:B0:DD:57:6C:89:E4:F0:26
            X509v3 Authority Key Identifier:
                keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8a:ff:28:db:09:a9:22:c3:fe:04:17:86:8b:1a:10:82:5f:
         4f:5d:c6:3e:06:38:8d:9f:48:0e:5e:df:94:bb:e2:cc:0e:71:
         0a:2b:99:52:06:4c:d0:49:d8:62:70:3f:89:a1:84:ff:02:84:
         d9:3c:5a:2b:87:69:7a:91:2c:1a:f3:06:d8:44:b7:08:0d:2f:
         e0:8a:1d:38:1b:29:f6:b4:48:55:91:6c:36:57:0d:12:8f:76:
         dc:57:cd:f0:1e:7f:92:dd:f5:b4:92:60:ad:9d:cd:78:e2:03:
         1c:df:f7:a6:e0:79:98:ae:aa:24:ac:4a:80:d4:28:5c:2c:58:
         90:6a:cc:04:4f:6a:fc:6d:9e:9a:32:5c:0d:e4:0c:3b:00:1e:
         69:a6:84:d7:74:a2:ad:e1:9e:db:85:24:43:75:9b:85:df:fe:
         59:ce:d7:37:a0:03:ce:97:1a:7a:d6:56:07:86:24:da:25:4b:
         d3:2a:93:33:6e:fb:7a:9f:29:c4:1f:26:2b:60:ad:f8:dd:4e:
         d2:ca:62:17:96:03:64:5b:8a:63:e9:98:a6:82:4c:3f:f1:79:
         89:61:7a:26:5e:21:e9:7d:db:d8:b0:8d:ac:ec:af:7b:2e:d1:
         ba:98:ad:11:7a:09:24:91:e2:3b:5c:fd:93:30:8f:b4:f2:06:
         72:e8:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:23:38 2025 by rpki-client