This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
File:                     V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json)
Hash identifier:          fNQU6Iag84qE+rK86aCK7CSodeA9cQ7ZhaA5bsPPN1g=
Subject key identifier:   83:5F:8E:F4:36:36:13:ED:40:42:17:95:31:8B:A0:1B:2F:CA:C0:EE
Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17
Certificate issuer:       /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
Manifest number:          01C2
Signing time:             Fri 19 Dec 2025 02:10:34 +0000
Manifest this update:     Fri 19 Dec 2025 02:10:34 +0000
Manifest next update:     Fri 26 Dec 2025 02:10:34 +0000
Files and hashes:         1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: /sRMwOn195QuviwG7YNc9kXmzdHW67NOfb89QCxtm8Y=)
                          2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: hskv6e7Ag+5HAqH/N4O5ItTvOGPOLGR+/yJDzJO0d+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl
                          rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017
        Validity
            Not Before: Dec 19 02:10:34 2025 GMT
            Not After : Dec 26 02:10:34 2025 GMT
        Subject: CN=6944b41a-2ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ca:e6:a9:8c:49:f8:90:2d:03:f2:98:db:f5:
                    f7:bf:fb:27:a9:1e:57:c3:97:56:ff:c9:aa:d9:98:
                    25:fc:ac:c2:02:50:96:71:3e:ed:4c:44:d6:f8:ca:
                    4c:30:8f:2b:08:d4:b6:69:1b:37:16:de:bf:14:9e:
                    42:3b:0e:0b:0a:72:82:c6:90:ed:eb:5e:bb:53:10:
                    18:bd:42:be:8e:64:15:f7:a6:23:da:36:f1:df:95:
                    a4:49:3d:51:e6:46:ad:4d:f0:8c:fa:ca:be:1c:5e:
                    b9:6c:22:e2:a0:cf:6f:ef:26:1b:68:93:1f:72:79:
                    57:a3:d1:74:0e:42:68:69:8e:97:73:70:bb:69:59:
                    ce:fa:e6:96:e2:51:3d:14:65:d8:df:92:f7:7b:a4:
                    90:7e:ae:29:ff:a4:a1:23:64:df:48:80:2b:b7:90:
                    28:fd:94:44:0f:70:f8:eb:b5:75:54:9d:e9:66:75:
                    53:a3:d1:a2:54:b1:95:b8:b2:45:51:0f:dd:e9:e9:
                    1e:7c:b1:47:51:96:d4:56:4d:df:e1:9e:9c:61:e2:
                    78:18:17:e8:38:94:79:e1:64:e0:93:40:5e:e8:25:
                    91:81:a2:f8:25:de:9a:ff:6a:42:2f:89:55:be:10:
                    00:b7:37:3a:c0:ef:44:36:58:a3:a5:e0:8c:46:27:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5F:8E:F4:36:36:13:ED:40:42:17:95:31:8B:A0:1B:2F:CA:C0:EE
            X509v3 Authority Key Identifier:
                keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7c:01:85:24:90:1a:f3:63:5c:bb:2d:ca:42:23:a0:26:59:
         48:4c:c7:fe:35:7b:d7:24:22:56:f3:95:7d:eb:53:a9:8b:74:
         a4:b9:ad:35:38:d8:91:b0:12:ee:41:c3:31:91:6d:27:14:dd:
         52:4e:04:72:49:17:95:c7:11:97:59:92:8c:5a:60:97:1b:46:
         5e:70:72:b0:c9:31:ce:05:97:eb:ce:ad:85:de:ae:f0:52:78:
         be:09:1d:54:1c:d7:e4:33:c2:9a:51:46:6e:e3:d2:72:84:eb:
         28:40:a3:f1:3c:c8:1d:9d:7f:f3:9a:08:e8:c7:87:bb:19:3e:
         ec:cc:26:c8:fb:ae:e2:82:bd:aa:7f:e1:10:3b:fe:e1:4d:fd:
         83:46:0e:fc:18:64:ba:ae:23:fc:4b:20:41:95:55:9c:54:d4:
         f3:04:e3:40:a0:a2:9a:89:8d:dd:a8:aa:f5:96:35:65:a4:1a:
         71:a2:a5:60:34:1f:98:56:b7:66:68:5b:e6:01:ad:b3:2e:21:
         d2:61:3a:b8:a1:4f:d7:d7:74:ce:bf:56:f1:ca:e7:1f:c7:e5:
         2b:ec:55:8a:07:c8:e2:7c:ac:2e:a4:5b:ac:1f:ce:ec:9b:75:
         08:be:d6:cd:4a:ac:47:81:97:15:7c:c3:aa:d1:d8:61:2d:e5:
         84:b8:f4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:06:05 2025 by rpki-client