This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
File:                     F5SMh3nFnmXK_OLv3LHLUJEThEw.mft (raw, json)
Hash identifier:          ffQ2EJEZPp/UzSYHwuZgiMnp5AF1Uw7jEEorDP0DEGU=
Subject key identifier:   FE:42:A3:19:63:08:D5:2E:22:6C:75:E5:1D:75:C9:E7:07:A6:8B:55
Authority key identifier: 17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C
Certificate issuer:       /CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
Certificate serial:       0770
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
Manifest number:          0769
Signing time:             Thu 18 Dec 2025 21:06:25 +0000
Manifest this update:     Thu 18 Dec 2025 21:06:24 +0000
Manifest next update:     Thu 25 Dec 2025 21:06:24 +0000
Files and hashes:         1: F5SMh3nFnmXK_OLv3LHLUJEThEw.crl (hash: YX3XvbwC2QSxpfw7d+40ShiCdNF/Rnl81jY5DLKTCbc=)
                          2: 7A75D42E45B211EB99335867C4F9AE02.roa (hash: GKPR6zFK13dOjlTVTXGtpPUXXgx8Vh8Pymb7zpt05uA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl
                          rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FC0B, serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
        Validity
            Not Before: Dec 18 21:06:24 2025 GMT
            Not After : Dec 25 21:06:24 2025 GMT
        Subject: CN=69446cd1-7a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:4d:82:e1:81:98:ab:2e:8f:2f:59:da:72:
                    01:29:c3:37:eb:03:bb:f2:55:a8:a0:5c:69:a9:d3:
                    85:aa:c3:91:1b:41:5a:cb:ed:44:8a:a7:d4:87:ee:
                    e1:ef:9a:9b:b6:56:3a:51:ca:6d:5e:34:71:9a:6a:
                    59:b8:66:a9:ef:ad:6a:f8:7c:91:84:28:8b:dc:d5:
                    29:d0:0c:db:50:28:40:f6:51:94:a4:f7:0c:09:0d:
                    0c:1d:b4:aa:f8:58:41:00:0d:46:c7:52:28:ef:b2:
                    bf:ff:92:24:f8:63:1f:86:48:c9:7f:11:7e:0e:e9:
                    fc:61:1c:0a:97:b5:0d:75:36:c0:37:50:cd:82:36:
                    85:56:04:fc:a2:dc:c1:10:7b:60:8b:a7:aa:be:ad:
                    07:a2:38:90:c4:14:ba:13:70:4f:a1:0b:6e:f2:4c:
                    e0:83:59:97:7d:c1:7d:58:df:a9:66:dd:51:da:81:
                    08:62:01:a3:cc:cb:f1:58:6a:ae:7a:04:b0:8c:91:
                    1b:2d:e2:2f:dc:54:cb:7c:ae:9b:a9:14:c8:2b:dc:
                    65:4c:de:86:5d:b2:c3:61:ba:1d:c0:71:be:02:75:
                    ab:7c:a3:83:99:0d:60:4b:f8:f2:16:dd:03:bb:cd:
                    b2:79:ec:73:4d:cb:21:f1:fd:cf:d8:1d:34:21:7f:
                    50:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:42:A3:19:63:08:D5:2E:22:6C:75:E5:1D:75:C9:E7:07:A6:8B:55
            X509v3 Authority Key Identifier:
                keyid:17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:61:47:26:b3:94:5a:4a:a8:12:80:ec:77:5f:cd:59:19:c3:
         13:e6:4b:0e:6d:fa:02:77:7f:5e:91:6a:e4:2d:99:b1:bc:f6:
         05:48:2c:1a:37:77:23:08:26:1a:52:45:c6:5d:b3:7f:39:9e:
         63:ca:36:e6:aa:9e:61:75:6f:7d:ff:7f:4e:ef:4a:35:cc:cb:
         a5:ae:b4:27:af:dc:91:d4:65:03:a6:97:49:5b:8f:e4:f0:c4:
         af:db:16:48:37:ce:c6:fe:f9:1d:b8:8a:3d:09:08:bd:af:83:
         1d:bc:50:22:5b:dc:32:de:75:5e:33:20:2c:8c:88:db:9f:0a:
         0f:67:5e:d5:a1:27:af:ee:7d:68:dc:35:52:67:73:9e:88:8f:
         7e:99:4f:c3:75:dd:cb:18:e1:97:2e:92:e6:81:ea:9d:f5:8a:
         41:90:e9:c9:4f:f9:ca:08:27:b4:dc:7f:83:44:2e:b3:77:b2:
         2e:cb:32:e2:6a:93:e5:41:a6:7f:24:42:e6:42:9a:2b:42:92:
         bb:44:49:67:cd:78:df:8e:ae:6f:cd:5a:6d:d3:d6:29:73:e4:
         6a:73:5e:cc:1d:a9:16:fe:4f:28:6a:93:76:e3:00:b8:40:9f:
         bd:fb:dc:f3:7f:a3:79:e3:5f:5f:e1:f7:0f:98:b9:b9:42:a1:
         c0:cc:48:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:17:23 2025 by rpki-client