This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
File:                     5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json)
Hash identifier:          XBwvSe48ImdwlEKqk5Rl7Paqd5aDp2TWfDPUVjkUcTQ=
Subject key identifier:   E6:EF:60:F5:40:BD:25:1C:E8:76:CC:16:83:7D:3D:2E:2B:22:1E:4E
Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
Certificate issuer:       /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Certificate serial:       02F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
Manifest number:          02EE
Signing time:             Fri 19 Dec 2025 00:28:44 +0000
Manifest this update:     Fri 19 Dec 2025 00:28:44 +0000
Manifest next update:     Fri 26 Dec 2025 00:28:44 +0000
Files and hashes:         1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: BSu79M5RZLo70hXrSm0tBDAeadHJMS5rWSS0iCXMOjY=)
                          2: E757164C074511EDB229157DC4F9AE02.roa (hash: onRdgGkpkgbRrilTwhd//fNz2yNBz6ru8beWXJE4ohY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
                          rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
        Validity
            Not Before: Dec 19 00:28:44 2025 GMT
            Not After : Dec 26 00:28:44 2025 GMT
        Subject: CN=69449c3c-8c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:f9:cf:38:62:8d:71:76:3d:6d:8c:64:56:
                    8c:32:ce:5c:c8:66:95:e0:50:30:94:5d:7e:e3:43:
                    03:f3:de:a6:96:62:3c:8a:6c:9b:c2:59:a5:74:db:
                    6a:d8:d9:8e:e7:6c:9d:ee:10:12:9c:05:bf:23:25:
                    c2:e5:db:93:2e:bd:de:ec:6d:be:46:b0:0c:ba:1f:
                    0a:d8:4a:ba:27:b4:47:dd:c0:d5:d9:c2:10:e9:eb:
                    9b:e5:a8:34:eb:bf:1b:2d:27:67:74:4d:a1:57:2d:
                    33:4e:45:5b:7f:ec:15:46:3f:24:55:52:d2:10:18:
                    2d:7d:f3:05:dd:ac:d2:f2:f5:2b:0b:d7:46:f6:60:
                    9c:8a:11:3a:27:0d:a9:48:12:28:27:6d:e7:d5:f3:
                    95:f6:ac:26:15:65:5f:9c:34:78:2c:3a:c9:57:44:
                    8c:69:0d:93:83:91:68:c2:a0:ae:d7:c4:b1:5b:3b:
                    33:0a:84:27:9c:e2:2b:d3:83:9d:de:06:b5:4a:15:
                    e6:14:15:f3:a8:cb:31:a3:93:f9:69:d5:cc:31:dc:
                    7d:ac:d7:65:1f:43:f7:7c:e6:18:47:cb:8c:18:26:
                    59:06:51:d8:be:05:db:6f:2e:a4:55:bc:13:21:b0:
                    80:3c:23:2f:40:95:2b:fb:a2:d6:39:6e:13:a3:8c:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EF:60:F5:40:BD:25:1C:E8:76:CC:16:83:7D:3D:2E:2B:22:1E:4E
            X509v3 Authority Key Identifier:
                keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0b:70:dc:92:fa:88:c1:bb:bf:61:5c:ad:8c:5c:f9:7a:5c:
         da:f1:d4:ad:40:0a:94:70:7b:f0:20:fe:58:b4:50:3b:3d:24:
         83:d2:5f:87:e7:1b:71:1d:75:0f:bd:62:f8:8e:4e:6e:bd:13:
         d0:63:ba:13:40:e1:3b:e5:77:84:57:e3:22:d4:15:89:ef:2c:
         67:24:f8:b7:9b:87:0c:cd:5a:2e:b3:ec:a2:42:9b:4c:cb:21:
         af:98:80:ed:80:8e:1e:44:c8:b4:4d:0e:4b:9d:ab:c1:a4:68:
         5b:9d:73:03:c3:26:9e:56:5b:a6:44:f6:0c:8a:26:d8:1a:80:
         a1:cb:4a:b0:fd:de:f6:42:1c:ab:31:cf:54:cb:21:ad:94:34:
         40:df:a1:74:ae:8d:3b:45:38:0a:32:4e:7f:9a:9c:4b:07:ca:
         b8:80:96:f3:3a:8a:04:1e:46:38:dd:b5:9c:e5:d3:b1:64:0d:
         e6:b3:3e:67:cc:f4:71:8a:bb:51:dc:a6:2b:85:24:9b:97:20:
         9e:f2:05:0f:a7:86:d5:f0:88:f3:f7:c5:77:50:f5:ce:68:31:
         91:62:f8:aa:96:6f:ef:23:d9:32:87:1e:d0:b4:4c:85:1b:c4:
         d1:00:2d:b2:b4:31:bd:3f:ec:27:08:df:3a:fe:ea:e4:00:87:
         fa:8b:fc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:01:43 2025 by rpki-client