This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File:                     5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier:          EEiBfTr0PvDso6mMegYm7WUMnHD4bzt5wS/Gx8AbYcE=
Subject key identifier:   28:DF:6C:F6:3F:39:CC:71:EC:69:A7:3B:7B:B6:72:F7:AA:25:E6:B0
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer:       /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number:          012A
Signing time:             Fri 19 Dec 2025 03:50:02 +0000
Manifest this update:     Fri 19 Dec 2025 03:50:01 +0000
Manifest next update:     Fri 26 Dec 2025 03:50:01 +0000
Files and hashes:         1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: Fj5EJxMqfY8xl2oTB1os4dnAeBYvezSSh/erCUQQkp8=)
                          2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: CpFFYzKvaiG5h+2sUf464A2//gzHqQgpH0EvUR1TKwU=)
                          3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: 51G/atnUP8WE3vN2KzPoIXBsyS6vS2RXr0QbqdKbjAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
                          rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
        Validity
            Not Before: Dec 19 03:50:01 2025 GMT
            Not After : Dec 26 03:50:01 2025 GMT
        Subject: CN=6944cb6a-ef40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:70:10:e6:e8:38:34:4d:ad:7f:e1:06:2e:
                    61:b6:a5:03:ec:f1:c1:34:c2:15:a9:5b:26:d0:33:
                    c2:18:15:fe:2e:e1:83:41:cb:35:52:e2:ad:c4:3f:
                    3b:2e:ba:fb:58:c6:03:c8:3e:45:cc:50:d5:55:99:
                    6f:3f:e4:53:e7:16:15:f5:71:ac:d9:26:e1:b3:cf:
                    06:43:3b:aa:ae:eb:82:24:fc:29:3f:6f:b7:db:ea:
                    22:ca:4a:c1:18:70:ee:12:a5:68:9a:dc:73:13:e1:
                    55:75:6f:7c:37:bb:bf:a2:17:ba:9f:74:49:c7:6f:
                    c4:44:f4:fc:33:30:90:32:ac:9a:00:4a:d5:13:fa:
                    a1:d8:50:7e:c7:a9:f4:b6:78:a2:3b:35:d1:69:44:
                    ab:82:b9:b9:c4:0e:db:49:a9:97:07:54:aa:25:c2:
                    e1:35:c7:b2:4a:00:0a:79:39:5f:22:48:b9:19:b1:
                    4d:63:b7:df:fb:dd:e2:1d:4e:2a:03:6f:16:57:0d:
                    14:bd:8d:2d:01:30:4c:af:6b:af:f2:8a:e4:24:ff:
                    cf:f6:f3:80:9b:a2:4d:de:b2:44:41:97:1a:76:fe:
                    c4:43:55:eb:62:f9:ef:b4:92:fd:80:9e:68:ea:18:
                    c7:7c:e2:df:a6:41:8f:8a:ae:f4:1d:28:72:66:ba:
                    a3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DF:6C:F6:3F:39:CC:71:EC:69:A7:3B:7B:B6:72:F7:AA:25:E6:B0
            X509v3 Authority Key Identifier:
                keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:9d:f0:75:25:a2:a7:5a:93:40:67:fa:b7:15:04:a9:58:a1:
         bb:e0:35:df:99:7b:97:cc:bf:8d:f4:79:f4:82:2a:e4:b2:a4:
         37:7e:b8:d0:11:51:1a:74:e6:dc:92:c5:4f:19:d6:de:67:99:
         69:cd:db:ca:6f:27:00:2c:db:3d:88:00:04:83:45:59:32:24:
         b0:69:38:29:df:ae:f1:52:f3:b1:91:b9:1c:99:8d:ae:07:2f:
         9e:ad:a9:fb:a5:a0:b3:9b:08:61:de:0f:3f:37:ee:d1:3f:60:
         19:bd:40:bf:aa:10:5d:a0:f7:39:1b:8b:46:86:63:2e:aa:68:
         ad:5a:b8:90:80:59:2e:60:97:63:4f:e6:be:58:3b:02:8a:97:
         71:05:38:87:02:08:5d:c5:9a:e3:19:48:7e:45:0f:df:54:fb:
         b7:0f:2a:fa:a5:3b:04:0f:d3:26:37:31:b4:77:17:fc:ef:d9:
         c6:19:35:79:98:3a:b4:98:94:55:06:29:4e:e9:51:00:23:0c:
         5d:ca:98:84:cf:59:9a:38:7b:a1:a6:34:b6:a5:99:c7:44:95:
         56:02:2a:78:20:62:ba:f2:80:ed:f1:a2:28:b3:64:bf:78:89:
         44:8f:bd:b6:df:2d:07:83:3a:a1:73:17:82:05:e9:84:c9:c0:
         1b:b9:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:06:21 2025 by rpki-client