This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
File:                     M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json)
Hash identifier:          2dk6PJss1/KYilsrIP/aodY+BsjAceVwMnLaD4mZFeg=
Subject key identifier:   66:9A:D6:2D:4A:E5:9F:0E:E7:EF:EA:63:E5:84:63:C0:DF:0D:F4:E7
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Certificate issuer:       /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
Manifest number:          011A
Signing time:             Thu 25 Dec 2025 03:50:19 +0000
Manifest this update:     Thu 25 Dec 2025 03:50:18 +0000
Manifest next update:     Thu 01 Jan 2026 03:50:18 +0000
Files and hashes:         1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: //rVLZ7fFidmonLNRLcFP4WgXdh/aDALG6dKtXgW2Lk=)
                          2: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: wTzR2Kl8HLux7RLKUCKwWDVl26livIquwtiZpHpO5LA=)
                          3: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: 4w86q6EWxPppGmN3WAH7cTrMdPvhFQ2gE3GzQQWS4ck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 03:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
        Validity
            Not Before: Dec 25 03:50:18 2025 GMT
            Not After : Jan  1 03:50:18 2026 GMT
        Subject: CN=694cb47b-c734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:b1:9f:02:12:17:63:a9:9b:f1:df:93:a5:
                    5b:e8:53:92:52:d0:24:09:e9:5d:f8:bc:ef:ff:25:
                    51:43:75:39:35:39:75:cb:4a:f4:e2:52:ae:d1:81:
                    72:16:61:fb:f6:d6:fd:e1:f7:d3:aa:c3:ea:df:0b:
                    fd:51:50:b9:23:63:d1:45:98:99:83:b8:54:d0:e4:
                    30:82:b9:a8:17:37:7b:a8:cb:9c:37:f6:90:ee:0f:
                    7e:d1:a8:f6:bb:68:32:f2:cd:e4:85:22:db:98:1c:
                    e3:0b:4f:e8:69:25:81:b9:45:30:32:11:87:75:ca:
                    7e:c2:c6:c2:36:82:45:d8:64:82:9e:e8:32:01:99:
                    7b:41:56:70:ac:af:0c:e5:d9:2b:54:0b:d0:68:ff:
                    5f:f8:4b:ea:05:43:ed:25:2a:77:38:80:c2:04:3d:
                    6e:3b:a7:cd:55:4c:4f:fd:b9:b3:b9:b1:85:15:1e:
                    f8:6c:27:03:18:66:c5:0a:27:d0:78:4f:dc:98:78:
                    36:19:7d:4d:c8:01:cc:f0:19:59:5a:98:30:99:21:
                    55:a2:b8:d7:3d:86:10:6c:e5:85:b1:6e:81:48:ac:
                    0f:64:41:52:43:2a:9d:c4:bb:27:27:84:26:a6:4d:
                    76:d9:84:2f:0d:71:4a:7e:e5:11:b9:65:8a:b6:81:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9A:D6:2D:4A:E5:9F:0E:E7:EF:EA:63:E5:84:63:C0:DF:0D:F4:E7
            X509v3 Authority Key Identifier:
                keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:03:20:0a:4c:26:ce:50:e2:a6:08:93:05:d7:7f:14:b1:b9:
         e0:9c:53:c7:d8:bb:8e:68:25:37:98:c1:78:86:b5:2d:f7:5f:
         87:da:88:46:8d:c5:f4:c0:9f:ba:2b:29:93:e9:8b:d1:27:0c:
         2d:8b:73:96:18:f5:3c:ea:9c:27:2e:1a:fe:25:fa:ce:86:9e:
         79:74:44:0f:c7:77:78:39:5c:b9:ad:4c:f0:dd:81:aa:4f:21:
         ee:03:0d:e2:84:c3:01:87:f0:96:7d:e0:fd:72:0f:e8:94:e0:
         c7:14:08:67:35:b9:ef:d6:1e:36:4f:79:5a:71:f1:2e:82:88:
         77:93:80:8c:35:59:ca:88:c1:a6:69:7e:a6:37:6e:d8:5d:0f:
         6d:2c:a5:02:f5:f4:9e:0a:d9:21:d2:c3:30:ca:e4:c9:7a:ed:
         95:9d:2c:35:dc:22:61:6b:b7:14:5b:aa:d9:3f:aa:43:e7:ca:
         3d:8b:3f:65:f4:00:a9:c2:4a:9c:12:64:5c:b1:67:6a:ec:b7:
         7b:57:ab:b3:65:bc:6a:42:7c:2b:5f:a3:48:6b:94:71:b9:7b:
         4b:00:11:32:75:e0:8c:f6:4c:05:91:83:e3:a5:f9:2c:01:55:
         57:17:62:1c:b8:c5:9c:d7:9d:ff:5d:09:e8:85:e8:b2:bc:79:
         87:89:3a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 23:12:04 2025 by rpki-client