This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
File:                     w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json)
Hash identifier:          j9jC+RyfZIKJMj3qW0cUxn77FxCTdClMEyF7SRb8FUw=
Subject key identifier:   D5:F9:49:9A:46:7A:4A:D7:80:E1:45:49:A7:16:77:A7:B3:01:8C:DC
Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Certificate issuer:       /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
Manifest number:          010E
Signing time:             Mon 29 Dec 2025 04:02:27 +0000
Manifest this update:     Mon 29 Dec 2025 04:02:26 +0000
Manifest next update:     Mon 05 Jan 2026 04:02:26 +0000
Files and hashes:         1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: vvCcig8xVzwRs+/o736ir7v/QWnwbduNpgJ3zTUDM48=)
                          2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
                          rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 04:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
        Validity
            Not Before: Dec 29 04:02:26 2025 GMT
            Not After : Jan  5 04:02:26 2026 GMT
        Subject: CN=6951fd52-d6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:ce:db:85:50:b4:72:5b:39:24:bf:e0:e6:
                    b3:24:8e:f5:58:d2:e5:58:1e:40:99:11:82:c7:d1:
                    f0:f3:d3:0f:b7:09:60:3e:18:62:da:69:fd:2b:38:
                    71:19:86:4d:cd:76:68:71:bf:f5:2c:bc:02:9a:57:
                    5c:e7:5a:b6:40:ab:fe:2f:2f:f0:e1:3e:48:c9:2b:
                    97:ef:a5:f1:04:e8:35:d1:13:e2:74:f6:e8:16:0c:
                    02:69:0e:30:24:07:da:1d:5c:1b:fb:df:27:fa:6f:
                    5f:75:ab:8b:b1:88:cc:06:de:b7:4c:34:ae:67:ab:
                    fc:f3:0d:cb:12:a2:6c:ab:0c:31:74:7f:a4:2f:f3:
                    99:74:3b:73:73:de:6c:f6:83:71:3f:16:44:7a:c3:
                    56:17:23:ad:8c:d6:fc:68:0b:d7:12:76:34:ea:87:
                    6f:08:5a:98:76:59:e6:ee:7d:d5:77:63:41:13:5a:
                    98:17:74:55:e6:e5:2d:8f:5f:82:fa:e0:e5:4b:59:
                    e8:56:a8:4a:49:f1:92:e0:fb:6d:d6:5d:a6:c5:4f:
                    8b:89:a7:6b:66:24:fb:00:e5:d4:4b:82:f6:d7:96:
                    dc:ad:0e:04:84:cd:11:d0:65:aa:b2:65:bf:c8:64:
                    da:96:9b:d6:45:f9:4d:77:d1:6c:2f:52:ef:a4:3c:
                    17:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F9:49:9A:46:7A:4A:D7:80:E1:45:49:A7:16:77:A7:B3:01:8C:DC
            X509v3 Authority Key Identifier:
                keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:35:3c:a4:67:89:88:e6:44:d8:7e:36:8e:4d:71:e7:36:72:
         6a:77:cb:57:46:78:72:ba:50:78:ad:89:73:7e:67:66:91:b6:
         8e:5a:09:63:78:dc:1c:b2:76:92:87:b4:9a:f7:21:51:5d:73:
         2e:85:3d:67:5c:7d:a1:e2:8b:cc:d1:38:3f:c1:4e:1b:a3:19:
         be:0e:aa:51:0e:13:ec:aa:5d:ed:fc:45:d4:0a:81:14:3b:ba:
         0e:b9:b4:a4:c3:b2:e7:9e:a1:05:8d:d3:70:d0:de:d5:1d:85:
         7e:58:55:83:6f:36:7f:a9:ce:28:47:2e:9a:b8:75:df:9d:88:
         0c:d9:3a:35:5a:c6:70:bc:90:9f:6d:6a:62:ee:3e:9b:e6:74:
         9d:b0:70:25:01:62:e0:06:39:52:0c:93:e5:dd:b6:a8:c8:e0:
         6b:5c:5d:08:72:9f:e1:90:f6:96:55:71:bf:0f:4c:06:fc:42:
         b9:38:e7:10:5f:c2:af:8e:9e:24:73:6d:e6:7d:b9:ab:64:1f:
         4a:d8:7b:c3:3c:ae:db:24:77:98:e2:f9:3c:8b:e0:4a:17:c8:
         89:5f:7a:41:48:0a:74:41:41:91:a2:67:01:09:9f:48:b1:ab:
         f1:c5:c8:70:61:41:df:5b:41:f2:14:b3:90:78:8f:83:88:90:
         9e:07:61:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEMkIxMTAvBgNVBAUTKEMzOTNCQ0RGN0Q0NUE3MTk2RkYzQ0Q2RDMwRDYyMzBE
RjRGREM1N0QwHhcNMjUxMjI5MDQwMjI2WhcNMjYwMTA1MDQwMjI2WjAYMRYwFAYD
VQQDDA02OTUxZmQ1Mi1kNmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVPO24VQtHJbOSS/4OazJI71WNLlWB5AmRGCx9Hw89MPtwlgPhhi2mn9Kzhx
GYZNzXZocb/1LLwCmldc51q2QKv+Ly/w4T5IySuX76XxBOg10RPidPboFgwCaQ4w
JAfaHVwb+98n+m9fdauLsYjMBt63TDSuZ6v88w3LEqJsqwwxdH+kL/OZdDtzc95s
9oNxPxZEesNWFyOtjNb8aAvXEnY06odvCFqYdlnm7n3Vd2NBE1qYF3RV5uUtj1+C
+uDlS1noVqhKSfGS4Ptt1l2mxU+LiadrZiT7AOXUS4L215bcrQ4EhM0R0GWqsmW/
yGTalpvWRflNd9FsL1LvpDwXfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX5SZpG
ekrXgOFFSacWd6ezAYzcMB8GA1UdIwQYMBaAFMOTvN99RacZb/PNbTDWIw30/cV9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi9GQzExQkZEMjQ1
QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4bHY4ODF0TU5ZakRmVDl4
WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3c1TzgzMzFGcHhsdjg4MXRNTllqRGZUOXhYMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUQyQi9GQzExQkZEMjQ1QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4
bHY4ODF0TU5ZakRmVDl4WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCINTykZ4mI5kTYfjaOTXHnNnJqd8tXRnhyulB4rYlzfmdmkbaOWglj
eNwcsnaSh7Sa9yFRXXMuhT1nXH2h4ovM0Tg/wU4boxm+DqpRDhPsql3t/EXUCoEU
O7oOubSkw7LnnqEFjdNw0N7VHYV+WFWDbzZ/qc4oRy6auHXfnYgM2To1WsZwvJCf
bWpi7j6b5nSdsHAlAWLgBjlSDJPl3baoyOBrXF0Icp/hkPaWVXG/D0wG/EK5OOcQ
X8Kvjp4kc23mfbmrZB9K2HvDPK7bJHeY4vk8i+BKF8iJX3pBSAp0QUGRomcBCZ9I
savxxchwYUHfW0HyFLOQeI+DiJCeB2Gv
-----END CERTIFICATE-----
Generated at Tue Dec 30 15:02:05 2025 by rpki-client