This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
File:                     5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json)
Hash identifier:          ymc7c4sbYzDFkNXZZmq3xD76/F7AzFfKC96Tl54cz0s=
Subject key identifier:   36:A8:F6:3A:8F:9F:71:BF:AE:8C:B1:ED:82:D7:0A:6E:25:35:CF:20
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Certificate issuer:       /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial:       0412
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
Manifest number:          03F2
Signing time:             Thu 18 Dec 2025 23:51:33 +0000
Manifest this update:     Thu 18 Dec 2025 23:51:33 +0000
Manifest next update:     Thu 25 Dec 2025 23:51:33 +0000
Files and hashes:         1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: rrdotlttEewcownGvDyMURo1qld5f5QTE+Rx0g3fJig=)
                          2: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: Tmlv9BK30imfTfrshHMTQPIJahQY5Ioivr1iDa4bJ+8=)
                          3: C8165660822F11EEABA7D533C4F9AE02.roa (hash: DSv2nGwTSEj42RfPbSo3xkl2KSy/0hQM67/1VYPFqfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
                          rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
        Validity
            Not Before: Dec 18 23:51:33 2025 GMT
            Not After : Dec 25 23:51:33 2025 GMT
        Subject: CN=69449385-c917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:41:14:c3:e0:c7:00:4c:37:2c:da:57:0e:
                    0d:9e:07:b6:35:60:a2:81:92:19:29:38:be:b4:29:
                    74:8e:aa:94:ad:5f:57:68:f0:e7:0a:e5:c1:66:ad:
                    ea:3b:a3:f3:a2:41:71:cd:86:48:1a:61:0e:1c:82:
                    8e:66:aa:a4:21:11:75:48:f0:7d:43:a6:2c:64:9e:
                    be:33:35:e3:98:c6:0e:96:ba:6f:c7:64:7b:b4:5b:
                    fe:6f:90:df:6e:8e:29:21:a8:a8:c2:05:fe:bb:87:
                    8a:bc:05:bd:5f:82:a3:b2:cb:8c:37:ca:d4:0d:5d:
                    45:c2:01:05:6e:23:7b:b9:cf:d1:71:60:0b:a1:1b:
                    ea:66:a4:cd:6a:a1:82:c3:d5:d3:ea:92:e1:28:d0:
                    89:f6:47:f6:1a:a7:73:3e:de:41:61:f7:6c:e7:e4:
                    3d:2b:ca:d6:fe:7c:67:1b:a9:bc:03:0e:78:10:22:
                    33:e7:24:93:01:75:9d:3c:98:07:94:5e:94:a1:23:
                    d7:d7:fa:2a:2a:ea:9f:b2:50:ee:be:4e:38:c9:73:
                    e6:6d:53:83:1e:34:d4:80:23:6e:be:20:1d:17:e6:
                    24:54:34:f2:67:b0:47:60:0a:57:96:c8:b5:56:fc:
                    e7:06:ea:4d:b7:4a:58:f6:94:ec:5b:7a:04:bd:2e:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A8:F6:3A:8F:9F:71:BF:AE:8C:B1:ED:82:D7:0A:6E:25:35:CF:20
            X509v3 Authority Key Identifier:
                keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7a:c5:17:2c:3b:15:e0:f0:9f:87:26:6c:e8:41:5c:a4:da:
         0c:e3:1c:9b:bb:27:cc:f5:7f:9a:12:1e:4c:20:c1:9e:4c:06:
         ef:8d:5b:86:11:fc:62:86:2f:12:b7:88:0b:61:aa:3a:b4:4c:
         c8:10:65:ab:04:2d:61:14:fd:4e:d2:59:a7:bf:b3:e5:13:68:
         af:c2:44:78:40:45:42:31:59:4b:b1:0c:b7:b2:10:88:a5:be:
         16:05:b7:b8:8e:62:89:84:5b:0b:96:35:c3:a8:ae:91:93:aa:
         4a:01:2b:52:58:f4:9e:54:09:a2:50:9b:4b:49:b2:b4:ac:b8:
         50:e5:dd:cd:82:8a:d3:30:ec:c3:98:df:63:72:bc:00:0f:03:
         ba:56:81:eb:7b:4c:d0:50:bb:14:8e:46:b6:fe:95:e0:21:bf:
         1b:6b:ca:38:9d:c6:43:6f:e6:c8:c8:77:b1:25:d4:6e:40:59:
         d0:9f:ea:63:1f:1f:be:ee:3a:a7:a0:63:6b:03:af:57:f8:05:
         76:b7:28:a9:16:0d:ce:6e:f6:49:66:b8:1a:90:b9:87:97:b4:
         97:6f:ff:93:ec:75:75:cf:24:c3:3c:09:8e:90:09:55:33:d0:
         f5:09:9f:fc:a1:c4:dd:65:6d:4f:d1:46:a6:92:2c:5b:d1:73:
         0c:35:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:58:56 2025 by rpki-client