This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
File:                     5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json)
Hash identifier:          ckIBiu62AjnpBYCoO+3a5cfkMx2KzVCnCEmomoddUns=
Subject key identifier:   53:E4:61:8E:80:5D:3B:77:09:6A:C1:36:36:9C:DB:9B:01:BA:68:56
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Certificate issuer:       /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial:       06E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
Manifest number:          06DB
Signing time:             Sat 20 Dec 2025 21:24:08 +0000
Manifest this update:     Sat 20 Dec 2025 21:24:07 +0000
Manifest next update:     Sat 27 Dec 2025 21:24:07 +0000
Files and hashes:         1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: iJba8sA5/38SzgyjXaTcKejZKViyZy2PKZDqKAUQ2A8=)
                          2: CB39C1A0B3B611F0BAAB2960C4F9AE02.roa (hash: ihHUjtZqZJt66QnOXqHfkpUa1k+8R7/9ey9CEIS3+2U=)
                          3: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: S4JJ7jAyBRSnbNqlDJcNsJ3iSBBNhU/Ff59dfcwJJB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1765 (0x6e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
        Validity
            Not Before: Dec 20 21:24:07 2025 GMT
            Not After : Dec 27 21:24:07 2025 GMT
        Subject: CN=694713f7-c74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:b7:06:bc:39:0d:dd:19:9d:40:a4:94:f9:
                    88:1a:e6:19:76:59:ed:08:66:96:85:97:3b:e8:4b:
                    75:be:9d:da:7b:51:67:7c:93:91:65:e4:f5:70:88:
                    35:66:d3:3e:15:89:3c:d4:8d:59:9b:d2:99:0d:b7:
                    2f:33:4e:c0:5e:d8:66:2e:63:a8:20:1d:5f:dc:2b:
                    19:05:df:c5:2b:a7:0f:e8:c6:23:b5:9f:81:d9:17:
                    47:dd:a6:37:14:a9:d4:86:05:45:0a:7f:90:1f:04:
                    d7:8b:cf:5c:a9:7e:2f:e3:03:8a:87:76:f1:c6:20:
                    e7:31:ba:c3:d3:8b:ce:59:e5:fa:cb:83:4f:6d:7d:
                    d0:25:30:ec:d1:e2:f2:f7:71:41:4f:49:0a:2f:41:
                    90:a8:f5:37:a9:81:c9:97:84:b2:02:21:df:4e:d9:
                    54:a4:85:1a:c5:b0:04:2b:d9:eb:af:ac:d6:24:22:
                    da:d8:ae:4e:a4:83:1d:30:8f:87:6d:fa:9a:68:eb:
                    e5:a2:34:11:c8:5f:cf:8e:4c:f9:37:b9:db:45:c1:
                    94:57:b1:f9:bd:55:7f:ef:af:2e:3c:4c:ce:cd:7f:
                    21:3d:1c:7c:f2:fd:9a:71:d2:0e:84:9f:12:4d:eb:
                    b0:6d:c0:ef:73:74:62:58:cc:88:26:ff:c2:43:40:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E4:61:8E:80:5D:3B:77:09:6A:C1:36:36:9C:DB:9B:01:BA:68:56
            X509v3 Authority Key Identifier:
                keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0a:45:90:91:16:0b:9f:d2:06:d9:34:39:67:94:df:87:69:
         a3:12:87:0e:63:a2:ef:16:fa:e4:9c:e6:c8:0a:40:e5:d1:fe:
         13:c7:23:f4:3f:41:4d:b2:6e:01:48:e0:92:27:6a:ed:74:44:
         44:6a:17:2b:91:6d:d2:ac:33:d3:75:a1:48:a1:dc:a5:31:8e:
         f9:4d:a2:58:c7:d4:b3:f6:ba:51:41:f1:67:78:c4:f5:56:df:
         b2:cb:8a:f0:91:0a:59:4d:96:5d:ed:4a:4c:ff:18:5c:be:8c:
         47:22:9e:ea:4a:74:9a:74:70:a4:c0:af:88:24:6c:8b:c7:c1:
         fc:ff:81:7f:ab:44:e3:71:26:76:7e:27:53:c4:fc:44:3f:76:
         d6:3f:95:de:c0:eb:18:ea:fb:03:f5:10:10:e8:a9:5e:17:33:
         02:a4:75:0f:46:d0:64:a1:42:0f:29:58:40:a3:f6:3c:4d:de:
         7b:2c:87:64:e8:61:e9:2f:f2:70:4b:e6:bb:f4:cb:c6:50:84:
         4b:bd:c7:57:cf:ae:17:b0:59:5f:b4:b0:32:dc:11:6a:13:68:
         09:e0:fe:f5:b7:b2:22:e9:e3:ec:ed:5e:5e:1d:63:25:ee:5e:
         1b:85:9e:1e:ac:c6:97:2b:96:33:1d:03:79:a9:d9:a6:08:79:
         1f:59:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:16:56 2025 by rpki-client