This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
File:                     5x94KlPaFtsf0wxsDSYVQnUipt4.mft (raw, json)
Hash identifier:          xbhyDoZT+WfW73VWD5ZZdOscjPAgODaUD07aJgHq5V0=
Subject key identifier:   65:2D:02:F3:97:DA:70:E8:91:1E:C7:29:74:5C:9F:03:E5:BF:34:9F
Authority key identifier: E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
Certificate issuer:       /CN=A918ADBA/serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
Manifest number:          10
Signing time:             Fri 19 Dec 2025 06:54:29 +0000
Manifest this update:     Fri 19 Dec 2025 06:54:28 +0000
Manifest next update:     Fri 26 Dec 2025 06:54:28 +0000
Files and hashes:         1: 5x94KlPaFtsf0wxsDSYVQnUipt4.crl (hash: 32YQ2OEZ6O5DX9ee57R7wn5ZAtYMptFObkTfqaqjtXw=)
                          2: 95C751AAC99F11F098604B44C4F9AE02.roa (hash: NmpEc8D8qa0q1zd5A3YpqQoZSHsGMDweaQM/Ibr7UC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
                          rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ADBA, serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
        Validity
            Not Before: Dec 19 06:54:28 2025 GMT
            Not After : Dec 26 06:54:28 2025 GMT
        Subject: CN=6944f6a4-a296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:7e:46:6d:a1:e5:68:c2:31:09:17:bd:3a:
                    66:23:40:a3:2a:1c:7b:6f:98:9c:84:0d:d5:18:63:
                    60:45:5b:3c:24:92:c7:c2:a1:98:d2:7d:e8:4a:3f:
                    3a:5f:d3:20:f6:d7:57:36:f7:f6:3f:46:64:01:10:
                    f9:5a:7b:25:1f:96:23:64:e6:7a:6a:4f:86:34:93:
                    05:8d:b5:ab:7a:2b:e9:a2:e6:de:ce:9d:e9:2c:da:
                    fc:00:ce:83:d1:02:bd:6c:ab:c2:25:71:e5:dd:2a:
                    aa:e8:0e:e9:60:39:b1:f2:dd:1e:3a:e9:af:02:07:
                    76:3d:c7:21:8a:c3:d7:41:e3:4b:7a:cb:66:63:2d:
                    76:f9:09:11:63:78:c5:8a:21:1f:db:a7:e2:39:cf:
                    98:fd:a2:8e:b9:9c:00:9b:e1:2d:b0:8e:94:a2:45:
                    2c:33:ad:ef:33:46:20:e3:4f:43:1b:07:b0:34:fa:
                    f6:56:d1:8d:b2:c7:1c:7b:fe:c4:19:a8:fc:f8:fe:
                    d3:26:81:a1:fc:3e:4d:c1:57:e5:2a:68:a3:a4:8a:
                    9f:27:5f:34:6e:f5:8e:64:e9:b6:9d:04:46:2f:ed:
                    32:ed:e3:20:d2:04:71:83:bf:b6:1c:33:23:26:29:
                    ec:b3:ea:02:1a:df:ee:9f:11:da:94:05:19:78:b7:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2D:02:F3:97:DA:70:E8:91:1E:C7:29:74:5C:9F:03:E5:BF:34:9F
            X509v3 Authority Key Identifier:
                keyid:E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:71:f6:f5:bc:8d:93:ed:d2:69:05:90:92:94:24:bf:c6:08:
         67:9f:d8:65:8e:75:71:47:e2:9b:76:90:83:8c:54:5c:c2:91:
         85:53:cc:a6:90:51:3d:d6:5b:f7:c1:8f:fa:24:9f:9b:f4:f6:
         ef:1b:b8:ba:20:1e:7e:66:fd:52:5d:31:34:21:a8:4c:e5:ec:
         32:37:64:e3:66:68:a7:e5:97:ed:b2:1e:f6:4e:fc:8f:44:08:
         b6:e2:10:1b:5b:07:9e:83:6d:0d:2f:34:c3:2d:40:cc:3c:9a:
         14:d8:88:38:95:ea:cb:ea:51:98:b2:f8:8f:11:9e:77:a8:f3:
         f0:e6:f9:5e:e8:f8:84:be:c6:51:12:03:ae:96:de:45:2d:d1:
         84:4f:1a:62:54:91:fe:3c:bc:31:33:fb:5d:e8:f2:8d:1e:ea:
         65:d1:db:ae:57:0b:aa:ca:80:61:4c:5d:34:bb:61:a3:69:c5:
         66:21:23:47:7f:b0:d7:79:7c:eb:96:f9:15:89:61:cb:e7:f4:
         4f:2d:41:d8:b7:ba:05:72:6c:f7:7b:c7:90:1d:b2:09:4b:0b:
         57:61:e5:95:74:97:a3:22:e1:07:a4:96:f5:c4:06:da:e6:bf:
         63:a4:dc:ce:db:b8:df:a8:d0:7e:ae:48:b8:d6:2b:fc:12:07:
         4e:d0:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:43:51 2025 by rpki-client