This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File:                     l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier:          Z1z87N4L7eFboy8VcEvxIJV0rn8O6hGHBo/Bmkz8a/M=
Subject key identifier:   35:BD:E0:54:13:D5:07:B2:28:0B:3F:A9:D4:8F:1D:34:A7:C8:3D:8C
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer:       /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial:       0CE1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number:          0CDA
Signing time:             Wed 24 Dec 2025 17:48:30 +0000
Manifest this update:     Wed 24 Dec 2025 17:48:30 +0000
Manifest next update:     Wed 31 Dec 2025 17:48:30 +0000
Files and hashes:         1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: wVVkqo3LoBJ3us89KfO++3dazJYBulvfz0AqX0tgUGQ=)
                          2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: ivTBLc1IHemjBh5C9Wu0pV5fBOGymo+VSgfkbB+w5w8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
                          rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3297 (0xce1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B
        Validity
            Not Before: Dec 24 17:48:30 2025 GMT
            Not After : Dec 31 17:48:30 2025 GMT
        Subject: CN=694c276e-ca53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2a:71:9d:e5:89:02:e2:29:82:c8:9b:4a:4c:
                    b5:90:1d:8c:19:97:92:72:68:f9:e8:3d:9a:42:ef:
                    74:2e:b2:c3:6c:a2:86:38:48:28:9e:28:aa:7c:bc:
                    9c:01:c8:7b:a8:dc:f7:5d:ce:eb:fa:9c:5f:ad:f2:
                    79:04:12:a4:b4:1e:c8:00:71:93:ac:83:e8:11:a7:
                    9d:57:75:a0:22:f4:ac:c0:78:7e:6b:77:f6:20:6c:
                    91:fb:ca:f0:e3:ed:a3:a8:11:f5:c5:a0:ff:88:9d:
                    d2:83:1a:f0:9d:ba:bc:a0:0c:e4:65:ff:28:a6:f7:
                    f9:28:b4:c1:0f:7d:b7:a7:4c:5f:6f:d9:97:c0:47:
                    ef:0a:42:4d:b1:3e:99:20:ca:41:a8:2e:a6:82:55:
                    33:c0:21:54:d0:a8:73:6b:ff:5a:48:94:8e:86:04:
                    1c:24:a6:93:39:9d:af:05:27:44:44:31:67:ea:c9:
                    f7:82:17:51:e1:b0:a2:5f:fc:f9:df:f8:5b:c4:4b:
                    94:ec:2e:5f:88:a8:00:e1:75:53:df:03:c6:ef:d6:
                    55:23:4f:ed:8e:3b:97:58:f9:64:31:55:c3:93:99:
                    c1:12:b9:68:bf:dc:af:a1:44:21:4a:6d:14:b5:af:
                    be:59:71:23:b2:93:6b:71:ae:be:43:ec:c0:6e:3f:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BD:E0:54:13:D5:07:B2:28:0B:3F:A9:D4:8F:1D:34:A7:C8:3D:8C
            X509v3 Authority Key Identifier:
                keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:14:53:55:04:62:df:2b:a8:61:86:5c:56:a3:c0:07:f6:19:
         a8:34:ac:27:05:c5:ed:16:a5:3d:3c:1c:7c:95:a2:cb:85:b8:
         69:54:59:d5:74:ed:f6:dd:b1:e3:31:b4:5f:96:1d:aa:14:01:
         e0:eb:ac:13:7f:21:5d:5b:9f:71:79:e4:d4:58:34:f8:d2:c4:
         5e:2e:64:77:1d:38:a1:69:a1:c9:ae:48:5c:3c:f2:f7:ac:c5:
         95:d3:17:b5:ba:4f:29:22:c1:bc:54:f5:21:c7:a1:1c:c5:85:
         ee:e7:a9:72:24:24:38:14:d8:b1:6d:19:03:df:8a:fe:2d:3d:
         07:b7:68:03:a4:ab:31:17:94:4d:0c:dc:9a:3b:f0:38:57:1a:
         a5:01:e6:a9:0c:0b:10:69:2a:30:47:87:f3:b3:bc:5e:0d:db:
         09:62:dd:0d:ce:0b:f2:e3:a6:1e:ac:6b:6a:ee:e4:da:54:c9:
         08:a8:52:9e:04:fc:29:1a:b6:a0:b6:c9:32:3f:d1:fc:e2:e3:
         76:06:4d:82:4f:84:3a:b5:72:4c:22:df:91:0a:35:88:77:88:
         41:ed:1e:75:e2:5b:89:e5:c6:7a:6b:a9:8b:39:63:41:0c:ba:
         0f:bd:80:b0:76:5c:7b:cf:cc:7b:46:6c:f1:b3:7f:84:33:e8:
         93:8b:cd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 12:46:27 2025 by rpki-client