This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
File:                     p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json)
Hash identifier:          NdTsZGKjTGvkahcLmzOWBsGZrthAj5EQHV08qBmuuOw=
Subject key identifier:   74:DA:38:8C:7F:22:22:D6:72:7D:46:E5:D4:FD:3A:5E:63:05:37:67
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Certificate issuer:       /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
Manifest number:          0226
Signing time:             Fri 19 Dec 2025 01:30:34 +0000
Manifest this update:     Fri 19 Dec 2025 01:30:33 +0000
Manifest next update:     Fri 26 Dec 2025 01:30:33 +0000
Files and hashes:         1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: UrBfD84ATBGVTrGOSRkfqL2VraQUM2bUq0g7zh8Gn74=)
                          2: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: qqBFkEJNiWCb2cCDSNMAUnOoY6M5apd24HqIJ4T1rMk=)
                          3: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: QE//TTd8y+NKPY9SFnvheS4pfkoCI9qiU5fU+9iwaFc=)
                          4: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: 0osuZSPKtRbkTEe2rjpJx0+V/IP2FJnFJRtn1br7+ws=)
                          5: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: K7ih6dZEP7tPsDE029yQg9J9G2EoOjYxEh23BSXqdx4=)
                          6: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: xEdof+9upKEPJ5nZ8zJI+L9OfNurTTcojEoj01Jch2s=)
                          7: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: wWTFLfND3EADAPn3/677/3gOc92RXHanLyJ2ZQO9E5Y=)
                          8: E98F15362B3811EF926F1555C4F9AE02.roa (hash: huhcBlB6kInuEcW0eyepHJy04Qrnm/zwE5F/lbsIg4U=)
                          9: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: UdSNL+M5bhbjwAkTjKkIwiTAoopRDA15sbVDq+xd/Mo=)
                          10: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: UYQj695a2OmzGWejM8q0zjVy0UfE2w5YDuGLHHyUkKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
                          rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
        Validity
            Not Before: Dec 19 01:30:33 2025 GMT
            Not After : Dec 26 01:30:33 2025 GMT
        Subject: CN=6944aaba-6fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:e0:55:14:0c:e6:89:72:33:68:c8:18:25:
                    a3:be:ec:4b:78:19:15:fd:87:d1:3d:30:e7:53:c2:
                    65:71:3c:55:d4:27:7e:aa:fb:74:a6:ea:40:df:5f:
                    a6:38:ec:9a:f2:db:e4:7a:a0:1a:14:ce:81:80:66:
                    c1:4f:0a:b2:3f:7a:6c:b1:b2:ae:95:ad:93:ed:73:
                    95:83:1e:26:b0:cd:5a:bf:dd:c3:87:71:6f:d3:19:
                    19:45:10:4f:98:04:fb:fe:cc:28:68:67:ed:c7:ec:
                    42:0e:cf:20:d4:c9:a8:40:60:15:54:f8:54:7e:71:
                    38:86:70:63:5c:45:22:15:80:9f:46:d8:c2:75:b5:
                    b8:c5:f2:61:3d:2b:c3:0c:97:ee:e3:4f:6e:9e:24:
                    3f:0b:79:87:0a:0d:f4:ea:4a:b0:78:e7:21:fb:4f:
                    d7:62:4f:86:ea:7b:32:17:79:1c:36:44:3f:8b:1d:
                    e6:5d:9a:51:bd:1e:52:f5:c2:c2:74:ae:70:1e:83:
                    c4:1c:68:42:6a:f4:59:99:a4:78:5f:69:f0:ee:7d:
                    11:65:e5:8a:97:0e:42:14:21:8a:69:f9:af:0f:d0:
                    00:a7:be:3b:7a:d0:99:27:5e:d9:47:78:cb:be:cd:
                    63:20:07:41:af:0e:1c:cd:71:78:9b:b4:a7:13:38:
                    f1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:38:8C:7F:22:22:D6:72:7D:46:E5:D4:FD:3A:5E:63:05:37:67
            X509v3 Authority Key Identifier:
                keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:00:ac:2a:28:de:e1:3a:80:11:d3:02:dd:6d:93:6a:c0:f7:
         66:6d:d2:15:1b:40:e6:03:ab:47:37:a7:25:7a:7b:6d:e2:05:
         94:61:19:d6:85:ab:fb:6c:61:9d:2f:0a:ae:34:60:58:59:e8:
         95:e2:3b:7e:e1:f6:c2:5b:88:b2:ab:e4:ef:54:a0:ee:27:8b:
         94:08:9d:41:db:31:47:2a:8b:2d:0f:55:d6:4a:83:3d:e5:2e:
         60:3b:f2:97:45:1c:ca:94:92:42:46:03:43:fe:56:74:c3:0d:
         11:45:20:a8:e3:e2:4d:4b:e5:0a:09:50:16:52:a4:49:ce:c6:
         5c:14:8d:44:a2:54:2f:18:14:3f:43:50:25:99:29:e1:63:ae:
         a9:0b:df:26:5e:86:00:48:69:b7:5e:89:0c:67:c8:95:18:47:
         27:16:1d:bb:d8:44:58:87:a6:56:d9:d8:5f:29:65:4e:36:90:
         2b:c1:46:a9:c2:62:d8:3c:77:c2:2e:22:9c:2d:29:c1:4e:22:
         e1:0e:cd:18:8b:53:95:41:1a:48:a8:67:71:92:bb:34:33:92:
         6a:fd:b4:c3:80:77:64:a4:b5:18:8d:f9:5f:58:f2:e9:14:b3:
         ea:bb:44:26:10:72:b4:08:ca:7d:e7:9a:9a:f7:73:9e:35:d8:
         6a:8f:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:28 2025 by rpki-client