This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/5jQoohqx6-uYQa_M53vNJ6iEUlg.mft
File:                     5jQoohqx6-uYQa_M53vNJ6iEUlg.mft (raw, json)
Hash identifier:          FidNpcQe2kdlGOKV/2gtYjk1TYGOPNyaKKwbMNHFqGc=
Subject key identifier:   52:16:F9:89:D0:4D:B8:8E:22:A1:4E:29:FA:A5:B9:DE:91:77:EC:7E
Authority key identifier: E6:34:28:A2:1A:B1:EB:EB:98:41:AF:CC:E7:7B:CD:27:A8:84:52:58
Certificate issuer:       /CN=A91A043A/serialNumber=E63428A21AB1EBEB9841AFCCE77BCD27A8845258
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jQoohqx6-uYQa_M53vNJ6iEUlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/5jQoohqx6-uYQa_M53vNJ6iEUlg.mft
Manifest number:          14
Signing time:             Fri 19 Dec 2025 06:54:22 +0000
Manifest this update:     Fri 19 Dec 2025 06:54:22 +0000
Manifest next update:     Fri 26 Dec 2025 06:54:22 +0000
Files and hashes:         1: 5jQoohqx6-uYQa_M53vNJ6iEUlg.crl (hash: ytL6/lvVv2E52n/kNzwVip8xGxnN2H6lNpJ8xN5Oopk=)
                          2: FFF07186C96F11F0A8412D65C4F9AE02.roa (hash: u3nlcUJo8jYHLRoEnszpBE9VPEEnfZI4g6WRykevg0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/5jQoohqx6-uYQa_M53vNJ6iEUlg.crl
                          rsync://rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/5jQoohqx6-uYQa_M53vNJ6iEUlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jQoohqx6-uYQa_M53vNJ6iEUlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A043A, serialNumber=E63428A21AB1EBEB9841AFCCE77BCD27A8845258
        Validity
            Not Before: Dec 19 06:54:22 2025 GMT
            Not After : Dec 26 06:54:22 2025 GMT
        Subject: CN=6944f69e-2b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:05:3f:a9:c0:58:7f:86:39:be:23:bc:a4:
                    5c:21:31:d8:30:f0:f8:58:06:05:e7:a6:ed:c8:a7:
                    bc:72:72:3a:d6:7e:60:c7:79:0f:f4:bf:a4:b0:eb:
                    d4:23:de:07:f4:0c:37:fa:6b:c0:a4:39:bd:16:85:
                    75:bf:b2:b4:68:96:ee:e7:f3:0b:54:35:df:e4:1e:
                    a6:a5:31:25:28:83:23:be:4b:82:24:c9:ac:33:a9:
                    0e:af:ec:df:99:14:e2:f1:2b:95:33:e6:41:32:51:
                    58:98:91:28:e8:6b:86:94:08:a0:3e:63:5d:c9:db:
                    b3:67:e6:c2:98:c5:6c:3d:d7:76:f7:36:84:95:eb:
                    5d:3e:bf:b3:d5:50:7f:2a:bc:a6:78:0f:6e:30:b9:
                    28:a2:d8:d5:22:a6:48:59:90:fb:f0:0c:6c:34:cf:
                    e8:e7:57:16:ba:32:be:ea:5b:51:93:39:e4:d1:6c:
                    dd:2f:b7:ce:4b:d4:a4:10:bb:09:64:74:68:d3:df:
                    86:42:e6:15:7e:f3:e1:73:23:49:24:c4:d5:e7:6e:
                    9e:12:b5:82:96:c5:28:0b:56:19:de:24:d7:b5:76:
                    bf:69:46:48:f8:92:7f:57:a1:ff:26:e3:2e:68:88:
                    8e:12:db:5d:02:78:d8:be:c5:96:96:2b:ae:9a:86:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:16:F9:89:D0:4D:B8:8E:22:A1:4E:29:FA:A5:B9:DE:91:77:EC:7E
            X509v3 Authority Key Identifier:
                keyid:E6:34:28:A2:1A:B1:EB:EB:98:41:AF:CC:E7:7B:CD:27:A8:84:52:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/5jQoohqx6-uYQa_M53vNJ6iEUlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jQoohqx6-uYQa_M53vNJ6iEUlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/5jQoohqx6-uYQa_M53vNJ6iEUlg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:72:c5:d7:9c:ff:42:9e:d4:e5:3d:87:30:0d:3a:32:fe:de:
         79:be:e9:6a:a4:c5:ae:20:3e:75:25:c2:bd:5c:36:7f:ef:0b:
         51:5a:6c:62:d6:9c:0e:8e:c6:cc:62:00:6f:bc:0a:4c:98:78:
         7a:45:8a:f3:93:ab:f0:a9:2b:da:d8:75:13:ec:57:c3:68:08:
         39:01:29:0b:b1:29:99:82:c1:f0:58:ad:eb:52:93:e1:da:d7:
         ad:8a:de:d1:cf:4f:a6:3c:ad:03:7d:71:05:18:5e:77:c2:77:
         4a:52:df:67:39:85:4b:aa:40:b4:f9:a1:ab:da:ef:a1:81:14:
         3b:34:c3:ac:32:4b:91:d5:77:de:12:b4:39:04:af:ca:e3:68:
         74:92:d6:c9:c7:f0:a6:ec:cb:37:28:c1:09:2b:af:34:86:3b:
         8b:c7:34:5f:42:2d:59:1b:ce:05:63:fe:5d:d0:10:2f:cb:14:
         19:97:6e:d5:a3:d8:20:c7:c9:77:0c:ff:9d:81:f9:f2:1c:b6:
         c5:a7:be:e9:ae:bd:1f:41:c9:12:72:6a:d2:24:75:93:cd:91:
         53:2e:94:ba:cf:a8:f6:54:78:88:86:8a:18:be:b6:63:ee:16:
         ca:c4:ce:a6:c8:d5:b7:34:a2:4b:44:88:04:b4:9d:68:54:69:
         88:05:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:45:47 2025 by rpki-client