This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
File:                     _U5c-75RNAFgOW1ZbhsySM_IHMQ.mft (raw, json)
Hash identifier:          tsJ8Tyy+E8otM+M037JjtKJKwyjwJHy8fwvaGiCAOpQ=
Subject key identifier:   A8:2F:8D:57:3D:44:DB:9C:5E:A0:F3:58:D3:59:BC:F9:39:FF:B8:1E
Authority key identifier: FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4
Certificate issuer:       /CN=A91B5CEA/serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4
Certificate serial:       0254
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
Manifest number:          024E
Signing time:             Thu 25 Dec 2025 00:55:22 +0000
Manifest this update:     Thu 25 Dec 2025 00:55:22 +0000
Manifest next update:     Thu 01 Jan 2026 00:55:22 +0000
Files and hashes:         1: _U5c-75RNAFgOW1ZbhsySM_IHMQ.crl (hash: SS/dxdjMbuxHHxRMAZl4d2SnoPwxHaf0zSZ0hM84DxU=)
                          2: B42198DC64F211ED9AEC046FC4F9AE02.roa (hash: 9taiAk5oqRem+++FlFWs0bgv4cUdlRkoPSLMugraGUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 00:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5CEA, serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4
        Validity
            Not Before: Dec 25 00:55:22 2025 GMT
            Not After : Jan  1 00:55:22 2026 GMT
        Subject: CN=694c8b7a-ee35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:92:a2:ec:3d:f6:e1:d3:3c:bc:87:35:91:
                    f1:9e:5b:00:48:dc:cf:3d:ae:98:8c:66:60:86:ce:
                    37:86:b0:13:e4:d6:79:ef:2e:81:ae:a6:2b:64:74:
                    f5:e4:74:6a:c7:13:ba:a1:be:ae:51:d4:84:b5:bb:
                    9e:06:95:c0:2e:51:51:9b:d4:17:92:d8:3b:b2:66:
                    7f:20:72:47:88:1c:ab:b9:49:11:8d:b1:cb:17:e1:
                    3f:78:c3:e3:80:11:70:28:de:a7:14:64:3b:a4:81:
                    ee:6a:57:ea:c9:e7:64:a1:8e:9f:60:ca:d9:7e:fc:
                    01:92:3c:80:69:fa:6a:1c:df:c0:1c:43:33:68:f5:
                    ca:34:ca:95:12:50:7b:a4:88:4a:2c:e4:47:9e:30:
                    e7:ce:09:28:4c:59:43:43:4d:e0:f6:f1:3c:78:cd:
                    44:48:d8:a2:77:40:e1:19:f9:7f:b9:b8:59:22:87:
                    8c:f2:40:45:c0:b6:56:b4:1d:b8:21:b8:95:67:57:
                    42:c7:4e:fb:74:52:2b:e3:d4:c6:1b:50:82:4c:53:
                    71:c4:3b:2e:bd:5a:20:1f:81:e0:13:71:9d:e4:24:
                    2f:8b:8e:8b:c7:ad:c5:b3:0d:59:34:8f:cb:78:25:
                    40:73:fa:02:05:fd:73:41:ec:c9:73:72:4d:3f:71:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2F:8D:57:3D:44:DB:9C:5E:A0:F3:58:D3:59:BC:F9:39:FF:B8:1E
            X509v3 Authority Key Identifier:
                keyid:FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:c6:42:31:6e:f4:99:aa:3a:84:92:f0:12:39:e4:a1:5c:
         79:9c:98:27:fa:0a:98:0d:cb:06:8d:d3:5b:01:a6:20:c8:eb:
         c0:a0:e1:e4:ab:33:0c:6a:99:55:0a:0f:b1:be:6c:05:0d:2e:
         ea:95:83:4a:88:3e:b4:f8:23:be:cd:0a:f5:8a:05:72:bf:88:
         86:73:69:bd:75:c6:4c:58:96:1d:8e:4e:30:1f:d3:4a:85:db:
         06:9f:77:ab:43:fa:db:e3:e9:51:29:73:91:bf:7f:7f:74:aa:
         f5:85:78:f8:eb:25:4c:05:2d:8f:6d:51:37:e3:1e:c0:51:76:
         44:ae:0b:73:42:3c:bc:ec:ea:41:ea:bb:48:20:a0:f7:d9:ac:
         30:1c:82:ac:1c:41:eb:d7:57:4b:3c:ef:2c:91:2b:10:5b:25:
         21:4c:c8:db:8c:6a:7d:c1:8c:81:a8:47:de:cb:a5:a0:93:7b:
         44:66:81:da:6c:35:34:13:09:db:da:47:f9:43:36:e3:d9:e4:
         03:16:66:f2:43:58:d8:46:c4:2a:c2:ee:08:9e:20:4e:5f:68:
         f4:f8:7c:2d:04:ef:ff:cb:55:6d:41:56:2a:04:60:c4:65:ba:
         0c:8a:f0:32:6c:c7:d8:eb:3e:c9:b8:8c:83:d4:fc:ab:a9:e4:
         08:af:93:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVDRUExMTAvBgNVBAUTKEZENEU1Q0ZCQkU1MTM0MDE2MDM5NkQ1OTZFMUIzMjQ4
Q0ZDODFDQzQwHhcNMjUxMjI1MDA1NTIyWhcNMjYwMTAxMDA1NTIyWjAYMRYwFAYD
VQQDDA02OTRjOGI3YS1lZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+CSouw99uHTPLyHNZHxnlsASNzPPa6YjGZghs43hrAT5NZ57y6BrqYrZHT1
5HRqxxO6ob6uUdSEtbueBpXALlFRm9QXktg7smZ/IHJHiByruUkRjbHLF+E/eMPj
gBFwKN6nFGQ7pIHualfqyedkoY6fYMrZfvwBkjyAafpqHN/AHEMzaPXKNMqVElB7
pIhKLORHnjDnzgkoTFlDQ03g9vE8eM1ESNiid0DhGfl/ubhZIoeM8kBFwLZWtB24
IbiVZ1dCx077dFIr49TGG1CCTFNxxDsuvVogH4HgE3Gd5CQvi46Lx63Fsw1ZNI/L
eCVAc/oCBf1zQezJc3JNP3GdtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgvjVc9
RNucXqDzWNNZvPk5/7geMB8GA1UdIwQYMBaAFP1OXPu+UTQBYDltWW4bMkjPyBzE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8yOEE3N0I2ODY0
RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5BRmdPVzFaYmhzeVNNX0lI
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19VNWMtNzVSTkFGZ09XMVpiaHN5U01fSUhNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUNFQS8yOEE3N0I2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5B
RmdPVzFaYmhzeVNNX0lITVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBu/sZCMW70mao6hJLwEjnkoVx5nJgn+gqYDcsGjdNbAaYgyOvAoOHk
qzMMaplVCg+xvmwFDS7qlYNKiD60+CO+zQr1igVyv4iGc2m9dcZMWJYdjk4wH9NK
hdsGn3erQ/rb4+lRKXORv39/dKr1hXj46yVMBS2PbVE34x7AUXZErgtzQjy87OpB
6rtIIKD32awwHIKsHEHr11dLPO8skSsQWyUhTMjbjGp9wYyBqEfey6Wgk3tEZoHa
bDU0Ewnb2kf5Qzbj2eQDFmbyQ1jYRsQqwu4IniBOX2j0+HwtBO//y1VtQVYqBGDE
ZboMivAybMfY6z7JuIyD1PyrqeQIr5Nf
-----END CERTIFICATE-----
Generated at Fri Dec 26 23:10:17 2025 by rpki-client