This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
File:                     5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json)
Hash identifier:          auhxBF2zoI9UMZBoKTEiamTC1HFk4pqn4NzYUKNtpGc=
Subject key identifier:   0D:CD:4E:D7:77:FD:A8:F1:E1:8B:D4:7D:A0:5F:F7:98:AC:B4:0D:0A
Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
Certificate issuer:       /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
Certificate serial:       0982
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
Manifest number:          097A
Signing time:             Tue 30 Dec 2025 19:31:05 +0000
Manifest this update:     Tue 30 Dec 2025 19:31:05 +0000
Manifest next update:     Tue 06 Jan 2026 19:31:05 +0000
Files and hashes:         1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: WNdEma9HSFTxysNhqGsvbijt6fI31LMbgB98KY6wecc=)
                          2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: WPQQ6V7efa7fb8nJuM/CRZGnnAAa2WyVzIIakNwqKYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 19:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434 (0x982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD090, serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
        Validity
            Not Before: Dec 30 19:31:05 2025 GMT
            Not After : Jan  6 19:31:05 2026 GMT
        Subject: CN=69542879-7015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:5d:c5:eb:22:b3:8b:13:63:80:42:3c:ff:
                    c8:bc:45:96:9b:d1:e0:70:3f:99:54:74:b8:47:5e:
                    62:43:c5:a4:7f:3f:6e:a0:9f:64:75:c9:27:f9:59:
                    9d:5d:13:62:85:ca:6f:97:b6:48:8c:0d:d3:f9:ae:
                    c3:76:fc:48:f3:0a:dc:e8:22:fd:88:14:98:7d:ce:
                    08:33:d2:83:96:71:bd:a5:b2:c6:9b:6e:ef:22:98:
                    fd:9c:94:10:35:1d:49:ef:97:e2:fb:20:82:0a:6d:
                    87:80:5b:28:17:45:17:85:a5:c3:ad:c8:48:36:07:
                    1b:bd:7f:7a:f4:13:70:fb:5f:20:38:a8:25:2f:2f:
                    86:d1:6b:66:aa:c1:e6:2a:62:ed:41:c3:46:6a:36:
                    6b:86:10:a7:51:14:05:b3:e4:63:4a:9c:f7:1d:1c:
                    86:05:ff:73:4c:62:14:82:87:23:56:7f:54:31:d8:
                    27:a7:c1:c8:20:16:ca:36:20:02:44:13:c3:82:f0:
                    e7:b3:25:70:73:fa:7d:d4:90:2f:15:da:ce:7b:3a:
                    2f:44:11:ca:57:79:ed:40:c6:d2:3b:9a:d4:ad:ef:
                    df:56:a6:f3:21:32:d1:13:b8:c4:da:3b:99:3c:b8:
                    ab:c0:fe:65:93:18:f9:e2:ae:4d:5c:4f:4b:7e:f2:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:4E:D7:77:FD:A8:F1:E1:8B:D4:7D:A0:5F:F7:98:AC:B4:0D:0A
            X509v3 Authority Key Identifier:
                keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:72:c0:2e:07:75:28:7c:6b:56:91:87:2b:69:6c:1b:a2:87:
         be:22:11:2a:30:b9:19:a1:22:ca:56:60:5a:74:14:f5:28:65:
         82:ba:74:be:19:97:19:88:3c:f2:3e:b9:2c:6f:90:95:fc:97:
         da:99:40:b4:11:a4:36:ef:5b:51:8e:32:28:4a:1f:a0:ee:cf:
         8c:32:2b:c6:a9:c0:27:12:cd:4a:ce:0b:ad:96:fa:02:c0:b2:
         24:75:59:bc:8e:2b:f0:fc:e8:17:4a:5b:8b:b0:4e:e4:ac:fe:
         52:03:8a:2e:62:c0:d2:2c:44:22:ee:e5:e0:b5:17:e4:1e:70:
         a7:fe:8e:34:9f:d6:b8:89:d4:12:21:15:6b:e6:fb:b7:1f:32:
         d1:8c:0c:41:5e:2f:48:3a:47:90:e2:c9:4c:3e:1d:7b:0c:04:
         52:cc:d2:23:e2:77:34:18:33:9c:c9:e9:87:d3:f7:10:17:54:
         c6:a0:26:93:67:98:55:d0:b6:1b:a2:a3:97:68:d7:8c:12:6d:
         0b:88:f7:54:ec:86:16:6d:91:d2:5c:08:d9:b7:a8:ef:ce:0a:
         e3:c5:12:f3:01:1e:6a:be:ea:72:1a:7a:44:64:70:2d:66:36:
         d2:09:57:44:a7:ef:5d:a9:64:51:88:54:b6:14:6a:4e:a2:6f:
         d8:d8:8d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 01:58:44 2025 by rpki-client