This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
File:                     5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json)
Hash identifier:          maZzXxGiL6RimQ94dSK6KX8GvV3D/Bsdp74EUSkeH7U=
Subject key identifier:   9B:21:51:92:E9:94:F9:3E:4E:75:E3:F2:DC:15:0D:B5:D8:48:E1:76
Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
Certificate issuer:       /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
Certificate serial:       097C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
Manifest number:          0974
Signing time:             Thu 18 Dec 2025 19:38:24 +0000
Manifest this update:     Thu 18 Dec 2025 19:38:24 +0000
Manifest next update:     Thu 25 Dec 2025 19:38:24 +0000
Files and hashes:         1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: ZTv0hn+I1WFBZjiWOFZ8rRy1kzfRzfU8vFKXqZm9qQE=)
                          2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: WPQQ6V7efa7fb8nJuM/CRZGnnAAa2WyVzIIakNwqKYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2428 (0x97c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD090, serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
        Validity
            Not Before: Dec 18 19:38:24 2025 GMT
            Not After : Dec 25 19:38:24 2025 GMT
        Subject: CN=69445830-b3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:65:1f:26:92:17:bc:93:b4:2a:f7:d6:45:e0:
                    77:2f:b5:82:15:e6:7d:a0:9e:0d:4f:3c:6d:0a:89:
                    32:81:77:b5:40:04:56:81:0e:91:dc:8d:1c:66:93:
                    60:7a:f8:6f:cb:6a:af:f7:81:e1:79:c7:09:1c:01:
                    e3:7f:69:7d:3c:6b:51:35:02:da:3c:71:9a:0b:19:
                    81:68:98:75:08:05:0d:3b:29:f6:24:30:7e:64:43:
                    dd:fe:f4:63:a6:75:84:39:65:b8:9c:a9:06:9a:22:
                    9d:41:26:93:21:65:57:6c:39:ce:25:48:22:fb:5c:
                    5e:82:ed:88:b9:54:e3:d2:2e:f3:95:fb:ee:31:03:
                    66:0b:c3:a8:3c:86:94:1b:ac:38:4a:6b:9f:d6:90:
                    b9:7a:b8:51:1f:4a:2c:71:69:57:0f:ed:a3:a3:bf:
                    b5:8f:62:86:fe:ab:47:b6:c2:42:81:a3:37:4c:8c:
                    20:6c:d1:a1:5a:28:37:3a:a5:fb:95:ee:2d:05:93:
                    46:bb:43:64:89:cb:97:5a:ea:07:39:e4:7a:78:e6:
                    88:76:ee:e0:d2:97:4d:5d:b6:d4:04:c3:ce:a5:f3:
                    d8:7b:e1:3e:ac:3e:9c:ce:74:a6:6e:c8:d9:34:8d:
                    27:e7:15:c4:47:9f:6f:bd:e4:26:a6:b3:ec:15:46:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:21:51:92:E9:94:F9:3E:4E:75:E3:F2:DC:15:0D:B5:D8:48:E1:76
            X509v3 Authority Key Identifier:
                keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a2:73:d1:6f:47:74:fc:08:d0:24:97:46:5e:61:b2:86:40:
         bc:e1:3b:06:9a:e9:35:11:37:f6:72:a4:db:f4:33:a8:c9:47:
         b3:67:43:6c:27:3a:e8:94:f6:ab:ab:ec:5f:76:40:9b:c5:0e:
         be:e6:01:fc:f3:22:0b:4c:13:58:6d:04:a1:9c:9b:d6:e9:f2:
         7d:cc:95:26:db:2a:7e:71:03:3c:4c:b3:8b:e5:18:32:eb:68:
         60:d4:de:3a:e7:df:63:d8:46:4e:5f:4d:ab:51:4d:40:db:14:
         0c:b2:27:d4:cb:c7:9c:74:da:ba:0b:4d:0a:74:4e:3b:b9:10:
         93:66:11:88:89:e1:3d:15:f4:d6:17:4a:1e:c2:1e:63:a1:72:
         60:d1:6d:b8:37:10:ba:cd:99:8e:a3:30:be:6e:d6:81:b5:fd:
         35:26:18:c5:15:89:91:2f:50:e0:15:eb:fb:4f:df:9f:d3:c7:
         bc:06:6b:d5:d1:35:61:73:b7:56:74:5a:ef:5f:8e:6e:a8:a0:
         af:a4:7e:f8:92:1a:20:40:f6:8f:b7:79:13:9d:bf:f9:0a:76:
         a2:49:58:d7:78:22:20:6e:c3:9e:9f:3a:5d:b8:d3:da:03:71:
         9c:1d:a6:06:a8:47:7f:1d:ca:6c:19:99:da:8f:55:ea:10:bf:
         1c:88:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:32 2025 by rpki-client