This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
File:                     x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json)
Hash identifier:          djTqy6tLUHYrDtJy8pfuv0tdeZDP14HX4t7bW2ieF4o=
Subject key identifier:   CF:B6:27:5E:9D:7F:BD:EF:63:A0:34:53:76:05:80:B1:91:7C:1D:C1
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Certificate issuer:       /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial:       03CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
Manifest number:          03C0
Signing time:             Thu 18 Dec 2025 23:55:06 +0000
Manifest this update:     Thu 18 Dec 2025 23:55:06 +0000
Manifest next update:     Thu 25 Dec 2025 23:55:06 +0000
Files and hashes:         1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: S/tHfQwYZr27cEw/TbcySuCt4tpaazcsag0RS2im0AA=)
                          2: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: +CW3v5l7R9gMqeCZZxElin+bWDGaYeldrsVB5lTI+Bw=)
                          3: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: U+TSb4gwFFQAjrhJgD02yjkinWTnlvFp6oUJxouw0Y4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
                          rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
        Validity
            Not Before: Dec 18 23:55:06 2025 GMT
            Not After : Dec 25 23:55:06 2025 GMT
        Subject: CN=6944945a-63ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:5f:0b:83:3e:33:41:18:ea:b6:77:51:6e:
                    83:b3:05:0c:f3:03:dc:01:1a:21:97:93:f8:b7:8e:
                    3b:95:3d:e6:15:c5:9c:6e:9d:6d:29:ab:9d:c1:1f:
                    45:fc:19:5e:ff:a4:55:b2:71:61:e4:c0:d8:44:9d:
                    da:11:57:93:15:70:6e:f8:98:b5:6b:b9:45:59:ea:
                    bf:43:e3:b2:dd:45:2c:8c:c8:7d:51:6b:88:8a:16:
                    c2:d9:a7:e1:37:cd:e5:2a:4f:8e:59:68:5e:3f:0e:
                    69:a9:94:30:33:cd:56:13:e7:72:25:c0:80:5c:b0:
                    f7:db:06:f9:18:67:3b:b4:25:a4:7c:a7:b7:d9:70:
                    48:63:ff:d8:b8:25:a5:13:79:5f:1e:a0:9e:0d:f5:
                    7c:24:30:55:d9:cf:18:e9:72:b2:7c:fc:e1:e2:d7:
                    64:14:63:5a:16:86:c8:72:ab:d6:82:a1:dd:be:84:
                    21:55:a0:25:9d:c4:3b:57:9c:75:45:8e:23:e8:c2:
                    4c:ab:cb:4e:e3:a3:6f:41:a2:b0:b5:7d:91:b2:a9:
                    47:d9:03:ec:01:4f:08:f3:9e:ac:bf:1f:6b:ff:71:
                    d7:e2:15:fa:b3:61:ec:d3:93:5e:0b:09:9c:96:66:
                    34:2b:12:d4:97:cb:00:90:fd:18:21:46:9f:b1:2f:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B6:27:5E:9D:7F:BD:EF:63:A0:34:53:76:05:80:B1:91:7C:1D:C1
            X509v3 Authority Key Identifier:
                keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:0d:87:90:00:6c:4c:cf:b4:ad:b4:23:01:2f:b4:4f:03:08:
         f3:7a:9d:98:19:4c:d6:d0:ca:f7:45:90:b8:7d:04:8d:51:e0:
         bb:ff:20:05:c0:80:1d:12:20:a3:d9:24:88:ff:ae:65:87:dd:
         f2:f5:b8:7a:20:58:48:01:c8:94:51:81:f3:55:db:3a:bf:69:
         db:c6:0c:9a:83:a4:81:a5:02:a5:98:dc:6f:76:06:f9:03:4b:
         da:e0:8b:38:55:3e:a5:00:19:15:3f:0e:8f:f0:0e:9f:fc:6b:
         7d:5b:a2:c9:a2:35:a4:4a:d1:d7:03:70:e0:09:2f:5a:d2:fd:
         cc:69:aa:25:0d:9d:bf:a8:fd:0b:8d:13:8a:80:04:f0:27:03:
         99:22:68:82:38:61:af:21:e0:f7:e0:84:e0:2e:d8:ce:90:ae:
         5c:d1:5a:01:81:52:46:fd:97:60:89:dc:e1:b4:75:9d:92:30:
         95:76:d8:cf:9a:ca:98:44:bb:4b:d8:3b:40:d3:ca:73:68:be:
         b7:1c:a3:1f:b9:aa:86:8b:95:c0:b4:fe:09:e7:76:62:35:6d:
         dd:d4:72:a0:da:c3:1b:d2:60:c4:b9:93:84:9f:05:f5:1c:e5:
         fa:d8:f8:f0:47:e0:e9:30:ba:be:57:f4:8f:51:cc:ff:25:18:
         61:62:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:12 2025 by rpki-client