This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File:                     l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier:          mYdEXCtbHqUt84g77wUHiq83G6sfsyj1sx6XU7Ji60A=
Subject key identifier:   95:82:EE:E0:2C:67:E9:51:80:46:B9:C3:7B:D0:0F:70:91:79:94:2F
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer:       /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial:       0CDF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number:          0CD8
Signing time:             Sat 20 Dec 2025 17:48:08 +0000
Manifest this update:     Sat 20 Dec 2025 17:48:07 +0000
Manifest next update:     Sat 27 Dec 2025 17:48:07 +0000
Files and hashes:         1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: rwVxz1PPbM+2caFq5a+BwHFg/kADVZ++USm0G0uEZVA=)
                          2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: ivTBLc1IHemjBh5C9Wu0pV5fBOGymo+VSgfkbB+w5w8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
                          rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3295 (0xcdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B
        Validity
            Not Before: Dec 20 17:48:07 2025 GMT
            Not After : Dec 27 17:48:07 2025 GMT
        Subject: CN=6946e158-21c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:bb:8d:ff:c7:ae:3e:42:d7:95:c6:18:ab:
                    18:40:9c:25:5a:1f:b9:3d:4c:63:f3:a0:47:54:cd:
                    2b:fc:3f:81:ea:01:c7:6b:e1:83:de:80:64:cc:48:
                    a0:80:04:8f:e8:77:d8:2a:44:39:ac:72:07:a2:7b:
                    b0:9d:c9:50:98:94:66:84:10:9b:68:c6:1d:8d:6c:
                    14:69:d6:f2:fd:c0:6c:00:5c:7b:ea:78:93:19:bb:
                    b0:af:08:1c:5a:7c:e5:e3:e4:e1:24:d3:2b:d8:75:
                    3d:18:8b:e8:28:af:ed:4b:93:6f:c4:ca:b3:59:03:
                    50:03:48:09:91:cc:30:1b:b8:7d:af:34:7c:e3:43:
                    2e:31:d5:61:7d:f7:00:39:3a:4f:fe:02:9b:60:eb:
                    22:12:31:96:bd:d0:1f:1a:33:c4:20:1e:eb:51:05:
                    63:f6:70:7b:cb:35:27:90:bb:93:97:41:cc:50:90:
                    b0:5b:19:11:13:6f:c3:c1:67:b9:82:af:c2:78:bd:
                    02:8f:97:86:1c:0d:bd:eb:d8:d8:3d:95:b3:1f:0d:
                    a6:bf:3c:64:9f:1d:cb:57:f9:6b:e6:30:b0:1a:01:
                    21:a1:50:86:23:1b:04:46:b8:f7:c7:a5:b9:c6:be:
                    49:6f:a5:cd:09:72:d0:43:5f:2b:0d:da:95:fd:97:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:82:EE:E0:2C:67:E9:51:80:46:B9:C3:7B:D0:0F:70:91:79:94:2F
            X509v3 Authority Key Identifier:
                keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:de:7f:b4:7f:9a:50:96:1f:5b:53:a4:61:8d:12:97:31:9d:
         22:94:e4:e8:fc:93:8f:ad:6a:8a:cd:be:82:e9:bc:68:a5:19:
         38:1e:07:0e:94:3d:ed:fa:5b:58:fd:4e:b1:51:fc:70:11:27:
         9f:96:e4:a1:02:e7:b1:18:f9:20:93:a6:71:41:bd:26:d1:dd:
         ce:ad:6a:13:7e:f2:d0:9e:a5:bd:5a:86:2b:b8:ca:16:9f:fa:
         2e:63:79:3d:02:f1:96:3f:75:58:54:bf:89:3b:b4:a3:0e:aa:
         8e:80:f6:75:d0:bb:e7:77:d6:61:04:f6:41:f8:e7:ec:93:92:
         2e:ea:be:8b:3a:51:6b:7f:f3:b6:cd:88:7c:2b:78:92:06:55:
         d2:43:80:c2:e2:7d:e0:83:26:0b:6b:bb:94:fa:0e:9c:af:1d:
         4f:db:fc:72:9c:da:9d:e3:82:42:11:0c:38:82:ad:92:33:f4:
         cd:09:50:4a:87:0f:20:f2:d1:ea:8b:52:98:ec:19:34:49:f2:
         f7:7e:d4:e3:0f:23:48:d2:f9:23:55:cd:3e:7d:e2:96:c9:ca:
         ab:00:ed:3a:d2:99:70:01:64:70:ca:a6:6e:b7:d3:dd:33:24:
         78:b8:37:c8:a3:af:ad:d8:96:d0:85:eb:a5:c6:ff:a3:3c:b8:
         f6:88:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:40:04 2025 by rpki-client