This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
File:                     5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft (raw, json)
Hash identifier:          oreBfYVkxZTIYrsqjZ+bZ4At8Dw7QWK+XuTC12P/PsQ=
Subject key identifier:   64:1C:92:E9:29:3E:18:86:7D:17:01:E5:4F:4E:B5:AB:DF:90:0A:4B
Authority key identifier: E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5
Certificate issuer:       /CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
Certificate serial:       04B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
Manifest number:          0716
Signing time:             Sat 20 Dec 2025 23:14:09 +0000
Manifest this update:     Sat 20 Dec 2025 23:14:08 +0000
Manifest next update:     Sat 27 Dec 2025 23:14:08 +0000
Files and hashes:         1: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl (hash: Xm6wG+cWIUaqG1L2IjhpNwSmE9t8osWwLG80LA17tlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207 (0x4b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
        Validity
            Not Before: Dec 20 23:14:08 2025 GMT
            Not After : Dec 27 23:14:08 2025 GMT
        Subject: CN=69472dc0-5ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:34:ad:90:cf:06:e4:9f:2e:0e:82:c8:c8:
                    02:09:0a:b4:1e:a6:8b:9d:e0:cb:8b:d9:07:25:42:
                    52:b2:9c:5e:c1:ec:25:0b:be:ea:7e:f5:20:eb:f6:
                    95:2e:34:a6:3b:c7:b0:74:89:93:c5:e7:2b:d1:ea:
                    66:95:49:81:35:2a:13:b8:d7:65:cc:43:3e:01:39:
                    ea:1d:8a:05:69:7b:c4:60:31:f2:8e:3b:0a:f8:1c:
                    96:24:7d:69:4a:ea:bc:1f:04:91:bc:ab:1c:77:16:
                    e8:8b:41:f7:6b:42:d1:11:ae:d5:3c:0f:f6:57:d9:
                    d7:2f:17:7a:80:4c:db:d6:1a:68:00:75:d9:f9:0d:
                    58:8d:30:08:cc:a0:b3:14:06:f5:92:40:f4:c9:2d:
                    90:4c:fb:6b:91:75:97:66:59:78:34:f9:8a:e3:59:
                    17:6d:01:f9:27:0d:dd:4a:49:76:2d:d2:d3:47:05:
                    ba:5b:d4:0c:7d:f9:7a:37:29:9b:f3:38:78:fc:98:
                    7b:4d:fe:43:f0:a8:1a:db:fc:06:02:2a:d2:3f:5a:
                    9a:db:7a:1c:24:7f:62:a0:3d:65:14:95:35:70:a2:
                    12:81:cf:ad:f6:89:6b:54:fc:df:12:b0:a2:10:26:
                    e9:dd:ca:d8:43:7a:b8:5d:ed:3f:f6:cd:b4:bd:15:
                    ef:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1C:92:E9:29:3E:18:86:7D:17:01:E5:4F:4E:B5:AB:DF:90:0A:4B
            X509v3 Authority Key Identifier:
                keyid:E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:6f:15:6b:19:62:3b:78:52:d2:6f:6b:d6:b9:81:24:f8:45:
         de:d3:ae:07:c0:02:21:b8:47:5d:cd:b7:78:93:d0:0a:c0:1f:
         90:99:88:35:ee:94:87:73:f9:6b:65:7d:1f:a6:94:81:ec:0d:
         ff:a6:78:ed:b9:68:39:ac:e5:9e:11:0a:e2:d5:c2:bf:43:55:
         35:d4:94:64:39:cd:64:c2:b6:ee:af:d7:27:1e:5e:8f:eb:f6:
         d1:d7:7d:f7:75:17:07:c2:b1:ad:3f:56:41:7f:08:b3:c9:b1:
         1b:14:a7:4f:dc:f6:d8:bf:4a:33:3b:81:e3:73:91:25:e5:8d:
         89:78:8e:6c:f0:e7:13:7c:98:17:bc:76:5a:60:48:bd:2a:d7:
         31:a8:80:52:6f:89:e7:30:ef:c4:12:57:b5:10:02:20:e0:7a:
         e0:6a:83:53:cc:3c:85:d2:13:ba:94:4a:04:3b:5c:ad:df:a6:
         a1:74:e9:6e:93:5b:65:35:ad:5a:87:a5:d8:a6:a6:33:f4:77:
         5b:d8:e2:9d:9f:2a:1d:1c:f4:c2:f5:9b:35:85:3c:19:6f:5a:
         2a:cb:3a:0a:bd:06:9c:7a:aa:cb:39:9f:00:1d:72:53:54:ed:
         98:03:1f:89:cc:7e:cf:54:29:f4:24:52:a9:87:4b:c5:95:f3:
         7b:8e:73:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:29:18 2025 by rpki-client