This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
File:                     5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json)
Hash identifier:          8dDfl64sLdieOHy4rdyga6MvS1YtYTq1rHdq+8iptDg=
Subject key identifier:   93:6E:C7:2D:8D:94:EB:E7:15:13:A4:FC:39:70:7E:34:C4:53:46:D8
Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60
Certificate issuer:       /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
Certificate serial:       0274
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
Manifest number:          026F
Signing time:             Tue 23 Dec 2025 00:36:58 +0000
Manifest this update:     Tue 23 Dec 2025 00:36:58 +0000
Manifest next update:     Tue 30 Dec 2025 00:36:58 +0000
Files and hashes:         1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: OYN9YdRzARv2MS3qgsWWoyU/ECnGVUh5YmTeD53LK3M=)
                          2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl
                          rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
        Validity
            Not Before: Dec 23 00:36:58 2025 GMT
            Not After : Dec 30 00:36:58 2025 GMT
        Subject: CN=6949e42a-cee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:16:91:86:53:a2:9f:e7:cc:c9:e0:1a:63:
                    25:3c:be:8e:99:e5:ea:47:e9:23:bd:33:32:99:f1:
                    1d:00:b4:ba:ca:a4:dd:36:80:61:07:88:f0:da:fa:
                    3a:e3:c6:4c:34:87:6a:a3:73:b3:e5:c7:a7:03:6e:
                    1d:6e:2b:75:d7:54:4c:5b:88:db:96:6c:0e:f2:e2:
                    b2:ed:ff:05:92:d1:fe:37:cb:dd:30:1d:5e:1e:a8:
                    e1:41:3c:72:4d:4a:c9:de:ec:94:f3:9f:9e:1a:7c:
                    c3:e7:e3:a0:0d:e1:4f:45:51:7d:39:e9:7d:f0:50:
                    f4:c7:e5:f2:e8:b6:9f:8a:4c:c1:0e:84:61:85:5c:
                    93:18:ba:16:13:62:19:a8:31:dd:eb:23:01:9c:90:
                    61:dd:57:4b:ff:e9:79:f2:3a:41:ed:00:ca:8c:3d:
                    20:d3:32:02:2f:9b:80:f0:fb:c1:22:91:00:7c:54:
                    eb:e3:23:37:8d:89:e2:ce:98:b3:16:ad:73:cd:3f:
                    32:69:7b:cd:b5:50:f0:68:27:15:0e:fb:8f:a7:42:
                    87:64:a2:f8:4d:d4:c4:ea:cc:27:2d:ee:8a:53:3b:
                    14:5a:49:7a:9f:f2:5b:65:56:5c:93:14:c0:64:c4:
                    19:20:bd:51:c8:ac:61:56:9f:5e:3e:5f:0f:c1:b2:
                    b7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6E:C7:2D:8D:94:EB:E7:15:13:A4:FC:39:70:7E:34:C4:53:46:D8
            X509v3 Authority Key Identifier:
                keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:76:ac:46:93:50:dc:34:d0:66:2f:45:ad:46:a2:95:37:
         aa:1c:e9:62:cf:d8:7f:f3:61:27:f1:97:e5:08:b7:61:69:63:
         f5:1f:23:ce:9d:1c:6c:4a:c2:da:5a:9b:b2:9a:c0:25:e8:57:
         36:e8:df:71:78:db:58:04:63:53:e2:c9:89:20:c2:17:12:94:
         cc:5a:e0:e3:c8:bf:62:c6:bd:e1:14:a2:fc:2b:a6:47:7f:00:
         87:b5:45:00:07:95:8e:bf:f2:5d:ef:65:3a:8d:b8:33:6e:88:
         bb:07:07:bc:b2:dd:87:a2:1f:cd:b5:91:33:d8:c0:e4:48:92:
         89:72:14:24:10:91:6c:d9:e1:07:c9:8b:34:35:7e:d9:37:39:
         c5:bc:1d:be:b8:3a:da:2c:be:5d:e8:9b:65:18:a8:6b:60:bf:
         72:1a:fd:f4:5a:8a:e0:6c:c0:3a:d8:b8:fb:98:fb:9b:60:9a:
         f8:d1:08:04:77:a3:ed:3b:b8:22:bb:6c:83:63:0e:00:0d:1b:
         a8:b7:48:8c:a4:4e:92:42:61:c9:7f:79:3b:fc:64:be:13:6a:
         7d:5a:5e:4d:ec:50:b9:26:79:a1:68:97:3b:d4:84:3d:ad:e4:
         44:e6:88:78:03:e1:1c:5c:ad:d1:07:cd:64:83:d7:33:6e:03:
         fe:b6:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:21 2025 by rpki-client