This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft
File:                     5luo-mVwW4879u3NnQ2xD9rcuRY.mft (raw, json)
Hash identifier:          KbZWACyYJi1cbwSV3LpQeb12QXk8ev30ty6qusf/S94=
Subject key identifier:   A8:EB:21:AD:03:0A:EF:91:60:FE:0E:F8:14:02:AC:AD:CC:AE:47:8B
Authority key identifier: E6:5B:A8:FA:65:70:5B:8F:3B:F6:ED:CD:9D:0D:B1:0F:DA:DC:B9:16
Certificate issuer:       /CN=A913A7E7/serialNumber=E65BA8FA65705B8F3BF6EDCD9D0DB10FDADCB916
Certificate serial:       034A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5luo-mVwW4879u3NnQ2xD9rcuRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft
Manifest number:          0345
Signing time:             Tue 23 Dec 2025 00:00:05 +0000
Manifest this update:     Tue 23 Dec 2025 00:00:04 +0000
Manifest next update:     Tue 30 Dec 2025 00:00:04 +0000
Files and hashes:         1: 5luo-mVwW4879u3NnQ2xD9rcuRY.crl (hash: nIjS0Ub1hHwiebBsXFSymKcO3JEZzat1fsdr3QMwKxw=)
                          2: 35C2303AE6FA11EC87D3034DC4F9AE02.roa (hash: xwFfQ62VDe7rBIlaeVRpIKtxnY1xzIwaQ+FoK7Z2AtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.crl
                          rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5luo-mVwW4879u3NnQ2xD9rcuRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842 (0x34a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7E7, serialNumber=E65BA8FA65705B8F3BF6EDCD9D0DB10FDADCB916
        Validity
            Not Before: Dec 23 00:00:04 2025 GMT
            Not After : Dec 30 00:00:04 2025 GMT
        Subject: CN=6949db85-7adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:a2:86:e9:71:b4:c2:ce:36:5b:76:e0:ee:
                    e1:7b:d2:6f:bd:8e:34:c5:bb:b8:13:cf:53:ab:ba:
                    63:0c:25:3a:7c:d4:5c:ab:09:a6:92:bc:58:b8:5b:
                    fc:d6:18:3c:3e:3f:ca:a0:00:cf:fa:c5:df:b9:d5:
                    e5:76:7f:64:73:90:fb:8f:2a:de:ca:0a:27:6d:2e:
                    1e:35:a4:a6:8b:de:28:57:21:0c:3a:16:f4:b7:76:
                    04:12:da:1a:6e:9a:e4:fe:b8:bb:03:6d:fd:df:c3:
                    de:dc:61:01:8d:b2:88:f8:7e:07:74:b7:10:0c:c6:
                    da:75:30:a9:e8:ea:f9:26:90:1f:34:44:3d:59:8f:
                    35:99:b4:a9:82:4f:47:db:6c:5c:d8:c8:c6:0f:71:
                    d3:68:e3:0c:f2:18:f7:60:1e:64:a4:ba:ba:48:68:
                    cc:3b:0a:aa:5e:74:73:13:66:07:2f:16:01:01:e1:
                    ad:9c:82:f1:75:5f:88:f2:2e:52:c1:eb:4f:c3:95:
                    47:0a:a4:c2:ea:be:7e:34:69:6f:3e:dc:66:36:0e:
                    d9:23:05:a8:7b:5e:8a:a6:13:18:90:04:64:e8:9c:
                    e9:9d:c6:14:60:59:57:ff:92:96:7c:96:4e:c9:68:
                    77:bd:1b:f3:91:80:56:d3:bc:99:22:69:2c:08:6c:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EB:21:AD:03:0A:EF:91:60:FE:0E:F8:14:02:AC:AD:CC:AE:47:8B
            X509v3 Authority Key Identifier:
                keyid:E6:5B:A8:FA:65:70:5B:8F:3B:F6:ED:CD:9D:0D:B1:0F:DA:DC:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5luo-mVwW4879u3NnQ2xD9rcuRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b4:54:7a:02:2c:ec:03:24:fa:0d:1a:1b:cc:46:1d:3f:ae:
         84:36:40:51:18:92:ce:4a:64:84:26:d7:d7:f6:39:54:fc:ab:
         3c:3b:e9:59:e8:f0:55:2a:0f:55:72:80:7d:fe:0b:a3:84:17:
         d4:95:13:c1:b3:87:f5:ba:be:fd:d7:50:1f:ad:c4:f0:32:70:
         1a:a7:e6:66:f4:32:7e:2d:ef:86:b2:9d:ab:ed:f4:07:03:5c:
         f3:21:cf:d0:69:f4:33:46:b5:3e:fb:41:55:c4:53:29:4b:df:
         ec:04:97:d1:6a:5c:87:2e:b4:f0:2b:1b:ab:ed:88:b5:85:1c:
         90:bb:e8:4a:77:5d:22:23:70:a2:98:04:fd:05:b8:db:fd:8e:
         55:02:7d:ba:87:d8:19:6f:29:3e:b4:c3:9b:2b:9d:8b:25:68:
         5f:b7:be:fc:31:53:47:09:72:cd:4b:77:55:89:af:4e:d8:f4:
         6c:bc:9a:d3:f9:30:e3:33:0f:1e:5c:5d:a7:e7:90:b2:7c:a8:
         bd:f9:19:65:aa:b0:cb:bb:e1:6d:85:2e:bb:81:62:ef:2a:ce:
         92:16:f9:cc:58:f9:4a:61:4b:fe:99:8e:ae:f4:73:04:a9:f2:
         02:43:04:4f:7b:4f:6f:50:6e:6d:fa:c0:90:52:36:92:96:65:
         86:7b:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:15 2025 by rpki-client