This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
File:                     S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json)
Hash identifier:          3HLaUi/Lajm9FX7zjzsINms9YM4NhErnqSWkucX+zec=
Subject key identifier:   48:DA:07:2A:D0:87:BE:CE:1D:90:80:25:A2:F3:2A:C4:D8:03:0D:5C
Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13
Certificate issuer:       /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
Manifest number:          F8
Signing time:             Tue 23 Dec 2025 04:11:48 +0000
Manifest this update:     Tue 23 Dec 2025 04:11:47 +0000
Manifest next update:     Tue 30 Dec 2025 04:11:47 +0000
Files and hashes:         1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: c8NOlz5fyDLx/J97+X4Cd4YhAnO3porLNwBwRms7WOw=)
                          2: D970354A640E11EF93D18659C4F9AE02.roa (hash: etNLN0xdcIQbsfAOgbyJVGgcDaVOQsDMFkI6IBI01Ws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl
                          rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915393C, serialNumber=4B9474732B1001295F7F5D32C013693A19376813
        Validity
            Not Before: Dec 23 04:11:47 2025 GMT
            Not After : Dec 30 04:11:47 2025 GMT
        Subject: CN=694a1684-1292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:19:71:f0:e1:5b:5b:a8:12:18:0f:21:ff:
                    0a:56:95:45:9b:69:60:6f:58:ed:f7:81:07:66:73:
                    d1:98:60:47:11:12:43:99:90:d3:16:b4:e7:20:17:
                    d1:8c:01:87:c2:62:29:11:26:fc:7e:6b:75:7b:79:
                    86:11:59:81:9a:06:6f:d4:df:bf:6b:a5:3c:7e:30:
                    82:1b:39:d6:72:55:23:23:87:e0:c6:44:40:f6:92:
                    84:68:cf:45:a4:85:15:3d:02:d5:86:e3:23:f5:25:
                    85:34:5a:cc:40:ea:20:e0:fe:76:70:5a:f4:ae:21:
                    cc:77:7d:75:40:ab:c3:95:2d:83:f5:42:3a:f3:41:
                    58:50:2d:90:8b:a7:32:df:43:77:b3:cc:b5:c4:77:
                    11:19:1e:67:28:c5:5e:95:a3:df:b2:af:26:7a:d7:
                    a5:b9:c8:77:a6:f3:f4:14:32:ec:7a:03:85:d2:3c:
                    6a:82:a0:ec:f1:c8:7a:ac:c1:77:b0:ba:4b:d3:25:
                    d3:31:02:6c:f8:e4:36:fe:ca:58:e6:72:37:89:83:
                    56:a2:c0:93:82:83:8d:f0:2f:23:a8:4c:7f:ee:e4:
                    da:cb:f2:fc:2f:5b:5b:39:9b:dd:17:bf:be:dc:70:
                    4f:96:18:98:4f:a5:7d:02:d7:63:b9:33:50:a9:3b:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DA:07:2A:D0:87:BE:CE:1D:90:80:25:A2:F3:2A:C4:D8:03:0D:5C
            X509v3 Authority Key Identifier:
                keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:42:1d:00:49:a1:ed:a5:0c:b9:63:34:54:2b:fd:21:a8:bf:
         90:d7:c1:d3:03:86:da:f9:64:46:3c:5d:15:65:1e:8c:ca:9a:
         a2:af:6b:be:5d:82:94:89:3b:8b:bb:d3:5e:82:dd:ef:43:e7:
         2d:6e:ee:0b:9e:3b:2d:46:cb:c6:34:62:e6:09:ea:8b:76:a4:
         49:b0:c4:23:0c:48:3d:86:2c:71:3a:84:0a:28:50:cb:47:20:
         36:30:82:27:49:cb:9e:ac:9f:aa:02:66:56:4e:44:3b:6d:dd:
         76:5f:92:ac:88:e1:a3:20:a2:8a:5f:0e:9c:ce:31:05:9b:75:
         81:f5:06:2a:7e:6b:09:50:24:c8:84:6f:45:bb:e1:31:a6:09:
         57:b6:cd:f4:2f:d7:54:99:62:ac:db:04:fd:5a:3a:40:8e:6f:
         ca:c0:d7:8c:a2:92:f8:e4:97:04:97:78:8d:17:ce:3d:01:43:
         f1:b6:39:09:02:65:13:b5:91:6a:53:7a:de:8a:f2:93:1a:21:
         3f:75:25:fd:34:08:52:da:03:49:b9:08:a3:7c:5a:29:38:09:
         ba:af:25:6e:ce:ba:bd:72:22:ec:92:58:bf:2a:8c:2e:6f:c6:
         26:6a:9c:6d:5c:5a:3f:5b:94:7f:1f:70:13:b2:a9:af:cc:62:
         43:59:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:19 2025 by rpki-client