This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
File:                     g1pslrIJJMfl2PEvBtud0j4lL10.mft (raw, json)
Hash identifier:          AsD3HQiKNbxk0PwcduO5coCAjFrSKPRHaJ1Z2uLfnFY=
Subject key identifier:   A5:FB:D8:19:45:F1:21:5C:2C:ED:58:93:E1:FF:36:F6:D1:52:EC:35
Authority key identifier: 83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D
Certificate issuer:       /CN=A91676D4/serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D
Certificate serial:       05FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
Manifest number:          05E6
Signing time:             Tue 02 Dec 2025 22:01:51 +0000
Manifest this update:     Tue 02 Dec 2025 22:01:50 +0000
Manifest next update:     Tue 09 Dec 2025 22:01:50 +0000
Files and hashes:         1: g1pslrIJJMfl2PEvBtud0j4lL10.crl (hash: AZhi7NsIlBuYiVVc28oOqAnAHBm8LVx36sTxEwbX464=)
                          2: AE6589F4A9A911F085996109C4F9AE02.roa (hash: 26+gxs1gzvz+QIiMKlK+TV7X1aYtpPNToYpWj6oxYM8=)
                          3: 57FD28280C8311ECB6423427C4F9AE02.roa (hash: rjO6PN16N8TMCIcm++9aWgqoxOnSzEH/CogwKhERvrA=)
                          4: BB8B992A1B6011F0AFD7AF11C4F9AE02.roa (hash: P10bmZyQ9VOb7m2Vh8TJf/lLVkjy1QP/hu7mglhB5DI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl
                          rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 22:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1532 (0x5fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676D4, serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D
        Validity
            Not Before: Dec  2 22:01:50 2025 GMT
            Not After : Dec  9 22:01:50 2025 GMT
        Subject: CN=692f61ce-5c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:44:d5:64:cc:83:8e:69:33:25:45:03:86:
                    f4:84:32:68:b8:05:c4:f8:4e:46:06:d0:0c:2a:ca:
                    e3:ca:c2:35:51:31:93:59:8f:20:57:1c:54:ad:f3:
                    47:bc:ea:dd:52:62:aa:fe:fa:01:5a:b9:a8:fe:59:
                    14:fa:28:f3:fc:c8:13:63:d6:b1:cd:6c:91:09:85:
                    99:82:9b:26:5e:d6:27:09:05:ea:d1:f3:39:d2:ab:
                    9f:f0:37:d9:46:fc:96:06:b2:5b:22:c5:1a:c3:b0:
                    99:01:68:09:20:ae:94:f6:b6:e1:c7:99:c6:21:3c:
                    ad:f2:b1:91:45:de:5c:20:21:93:f3:f2:ce:3e:f7:
                    48:f4:a4:35:f2:51:05:2d:84:ce:6b:f0:b9:b6:f7:
                    a6:62:6a:83:d1:2c:aa:f8:2b:9f:64:11:fc:d0:ca:
                    0a:32:e0:19:79:1b:0b:20:6c:78:03:31:47:c1:fb:
                    34:61:84:b5:02:b2:ca:66:e2:51:67:44:56:98:ba:
                    8a:c4:ee:1d:43:a6:60:9f:04:09:65:e3:f0:d3:d0:
                    3c:af:2d:99:12:77:eb:3e:81:95:e2:79:a9:b7:48:
                    2b:98:0a:45:0c:28:a7:65:12:e5:da:4a:e0:07:10:
                    10:3b:8e:21:85:21:cb:22:ef:66:78:7e:d1:31:03:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FB:D8:19:45:F1:21:5C:2C:ED:58:93:E1:FF:36:F6:D1:52:EC:35
            X509v3 Authority Key Identifier:
                keyid:83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2d:b9:45:aa:f3:5b:11:ed:dc:89:f6:b5:c5:93:b2:df:c1:
         1f:4a:ba:82:b9:b1:70:44:50:14:f2:00:6a:e9:f1:59:3e:23:
         b3:84:ab:94:ab:81:72:45:23:88:60:fc:b2:ad:c8:59:1a:ae:
         56:12:d9:d3:b0:c3:f2:c1:c3:2f:1c:2c:9b:ba:8e:03:75:5c:
         71:ed:98:44:8f:86:99:3b:9d:41:10:b0:5a:80:27:d4:81:d2:
         3a:1b:bb:0a:98:05:2d:f8:70:d8:87:33:fc:5d:7e:7d:ca:e4:
         d1:c9:ca:a5:db:7d:e7:21:77:fe:3e:13:84:cb:29:74:04:2a:
         35:71:18:c2:86:50:b2:ff:12:73:fa:02:91:db:0e:a0:f0:7f:
         cb:20:ad:83:c9:7a:de:81:9a:aa:cb:de:53:cc:39:09:10:de:
         76:cb:5e:99:6b:bf:9a:b3:9b:43:ca:a4:bb:c6:9e:22:32:f7:
         c0:78:da:ef:cf:55:55:0d:e9:2e:44:fb:4b:e4:c7:5e:ea:6f:
         da:42:77:85:4b:4f:30:86:59:f2:01:c8:89:cf:33:38:c4:75:
         5d:73:d5:14:fe:02:c7:16:5a:9f:e6:4a:30:d8:bf:d5:6a:63:
         10:e4:9f:69:49:5a:28:c7:86:4e:1a:44:af:48:a7:41:18:70:
         54:c0:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 08:30:11 2025 by rpki-client