This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File:                     5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier:          ecvufIqMMSJ7nAkzmZ0ivYQ/eEWikYf63YYQKt46ZKU=
Subject key identifier:   AC:00:CC:57:1F:0D:02:FC:D3:9D:50:09:2C:29:A4:DE:9D:15:EC:80
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer:       /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number:          012C
Signing time:             Tue 23 Dec 2025 03:40:37 +0000
Manifest this update:     Tue 23 Dec 2025 03:40:37 +0000
Manifest next update:     Tue 30 Dec 2025 03:40:37 +0000
Files and hashes:         1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: A95DoDHx6HGk/eFiGaJztmr2+iJtlQmMXEyrbWN0aOs=)
                          2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: CpFFYzKvaiG5h+2sUf464A2//gzHqQgpH0EvUR1TKwU=)
                          3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: 51G/atnUP8WE3vN2KzPoIXBsyS6vS2RXr0QbqdKbjAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
                          rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
        Validity
            Not Before: Dec 23 03:40:37 2025 GMT
            Not After : Dec 30 03:40:37 2025 GMT
        Subject: CN=694a0f35-4efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:85:bd:f9:a6:9b:d9:fe:7d:4a:c7:19:1e:
                    5b:cb:6e:91:1b:31:f9:bb:4a:37:79:93:b9:66:88:
                    ce:4a:fc:03:0b:f7:b0:a6:cf:92:ad:23:bd:55:ad:
                    bc:b2:b4:d9:6e:3e:49:e1:24:d7:8d:47:80:2a:ee:
                    60:37:c5:50:03:21:0c:3f:11:c7:41:fb:40:fd:ea:
                    21:16:f0:5e:2d:8d:36:22:7a:ff:8b:cc:47:56:ff:
                    31:22:f8:6b:81:ed:6e:92:70:d2:71:e4:4b:54:69:
                    b4:68:1f:27:ee:f6:c2:2e:1f:8f:12:2a:e2:e5:70:
                    34:9a:bc:6d:f6:a0:b4:e7:45:b8:8d:9d:42:1b:e0:
                    02:1e:54:f6:78:f1:b9:17:02:aa:c7:6d:96:ad:2b:
                    d0:34:0d:9e:43:fa:d7:f8:36:56:5c:a2:f5:47:7f:
                    5a:c0:ae:59:dc:3f:c0:2b:33:7d:1f:d1:76:09:ad:
                    82:34:7e:8a:c9:8f:43:e0:7b:99:7e:3d:72:69:9e:
                    af:6e:dc:29:59:c9:2c:44:b8:d7:a2:dd:8d:53:19:
                    aa:42:4b:83:44:00:9c:85:a8:09:8d:ff:70:bd:b3:
                    92:86:08:5e:86:e7:8a:5b:e1:81:b2:b8:3b:26:05:
                    4e:57:85:3e:b9:6c:00:18:7a:3d:21:df:5c:05:5a:
                    b7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:00:CC:57:1F:0D:02:FC:D3:9D:50:09:2C:29:A4:DE:9D:15:EC:80
            X509v3 Authority Key Identifier:
                keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0e:6e:13:3a:92:ec:89:5e:0d:e8:2c:34:bb:35:fa:2c:ac:
         53:34:c0:eb:a0:ba:05:4c:2a:61:42:b1:38:1c:8e:7a:25:90:
         96:7f:ef:22:0e:ff:ba:35:68:69:64:d2:41:3a:3d:24:38:a6:
         b5:2c:54:16:ea:6f:c5:50:48:6a:f3:e2:83:3c:9b:63:f2:38:
         fc:b8:e8:18:ac:8e:85:28:48:c8:0f:e8:97:59:06:c3:22:0e:
         d8:6e:12:b4:a5:60:80:fb:30:60:f6:fa:33:16:35:2e:a0:97:
         1a:1f:7c:ef:d6:d0:74:d2:d4:28:46:03:e7:e7:15:6f:4c:13:
         f5:ea:65:e7:02:5c:2e:39:55:4b:53:53:de:4a:f7:b0:72:88:
         84:12:68:8c:c5:1f:f9:8f:86:a2:7d:13:08:47:d6:8e:1e:b8:
         f6:14:b7:58:b1:66:33:6f:0e:c5:23:ea:5c:df:94:56:73:db:
         54:cd:ac:bd:9e:9a:e1:43:f9:21:40:a1:ca:0b:04:db:f7:b7:
         db:05:f1:77:a9:54:ef:73:e7:10:aa:37:47:2c:da:01:4c:cf:
         14:30:5d:a1:46:3a:f5:04:41:a2:18:dd:56:cd:76:c2:b8:0d:
         40:09:8b:5e:43:44:87:f6:03:8f:eb:73:7e:1e:11:c5:55:02:
         b0:db:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:42 2025 by rpki-client