This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
File:                     w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json)
Hash identifier:          pgGT6/7DoAXNABs84q3ABBK7ueXzuOaznx6k77R6MT4=
Subject key identifier:   A1:B0:30:46:05:7B:52:F0:DD:CD:8B:E1:20:C8:5D:BE:84:9A:55:0A
Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Certificate issuer:       /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
Manifest number:          010B
Signing time:             Tue 23 Dec 2025 03:58:00 +0000
Manifest this update:     Tue 23 Dec 2025 03:58:00 +0000
Manifest next update:     Tue 30 Dec 2025 03:58:00 +0000
Files and hashes:         1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: O6we5K4u7A0SQdgHHXSaH9kvSQhM/ftMZt6BONrjHgY=)
                          2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
                          rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
        Validity
            Not Before: Dec 23 03:58:00 2025 GMT
            Not After : Dec 30 03:58:00 2025 GMT
        Subject: CN=694a1348-adf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:71:1d:12:ec:01:cd:18:15:d4:db:75:6a:
                    81:14:d5:00:53:98:0c:57:e3:8e:04:af:e1:b4:29:
                    6c:5b:21:89:22:d5:1a:19:2d:01:35:af:70:f0:15:
                    23:90:2b:d8:32:81:4c:50:9a:2f:95:80:6a:4b:57:
                    59:43:3f:a8:eb:7d:8f:dd:3e:17:20:39:8e:f0:9b:
                    6c:eb:e0:84:e6:0a:e6:ab:7e:b3:20:2f:51:3f:aa:
                    27:d2:54:43:d9:57:2c:5b:15:73:f4:22:c6:24:55:
                    20:be:d2:be:dd:f3:58:13:14:e1:8a:c1:ac:9a:97:
                    08:d5:17:92:ec:b5:d3:6f:6e:be:d0:55:5a:ee:50:
                    ae:b1:6f:a2:28:7d:f9:34:43:0d:8a:be:77:26:d6:
                    1c:4b:42:e6:9c:9c:d2:02:a5:cf:36:79:6e:a3:26:
                    a5:44:ad:fc:10:03:16:9b:75:5a:f9:75:98:db:f7:
                    64:3a:10:f4:46:86:6f:c3:4f:25:cc:00:94:9c:7a:
                    e0:4c:fb:7d:4a:08:81:42:ac:60:bd:3f:47:9f:84:
                    91:05:f6:8b:16:81:0d:11:d8:18:76:d9:b1:5c:f2:
                    b0:c9:94:a4:4b:ea:5b:e1:8f:8f:c4:9a:46:7e:d3:
                    82:49:d2:8d:fc:73:61:bd:48:bd:bd:c4:1f:ee:09:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B0:30:46:05:7B:52:F0:DD:CD:8B:E1:20:C8:5D:BE:84:9A:55:0A
            X509v3 Authority Key Identifier:
                keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7b:9f:14:a3:ea:89:7d:42:da:6f:03:dc:58:25:ea:9f:1e:
         62:f9:20:a6:5a:f6:34:c8:8a:ad:97:1b:1a:b3:63:3b:aa:54:
         44:68:e7:dc:42:dc:3a:dc:be:b1:9c:d3:65:bc:c4:01:66:09:
         30:79:52:a3:0f:54:cd:da:54:df:7e:99:27:3f:9d:c4:59:26:
         de:a9:3b:6b:e5:e4:8c:9b:eb:ba:40:44:9b:bf:e3:29:a7:75:
         65:00:ba:20:e4:6f:3e:8b:e3:32:77:f4:5a:e1:07:1d:cf:24:
         85:3c:db:c2:e6:a8:14:1f:f2:95:84:8c:7e:7f:00:a1:01:76:
         60:86:05:ad:d0:3d:44:5e:6e:c4:19:4e:10:c2:20:4b:b2:1b:
         a4:d8:88:99:23:46:ce:4a:78:17:a3:1e:b5:45:b5:3b:3f:48:
         24:9d:8a:e6:4f:6d:d8:06:67:74:2b:42:57:c5:31:fe:e8:c2:
         3d:b2:2b:01:8b:3e:2d:83:14:a9:d6:91:b6:00:9a:a7:94:4d:
         4a:e3:1d:50:a2:f4:c4:ae:c6:c1:1c:34:87:c2:29:46:03:41:
         4c:ab:4d:1d:3f:a8:61:bb:5e:ba:5c:99:68:aa:eb:ac:0a:63:
         38:80:4e:07:01:e1:8a:5d:58:ee:c7:ba:5d:48:00:5f:61:38:
         4f:37:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:07:12 2025 by rpki-client