This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
File:                     o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json)
Hash identifier:          Ik/S0iUscCL2nrCTbRkr3KJXEyme3F0KO/BxzNUynek=
Subject key identifier:   B5:16:8A:8E:00:51:D3:01:5F:4A:E5:74:EE:B7:08:9C:EF:CF:55:89
Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
Certificate issuer:       /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
Manifest number:          DE
Signing time:             Tue 23 Dec 2025 04:29:40 +0000
Manifest this update:     Tue 23 Dec 2025 04:29:40 +0000
Manifest next update:     Tue 30 Dec 2025 04:29:40 +0000
Files and hashes:         1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: NQxUwv5de+XWRt1Y1OxhygpESc1F6UYBTgYw8x7hTrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
        Validity
            Not Before: Dec 23 04:29:40 2025 GMT
            Not After : Dec 30 04:29:40 2025 GMT
        Subject: CN=694a1ab4-8750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:45:62:f0:8a:9b:c3:50:95:4f:4b:5a:59:
                    1c:12:00:ef:ea:1c:71:85:dd:23:d5:c3:89:16:c0:
                    5e:c1:43:03:f1:62:fc:82:23:e9:9f:8c:d0:25:87:
                    7f:7b:d5:78:85:d1:c7:37:13:cc:66:6f:e3:9a:fb:
                    ba:32:c3:fa:f4:db:24:ae:d3:74:0b:cc:f7:36:15:
                    22:c1:db:09:a3:99:7b:49:ed:94:0f:c7:a9:ef:9d:
                    a3:2c:3c:e2:25:71:26:27:83:30:47:89:5a:06:6b:
                    9a:48:d9:b5:7e:b4:33:f0:89:cb:e9:2c:78:20:e5:
                    7b:9c:0d:f5:4a:8b:f9:d6:11:2a:87:80:8a:b5:3d:
                    ea:8c:04:ac:20:70:1b:9f:2f:ae:c1:e4:c0:1f:e0:
                    82:81:6a:cd:73:22:9b:f5:45:40:f9:3f:30:09:f9:
                    15:5b:3f:f2:b1:ab:f1:da:2d:58:69:66:fc:e3:6f:
                    a1:f0:5d:46:78:76:92:67:7b:4c:34:fd:94:79:ef:
                    01:ee:74:38:63:3e:db:22:18:25:48:48:e0:b9:62:
                    24:70:c4:7b:01:35:91:5b:19:26:23:7b:94:46:b4:
                    d7:ad:25:3c:8a:7e:86:d9:66:a1:7f:c8:66:5a:2f:
                    a1:49:35:c7:7d:2d:17:b6:5d:a6:49:71:16:3c:4e:
                    e1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:16:8A:8E:00:51:D3:01:5F:4A:E5:74:EE:B7:08:9C:EF:CF:55:89
            X509v3 Authority Key Identifier:
                keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5a:1b:ef:ed:e3:8d:1f:7a:e0:09:83:83:a6:4b:0a:6c:44:
         ea:40:f2:51:67:71:fe:4e:67:58:a5:b7:e2:5f:ae:a6:47:02:
         5e:a1:4d:04:8f:aa:24:d4:5b:a2:ac:6c:ff:85:7e:00:0a:f2:
         bc:d2:1f:2c:45:ff:9c:6e:b1:93:2f:c0:4d:dc:7b:47:5f:8a:
         65:1f:b5:80:5a:72:ec:4d:94:ab:2b:c2:dc:0e:11:4b:d7:f2:
         36:57:82:18:bd:57:0a:16:fc:b9:ab:54:ac:e6:39:5c:cc:53:
         79:71:04:24:5c:e9:e1:3d:7a:c5:84:fd:ae:10:23:a1:0c:5e:
         d0:8e:e1:bd:87:e4:7d:83:a1:56:ab:10:27:90:24:93:18:9e:
         cf:13:af:49:ad:9e:c5:07:33:29:c6:fd:5e:21:86:78:c1:a2:
         db:b1:15:85:c5:2c:ff:0a:ae:ee:40:e2:d3:a8:fd:cb:d3:32:
         86:a1:3e:d8:cf:18:98:52:88:5e:40:38:db:35:23:38:54:be:
         e0:ca:96:6a:63:1d:5a:70:7c:35:7d:37:ec:92:5e:85:f5:58:
         51:3a:20:a6:48:0c:26:03:28:64:ab:6c:67:ee:a6:8a:e2:d2:
         df:aa:2b:59:3b:4b:1b:c4:8a:e2:b9:02:09:31:a4:d2:fb:4a:
         55:a3:54:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:59 2025 by rpki-client