This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File:                     vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier:          Ylvhjuo3YLzz8OZzDStoMgaXH/AJoliizg/BXJAU/II=
Subject key identifier:   4B:C4:4C:AE:5B:F3:41:AA:89:16:F3:41:06:22:AD:3C:EB:58:47:27
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer:       /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial:       0568
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number:          055C
Signing time:             Mon 08 Dec 2025 21:59:47 +0000
Manifest this update:     Mon 08 Dec 2025 21:59:46 +0000
Manifest next update:     Mon 15 Dec 2025 21:59:46 +0000
Files and hashes:         1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: 2u4Rn6hd+odJfYctPAQ92GU64bQpdFCX8M2Xd5TVHY0=)
                          2: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: EaQ615UaoSlbYGe5kp9Ft1URPJxHKbUFtgfGcBgBPeU=)
                          3: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: GLm2AKslZ/503xaJdyFMTW6e2t7uEKz1XmKi3aW5E9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 21:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
        Validity
            Not Before: Dec  8 21:59:46 2025 GMT
            Not After : Dec 15 21:59:46 2025 GMT
        Subject: CN=69374a53-32ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:72:75:0c:f0:4e:7e:45:ee:46:b3:a3:da:
                    ab:9e:8a:fe:cb:a2:43:ae:4e:fd:3b:4e:49:ec:2d:
                    1c:ef:ea:a1:fb:3c:53:b3:13:5a:9a:0f:d5:58:d4:
                    40:bb:29:b7:9b:02:89:20:5d:73:3d:61:a8:1e:9e:
                    35:13:06:06:9f:4b:19:f8:2d:00:a5:7c:4b:e1:36:
                    89:2e:9c:26:6a:b7:10:2f:8b:34:2b:ad:1e:65:12:
                    bb:91:f6:a9:3d:42:c2:c8:00:c8:07:45:3c:60:37:
                    82:aa:dc:e1:4f:aa:db:37:1c:c6:7d:60:d0:f1:87:
                    60:b5:ce:4a:ab:49:bb:65:b9:0e:9c:ad:10:8a:8b:
                    64:45:10:e8:78:cb:fc:bb:3d:43:41:f1:9f:a0:b9:
                    51:ca:c8:ec:f2:b5:5f:51:ec:4b:02:e9:fb:92:df:
                    8e:b9:21:b5:4b:cc:6f:4e:06:20:30:da:5a:2a:50:
                    06:92:a3:b7:48:03:5d:92:0c:e0:b2:5c:d8:4a:9d:
                    fc:b4:8b:bb:87:72:ec:05:7c:bb:0d:bb:9f:1e:ac:
                    5a:49:17:72:ec:d8:bd:32:cb:6c:df:78:8e:2b:da:
                    75:b2:b7:ae:45:eb:5c:70:2d:d8:e8:cb:45:0a:95:
                    61:88:b9:07:91:65:ac:5a:d1:dc:d3:f5:12:34:bf:
                    17:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C4:4C:AE:5B:F3:41:AA:89:16:F3:41:06:22:AD:3C:EB:58:47:27
            X509v3 Authority Key Identifier:
                keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:e8:24:4d:94:41:4e:e4:f6:ff:13:27:5c:58:b8:60:6b:
         9b:90:fc:38:c9:0c:54:9b:83:db:96:c4:1b:59:14:b5:ea:bd:
         0c:b5:86:c8:56:89:b7:70:a1:24:6f:7c:ea:02:ec:c7:31:3a:
         57:d0:b1:e0:89:4e:59:1c:df:5d:24:ac:87:8c:6a:3e:ad:36:
         e1:f9:54:bf:2b:af:0e:88:84:76:6a:01:08:91:3b:77:1c:63:
         8b:86:26:c9:2b:0a:71:1a:52:66:04:63:85:e1:ba:24:d9:75:
         c0:1d:14:da:1a:33:a2:b3:5c:4e:09:ad:58:bb:a3:5b:ae:06:
         a6:9b:36:85:47:33:7f:7f:cc:19:9a:51:c2:7e:83:f9:c0:80:
         3c:ea:2f:8a:e0:f5:1d:97:b1:07:e2:73:d9:b4:59:54:a4:be:
         86:36:5a:f8:7b:8e:67:ea:eb:9c:b5:fa:90:66:13:4d:07:be:
         cb:f3:68:47:1d:b5:92:61:6f:77:9d:af:0d:9a:20:3b:c9:26:
         bc:7d:27:37:17:cb:39:aa:ac:b3:60:c1:67:63:72:8a:36:ad:
         1a:c7:30:92:14:60:55:32:26:82:3f:7e:59:8e:91:e9:ae:7b:
         2a:5d:ae:8f:09:46:ec:84:b0:b3:02:c1:6d:e9:9a:f6:aa:73:
         01:10:e0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 20:19:11 2025 by rpki-client