This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
File:                     5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json)
Hash identifier:          uFmmHhcyB/2jJCnwtRLX+ShiO1NM6ZvbFbARqmyb8No=
Subject key identifier:   5A:2F:6A:66:C1:59:26:B6:BE:1C:E4:63:DF:08:68:CB:27:06:97:FD
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Certificate issuer:       /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial:       19D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
Manifest number:          19B1
Signing time:             Mon 22 Dec 2025 16:08:57 +0000
Manifest this update:     Mon 22 Dec 2025 16:08:56 +0000
Manifest next update:     Mon 29 Dec 2025 16:08:56 +0000
Files and hashes:         1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: u727xUNUVsC1WI5Mvo2dg1CCUSknS5nYV/iLvTTzqYM=)
                          2: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: 7+Ks4jZyLMHPbzW7FZP/GDFbxrDItsZ+/jUs9u2MSic=)
                          3: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: lV2/2NW27xVZaBILThpNeuepTXhQgC2yA5suVSBt5Mg=)
                          4: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: /pOoncr1KzYRXYjLbZuRohrO0FiLH7LyekaH9trend8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
                          rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6608 (0x19d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
        Validity
            Not Before: Dec 22 16:08:56 2025 GMT
            Not After : Dec 29 16:08:56 2025 GMT
        Subject: CN=69496d18-608a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:e3:6c:32:df:20:0d:1d:e7:b8:62:99:f7:
                    6f:a0:c7:49:86:2f:88:31:a9:fd:74:73:78:ce:2f:
                    2a:f5:4f:2b:66:06:88:82:50:9c:fd:eb:38:42:2c:
                    94:1c:16:05:9e:8e:95:01:b0:07:61:f0:19:e4:e3:
                    61:48:cf:b2:02:79:ce:e7:14:07:7c:48:a2:7b:85:
                    5b:3a:cc:6c:52:99:9b:d2:69:9c:1a:02:cd:d6:6b:
                    e2:fb:90:e0:56:6b:4b:3d:62:a1:2e:84:55:8e:26:
                    d4:6b:9b:da:1a:70:2b:c9:60:54:29:bf:45:23:3f:
                    f4:55:8c:cd:38:f5:e1:50:c0:5f:14:d6:c4:4a:09:
                    22:07:33:0f:5e:23:69:41:4c:25:9a:93:8d:bc:7d:
                    1e:57:83:8c:3c:98:1d:a0:9a:0b:0b:8e:9a:96:48:
                    eb:2b:45:a8:80:fa:6f:e4:64:7e:70:a6:72:7c:b1:
                    d3:34:91:90:5f:93:83:8a:93:94:52:b3:c4:a8:c6:
                    e1:35:f7:a1:48:6b:2a:1c:09:28:1d:16:fe:ee:b6:
                    fa:e6:dc:c9:86:d4:88:04:61:58:5f:ac:40:74:4e:
                    9e:ca:73:19:a4:8e:3a:04:99:54:25:28:ba:bf:3a:
                    c0:06:d1:3a:d4:2a:a6:fc:cb:57:93:d4:2d:d9:72:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2F:6A:66:C1:59:26:B6:BE:1C:E4:63:DF:08:68:CB:27:06:97:FD
            X509v3 Authority Key Identifier:
                keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:7e:01:8c:7c:89:b6:99:a4:f8:9d:8c:9a:83:9c:8c:7e:
         64:b1:f7:d3:68:f1:a9:ab:65:a4:91:8a:bf:3b:5e:12:55:ee:
         b9:71:f4:89:37:ef:6b:58:74:d5:16:02:7f:d3:14:ea:12:9d:
         17:e7:35:70:6d:98:7c:ea:d4:87:3c:b9:12:6c:e4:02:cc:d1:
         6d:88:2a:48:9b:9b:3d:70:11:ca:f2:5d:4b:1b:cf:02:fb:9a:
         39:30:d2:e3:94:90:8f:2d:c9:4a:ed:33:b1:6e:eb:1b:81:bc:
         5b:97:42:f0:54:11:c4:01:73:0b:cb:d8:62:e7:d0:59:a4:f3:
         4c:64:04:fb:6e:be:d8:d1:c4:e4:0c:9d:5e:85:54:ff:b3:ec:
         fa:6a:7a:e5:91:ba:8a:45:7f:47:f8:37:6f:36:2a:94:c3:28:
         62:2f:5b:87:bf:32:f3:da:df:15:33:0e:07:d2:dc:e9:a2:22:
         de:f9:ea:88:3e:01:91:e5:d6:78:78:e8:f3:d1:59:15:e7:df:
         d9:2c:d4:53:31:2e:e2:0b:ca:68:6e:d4:57:bf:36:71:d8:23:
         7c:e3:ff:e9:db:d6:c3:47:dc:34:d6:de:cb:58:94:9d:30:2c:
         f2:92:2b:07:2a:15:6e:29:a7:ec:0d:27:42:0a:3b:ba:f0:23:
         dd:4c:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:40 2025 by rpki-client