This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
File:                     5x94KlPaFtsf0wxsDSYVQnUipt4.mft (raw, json)
Hash identifier:          XnJacwSbyKiE64RO2uIBDz2V+bRh8Nk7KhGgEafsGBs=
Subject key identifier:   AD:C0:E2:EC:2B:53:66:BE:37:68:2F:DC:C7:22:96:DB:42:16:CC:2F
Authority key identifier: E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
Certificate issuer:       /CN=A918ADBA/serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
Manifest number:          12
Signing time:             Tue 23 Dec 2025 06:49:05 +0000
Manifest this update:     Tue 23 Dec 2025 06:49:04 +0000
Manifest next update:     Tue 30 Dec 2025 06:49:04 +0000
Files and hashes:         1: 5x94KlPaFtsf0wxsDSYVQnUipt4.crl (hash: KY2yrBiobnIn2jkadeXjukCHMTevnzwx2h4uIUEHWos=)
                          2: 95C751AAC99F11F098604B44C4F9AE02.roa (hash: NmpEc8D8qa0q1zd5A3YpqQoZSHsGMDweaQM/Ibr7UC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
                          rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ADBA, serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
        Validity
            Not Before: Dec 23 06:49:04 2025 GMT
            Not After : Dec 30 06:49:04 2025 GMT
        Subject: CN=694a3b60-cafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:86:63:ac:b0:6a:0a:c2:a3:0c:8a:fb:75:
                    2a:8d:48:14:50:ef:9b:8a:4e:2c:0d:82:0c:42:e6:
                    8d:12:39:90:ef:79:58:5d:24:27:e5:55:f2:3b:3b:
                    1d:7c:48:31:c2:3e:6a:8c:98:16:d5:63:13:08:74:
                    a2:a6:9e:e2:ca:0b:f3:ba:30:98:33:87:fc:49:f2:
                    2e:c5:0d:37:44:2a:3f:38:58:ca:05:52:10:6e:ae:
                    f5:56:90:0b:8c:57:6f:43:91:c0:aa:c7:78:de:5a:
                    94:54:81:77:60:97:44:4f:03:6f:6b:2b:3a:87:33:
                    99:8d:b5:94:ee:05:28:6d:47:41:9d:4a:35:b6:4d:
                    96:c4:94:b9:2f:e8:96:2a:66:fa:6c:aa:18:f9:01:
                    df:91:41:31:2d:2a:6d:17:a3:c7:10:7b:4d:5d:b9:
                    9e:7f:c9:78:4f:60:04:5a:0d:b2:38:a2:39:58:23:
                    92:d2:07:f5:08:be:36:2b:dd:3d:75:b1:e2:21:80:
                    f2:a0:00:59:f1:52:d7:fa:ed:7e:4b:a5:62:fd:9a:
                    ca:51:41:ee:93:7f:a3:08:7d:5b:f0:5e:9c:85:7e:
                    ae:87:bd:47:fe:22:4b:40:8a:94:04:65:0b:ee:ce:
                    9f:3a:df:c1:d9:71:a1:58:9c:77:cf:aa:9f:43:0c:
                    69:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C0:E2:EC:2B:53:66:BE:37:68:2F:DC:C7:22:96:DB:42:16:CC:2F
            X509v3 Authority Key Identifier:
                keyid:E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:55:81:1c:82:7f:e1:4a:2f:c1:fd:7b:90:86:66:81:cf:a2:
         96:80:5d:11:ee:8c:34:22:26:4c:87:92:ec:72:5f:dd:fb:27:
         e3:9b:3e:bf:5c:7e:54:74:19:d6:f4:89:65:0f:58:dd:f3:43:
         65:d8:a1:60:5e:35:77:77:0d:28:c1:02:0e:01:2a:67:60:d2:
         9b:7e:90:0f:92:cf:0c:df:30:bf:02:c6:b4:a4:54:42:7c:5e:
         f4:a5:a9:2f:db:b0:62:01:41:ae:44:5a:89:37:d1:d7:8c:f6:
         2a:9c:90:a0:83:cc:c5:1b:76:5e:d0:8c:73:de:bb:27:d5:d2:
         c7:cf:db:0c:4d:d3:51:f6:bc:65:be:12:11:d4:53:ab:1d:66:
         a3:f0:ee:9c:93:95:4b:80:ff:a5:01:ac:b5:20:48:3b:5f:30:
         f0:7d:13:5e:87:33:6b:66:b5:c9:de:7c:9c:8e:00:58:25:cf:
         dd:b7:86:32:4c:74:5c:7e:4d:ec:01:04:3c:fb:62:85:3e:6b:
         a1:7b:ea:07:9a:a1:89:6e:0d:8f:f2:e0:51:e2:95:53:c1:8e:
         f6:c6:9c:c2:83:75:c9:55:6f:f4:1a:82:3b:a9:b0:b9:d0:5f:
         f5:20:f5:b3:1f:07:9e:c2:0f:0f:20:75:cc:c1:6a:a5:db:31:
         c4:34:1d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:07 2025 by rpki-client