This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
File:                     IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json)
Hash identifier:          uEErDIL/2tWA0fYIuVYFeUVVtvJu5i1YyCLjPSpU0Ic=
Subject key identifier:   C7:57:25:DA:45:F6:ED:91:D3:26:47:2A:2C:CA:50:5B:C5:CA:5F:92
Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Certificate issuer:       /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
Manifest number:          0192
Signing time:             Fri 19 Dec 2025 02:39:54 +0000
Manifest this update:     Fri 19 Dec 2025 02:39:54 +0000
Manifest next update:     Fri 26 Dec 2025 02:39:54 +0000
Files and hashes:         1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: NjlpSi4iGHF+6tZnewcE572B8qDBC+E3xMeTtG+loaI=)
                          2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: NL2B/4GQlU6898TW3L7nz1mTW3uITWFr+ho/KHtzb/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
                          rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
        Validity
            Not Before: Dec 19 02:39:54 2025 GMT
            Not After : Dec 26 02:39:54 2025 GMT
        Subject: CN=6944bafa-93ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:fe:eb:25:33:d6:7e:be:9e:1f:7f:4b:f0:
                    08:0f:be:29:56:2b:83:29:24:04:8c:8e:5b:d7:e4:
                    7a:19:0d:bf:70:cb:b9:db:dc:b8:59:72:d6:69:35:
                    3b:0c:9e:b8:64:0f:9b:3b:9a:19:7b:b7:ed:a6:af:
                    32:5a:55:85:03:7d:9a:36:43:55:79:de:b7:29:f5:
                    c6:57:f0:8c:6c:43:6d:fa:84:f5:db:0d:08:b8:63:
                    b4:fb:d0:30:ed:e0:3f:ec:b4:30:61:6f:cf:34:d2:
                    52:70:c7:6e:45:52:72:3b:ec:0e:1d:46:81:ac:1f:
                    4c:d7:47:e8:e8:c5:a0:58:f6:d6:9b:2e:c3:01:af:
                    33:32:f8:6c:bf:84:b7:95:bd:d5:7f:f0:8b:ee:21:
                    92:95:c6:eb:cb:28:a1:c4:79:a3:3e:2e:8c:33:21:
                    ea:95:64:f8:ec:e5:e4:64:ac:a5:57:04:c6:c1:27:
                    c7:05:23:78:37:72:89:e1:7b:bf:72:4b:c4:46:cc:
                    7b:2c:1a:83:98:a0:99:2c:48:fb:9b:fc:a3:f7:fd:
                    32:1e:a9:15:7f:21:92:2f:e5:de:b3:e7:01:00:4d:
                    c8:06:f8:32:d2:11:99:cc:8b:c4:3b:43:4e:5a:6b:
                    ab:56:c6:ba:f3:2c:9b:cd:8c:13:48:24:ef:e2:84:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:57:25:DA:45:F6:ED:91:D3:26:47:2A:2C:CA:50:5B:C5:CA:5F:92
            X509v3 Authority Key Identifier:
                keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:df:ed:00:a5:5c:f6:bd:2b:d8:9f:9c:95:3c:55:34:da:28:
         53:a8:b3:40:71:ea:35:cd:9e:38:4c:52:12:1f:09:57:42:5f:
         af:7a:7b:c3:b6:cb:a9:26:8a:67:e8:47:72:09:51:10:2f:db:
         38:f7:4a:5e:e5:0e:60:d8:78:95:ed:c5:79:a4:52:b1:b4:62:
         88:61:05:bc:12:60:5f:ff:8d:15:15:83:7c:bf:e1:26:7a:1a:
         ed:1b:b1:ea:19:2c:1e:2f:f0:63:5b:6e:f7:6d:fe:cc:58:a8:
         23:12:6f:40:73:56:3b:5c:af:81:58:bd:13:8b:b9:e5:8a:f8:
         98:ce:ed:e3:58:29:30:64:f7:18:d9:69:d6:0b:79:f5:f5:c1:
         ec:9c:bf:69:d9:75:53:82:97:3b:9f:38:c3:87:c5:4d:7e:da:
         0a:22:10:c1:f1:93:84:ed:eb:a8:d5:fb:ab:b2:e7:33:6d:b5:
         4e:6c:36:ef:a4:f4:64:05:5a:31:62:95:e7:10:64:22:e4:91:
         da:02:4e:f1:a0:77:6e:77:86:7a:44:68:3b:81:12:b9:f0:b1:
         0f:30:bf:08:ce:75:21:28:89:d3:f2:ab:8e:c6:a6:8d:30:ec:
         e5:42:09:60:65:45:ac:6a:74:7c:2b:84:2c:3a:da:fb:82:f5:
         66:d7:16:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:51:21 2025 by rpki-client