This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
File:                     5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json)
Hash identifier:          hlgBpHlbkPUZVm17gE0HI+sFPzxjpmiLG1jApb0grU8=
Subject key identifier:   02:04:8D:FD:C9:F9:53:BE:FE:3A:65:38:0E:91:AB:1E:68:99:FB:87
Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2
Certificate issuer:       /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
Manifest number:          0183
Signing time:             Tue 23 Dec 2025 02:44:44 +0000
Manifest this update:     Tue 23 Dec 2025 02:44:43 +0000
Manifest next update:     Tue 30 Dec 2025 02:44:43 +0000
Files and hashes:         1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: ZUakGrHQZ1fLMHDIA4OsJxJ6Gda4fxkCZhMBmYVvDIE=)
                          2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: Lg11zjVs27vb2oJIfdyoCpLaTBOQjwIoy8A24z6T1mQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl
                          rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
        Validity
            Not Before: Dec 23 02:44:43 2025 GMT
            Not After : Dec 30 02:44:43 2025 GMT
        Subject: CN=694a021c-1f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:60:e2:1f:16:25:98:9f:bc:4e:1c:a1:b4:a7:
                    58:bc:95:e7:4e:72:29:ac:ed:a4:e5:57:a9:ee:d9:
                    7d:0c:90:3d:af:06:49:c4:1e:f9:4a:5f:0c:ca:4f:
                    bb:bd:e2:3f:a6:6c:c6:e8:e9:65:d8:29:4c:8d:a0:
                    25:4b:cc:e6:56:25:90:55:dd:8e:15:b1:6b:47:0f:
                    1b:31:fa:66:3b:bd:a5:bd:32:63:b6:cf:1b:12:27:
                    47:a3:41:38:2b:e6:72:1f:87:52:29:42:c5:dd:3e:
                    6e:00:05:c0:b2:dc:11:0c:d4:85:7d:62:82:25:06:
                    ea:d9:fe:c9:60:ed:93:69:30:12:b8:c0:e9:4f:58:
                    84:a8:04:35:ab:98:15:f6:4a:db:8d:0f:37:50:bd:
                    a6:b3:0d:ac:26:f7:68:c6:12:07:11:e3:f8:7e:da:
                    0c:37:42:14:02:67:45:2d:1c:36:2d:25:3a:8e:60:
                    6b:f4:77:0c:b9:c3:52:44:58:79:0d:4d:cf:3b:50:
                    68:73:c9:78:8b:d2:38:b5:82:97:51:08:14:08:46:
                    a6:da:0e:27:99:22:7f:2c:6e:98:ce:f5:36:59:b9:
                    b5:56:55:85:6a:08:a6:95:f3:c0:3e:b3:db:b4:5d:
                    53:5f:42:c1:91:df:3a:68:5e:ba:58:21:16:50:35:
                    ad:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:04:8D:FD:C9:F9:53:BE:FE:3A:65:38:0E:91:AB:1E:68:99:FB:87
            X509v3 Authority Key Identifier:
                keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:99:7d:b3:3f:11:45:6e:b9:00:76:0b:f5:b6:72:90:81:44:
         aa:ca:fc:ae:ce:86:a6:de:0a:96:d2:35:7d:9c:f8:1b:7b:e3:
         67:2d:4c:0b:4a:33:5a:ce:96:b2:f9:0c:d9:7e:b0:a0:a2:c2:
         b9:d8:69:ea:15:34:ea:d6:70:1f:cf:61:df:77:6a:a2:99:cc:
         0c:f5:ba:e1:83:49:75:a7:f7:74:ed:50:94:a9:ad:51:72:e7:
         ee:5f:21:4d:3a:7e:54:ed:b2:fb:c1:25:98:39:72:34:16:e1:
         0c:cb:54:63:13:6e:6b:42:f1:88:ea:6b:5b:f4:64:9c:2a:e2:
         36:92:57:a5:da:01:6c:fa:e7:a6:25:30:90:01:c9:93:94:d0:
         11:1b:e9:1d:e6:a5:63:93:33:f5:24:1a:54:52:9d:ea:9b:8d:
         a4:6f:b4:4c:b9:7d:43:c1:29:f8:a7:a3:97:af:a8:b7:61:b1:
         71:c7:88:72:1c:3f:cb:7f:5e:eb:4c:3b:c8:d2:1c:2b:da:2f:
         ec:05:f8:d7:e4:05:17:dd:5b:bb:99:82:67:0f:b2:88:fe:48:
         bb:66:d3:0e:ae:21:d8:a1:a0:0f:ef:0f:c6:54:ce:4d:fa:d5:
         63:4d:d4:2e:42:fc:4d:37:73:5f:6a:9a:12:d9:9b:d8:69:80:
         b2:90:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:15 2025 by rpki-client