This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
File:                     Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json)
Hash identifier:          lGQcPFoHki+A3gzuqn+VTJguzCL+d7/rRmAoLV0+4MI=
Subject key identifier:   45:68:EB:48:7F:4A:87:0E:94:DF:59:D8:2E:27:A9:02:71:D6:52:4D
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
Manifest number:          014E
Signing time:             Tue 23 Dec 2025 03:26:33 +0000
Manifest this update:     Tue 23 Dec 2025 03:26:33 +0000
Manifest next update:     Tue 30 Dec 2025 03:26:33 +0000
Files and hashes:         1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: 7ty8YY1BGvNw9RAMu57zMcn9jc5yIeY7taY+yXzTBN8=)
                          2: 1E5C2C5AB29611F09FBA3C5FC4F9AE02.roa (hash: HO455dnGSFFv71vVWjqwuOo42txHTtv1EfogsEGoJTI=)
                          3: B7B28B24B29611F091864D65C4F9AE02.roa (hash: R+HTfU3ExQBNMZ+axibvvpKJt+DXstKCKz/X+iou2Bc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: Dec 23 03:26:33 2025 GMT
            Not After : Dec 30 03:26:33 2025 GMT
        Subject: CN=694a0be9-e95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:6f:93:d8:d4:9d:fa:45:5f:a4:5a:46:73:
                    3e:68:4d:14:5b:3b:0a:c1:70:c5:ee:43:e5:8b:8e:
                    c3:c1:6b:95:44:0a:d8:5d:e8:a0:51:e1:3e:2a:b2:
                    bb:ee:55:7a:42:da:0a:68:13:20:30:88:51:c9:a6:
                    44:38:ae:ab:27:4a:dc:50:12:35:c6:c5:e1:f5:0f:
                    93:84:38:16:36:18:e2:17:48:b2:93:cb:0b:67:b8:
                    15:4f:65:5a:61:86:47:a9:24:d1:c3:0c:02:38:0b:
                    c0:1d:04:0d:5e:45:c9:2f:64:d7:75:49:82:17:e7:
                    c8:b6:5f:35:f6:37:13:db:90:ba:4a:48:60:a8:21:
                    97:f6:fc:05:c7:98:73:cc:86:f3:09:5b:70:fa:8a:
                    8f:ec:09:f5:e0:d0:4e:c3:80:61:4e:74:32:fd:6c:
                    76:db:3d:39:2d:b6:76:b2:40:aa:d4:1b:cd:9e:c2:
                    35:01:5a:93:a1:45:4f:f4:45:85:cd:4b:c4:8c:43:
                    fb:4e:87:2a:4c:31:1e:f7:74:10:38:29:3d:f9:58:
                    f5:17:3c:0b:14:9a:5c:7f:30:9b:cc:bb:d6:13:16:
                    d9:12:17:0a:4a:a2:42:b4:44:e5:a9:2b:8e:ef:e9:
                    46:9b:ad:77:92:2d:14:b6:a0:42:9b:be:20:96:9e:
                    4a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:68:EB:48:7F:4A:87:0E:94:DF:59:D8:2E:27:A9:02:71:D6:52:4D
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9a:5c:4a:84:0c:b0:5b:dd:81:9e:4e:aa:e2:4c:b8:ff:6a:
         fc:45:a9:fe:5f:8c:90:0b:90:6f:3b:f2:7e:2c:b6:dc:f7:dd:
         0a:e4:4f:7d:6c:b8:cf:76:2c:0e:8e:55:a8:1c:2c:ed:a2:5c:
         44:96:b6:ba:40:73:63:0d:45:51:f5:00:77:59:69:20:34:c2:
         ac:48:94:af:c5:dd:c2:40:89:88:c8:ff:db:5a:a1:59:c1:ee:
         d5:0e:33:2b:91:1c:18:aa:bf:2d:0a:90:fb:6a:b4:07:67:96:
         25:4a:84:2a:21:cb:1c:04:08:ed:9a:9d:1d:bb:71:c2:96:df:
         92:91:df:28:43:cd:a4:d0:44:1a:df:2f:5f:9d:01:6a:63:ac:
         bb:23:d7:3a:97:27:03:57:df:84:df:de:fd:af:ac:00:e0:94:
         bb:15:e4:1d:a3:21:5f:89:7b:fb:0a:9b:29:43:10:98:83:68:
         f8:b5:e2:ae:9c:22:67:fd:ad:7f:37:2d:f1:c4:e8:fe:16:63:
         f8:64:fe:c2:38:84:4d:3e:1e:e4:34:84:4b:08:d6:6e:4a:9c:
         73:c5:d5:6a:fc:96:5f:f6:e6:80:d9:1e:d2:05:f3:c8:f4:01:
         09:ca:61:10:81:b6:35:55:f9:6b:88:e8:d1:b7:53:a2:ad:1e:
         06:42:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 23:15:03 2025 by rpki-client