This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
File:                     _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json)
Hash identifier:          JvM8hfQPKSiG1pPlfwjECTaI5EMpkyXdMj0fglqd9xk=
Subject key identifier:   94:96:E6:5D:54:EF:7E:17:79:C0:2A:D7:B0:16:75:32:37:A8:40:F9
Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
Certificate issuer:       /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
Manifest number:          0161
Signing time:             Sun 21 Dec 2025 03:14:36 +0000
Manifest this update:     Sun 21 Dec 2025 03:14:35 +0000
Manifest next update:     Sun 28 Dec 2025 03:14:35 +0000
Files and hashes:         1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: CD//BCSCrFt8znenRn4PtsxPh2uRfR9tKw88ZQPcomY=)
                          2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: 9XQ8E57rDZy0hs4By4P58wDNjTR7DCt1F2KaYrqVcoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
                          rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 03:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
        Validity
            Not Before: Dec 21 03:14:35 2025 GMT
            Not After : Dec 28 03:14:35 2025 GMT
        Subject: CN=6947661c-cd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:13:b2:4f:36:ee:13:75:4a:f5:72:7f:c3:
                    ca:65:2d:83:c8:da:c5:f2:f0:81:35:6f:68:d2:27:
                    f1:4b:5a:71:df:5b:eb:ae:ff:f5:02:1e:69:28:60:
                    c2:83:d4:c9:b2:8d:32:2b:fc:f0:01:58:d1:0f:77:
                    68:b6:be:97:a3:6b:49:e7:90:82:6e:79:f6:66:ac:
                    cc:e1:2c:d5:18:38:fb:7c:28:20:6f:01:53:d2:ee:
                    98:5e:70:a4:51:1c:bf:19:b8:83:09:f5:88:b0:33:
                    02:2c:6f:cc:69:d1:83:ae:4d:46:94:d5:ac:14:45:
                    92:2d:95:25:6b:55:e5:1f:ae:24:58:e8:97:fc:9e:
                    93:b7:a2:27:0e:bc:33:1c:e2:7c:e6:4f:aa:f3:45:
                    28:48:86:40:0f:d7:ce:71:5a:ff:b7:7f:14:f5:b2:
                    d2:cb:a8:a4:66:e6:38:31:57:50:b3:b6:69:43:e8:
                    09:18:0a:28:49:71:b7:b4:45:8f:43:d3:4d:64:35:
                    5f:8a:8c:01:60:4d:c4:25:d5:91:96:31:88:e9:34:
                    d9:65:b1:ce:1b:16:eb:af:bc:39:6a:26:e6:bf:a3:
                    41:2a:3f:93:74:b3:ac:8a:e0:ce:c6:3f:10:4d:84:
                    bc:72:63:1d:a4:49:07:de:6e:8a:ce:92:58:71:a1:
                    1a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:96:E6:5D:54:EF:7E:17:79:C0:2A:D7:B0:16:75:32:37:A8:40:F9
            X509v3 Authority Key Identifier:
                keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ba:81:f8:01:fe:01:9d:55:90:bd:46:b7:d9:39:82:53:43:
         d2:63:07:8a:66:fa:1d:63:6e:c1:45:02:90:2e:16:f1:6a:98:
         d7:7a:a7:a2:7f:aa:4c:b9:c2:f9:72:d7:b8:67:51:b3:5a:6d:
         17:61:79:54:b5:0c:64:35:e0:0c:e7:b3:75:0f:f0:bb:20:f1:
         90:6e:2a:4d:50:af:3b:9b:d9:8f:6d:ea:31:d3:48:82:5a:c2:
         d9:ef:06:3d:54:07:81:52:44:72:cf:9c:d4:fd:5b:24:1d:a7:
         6a:81:2b:b9:0a:c3:01:70:f9:a8:ae:a3:31:b9:8e:72:1a:26:
         ee:5f:4a:a1:c4:6b:0d:6c:b6:1b:ad:d4:53:48:01:c1:c1:d6:
         af:d1:a2:0b:c9:39:51:07:6d:e6:1e:b7:79:e9:13:30:89:0e:
         eb:12:b8:26:26:a5:15:05:b7:4c:ef:66:75:13:52:e7:ac:f5:
         f9:4e:e7:d1:c2:1b:00:50:54:0c:c0:16:ac:8c:7a:2e:4e:17:
         70:33:04:b4:04:0b:1a:93:c6:89:3e:e1:3a:37:bb:35:95:3d:
         ac:96:35:e9:28:ea:b9:67:93:7b:cc:2e:79:2a:ab:be:d6:5c:
         37:46:2c:cc:35:d0:5c:d7:43:3e:03:00:a4:74:0d:01:43:0c:
         00:18:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:00:01 2025 by rpki-client