This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
File:                     OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json)
Hash identifier:          fc9H6vjidblH6pFVGU27w17iif9aTJXcXlJXrpIpLPU=
Subject key identifier:   C6:D6:C1:D2:1F:5E:8F:14:D0:A1:16:64:51:0F:EE:F7:BE:13:AF:00
Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
Certificate issuer:       /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Certificate serial:       063D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
Manifest number:          0637
Signing time:             Sat 20 Dec 2025 22:02:57 +0000
Manifest this update:     Sat 20 Dec 2025 22:02:56 +0000
Manifest next update:     Sat 27 Dec 2025 22:02:56 +0000
Files and hashes:         1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: SaSNoNQarNNCbxxzz/WsouoFBEPMjunVU1Z3ZR1UBIY=)
                          2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: B/l1/qnG+ox/f3khU2Qu7i7cTmOVlXxBXIJAWV1sQEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
                          rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
        Validity
            Not Before: Dec 20 22:02:56 2025 GMT
            Not After : Dec 27 22:02:56 2025 GMT
        Subject: CN=69471d11-4764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:70:3e:4b:cf:41:ee:5f:89:9b:eb:03:8c:
                    49:b4:be:d9:e8:2b:41:07:33:76:6b:1f:b2:6a:bb:
                    99:f2:d6:c4:c1:ed:8e:ae:4a:b9:5f:0f:4a:d5:12:
                    87:cd:1a:75:90:02:6c:c2:a1:c0:5c:9c:ca:70:bf:
                    93:38:62:0f:2a:05:cc:17:62:12:9e:1f:e9:4c:da:
                    ba:f1:75:d8:d3:7b:7d:e4:d7:8f:bd:23:cf:b4:ea:
                    c8:cb:f6:92:52:ce:61:20:cd:52:b7:41:48:e1:32:
                    01:54:95:f9:d7:bb:b6:1f:10:17:29:bd:5b:fd:9f:
                    04:47:e0:b6:1c:8d:20:16:7d:e1:9b:ac:63:d3:76:
                    0c:64:ed:f0:61:ca:a1:a9:8f:57:37:f2:ba:10:02:
                    a2:77:b2:27:95:93:b0:92:a7:f4:b5:bf:00:11:79:
                    73:24:8c:1f:1d:1a:09:11:66:d5:6d:f6:5f:bc:0a:
                    ae:2f:b0:c5:34:90:d4:e8:88:43:2a:12:de:a7:21:
                    8c:11:a0:7d:b4:be:f9:45:dd:a5:52:ae:14:db:c0:
                    ba:b1:da:f3:67:58:09:ba:78:82:26:3a:a0:44:31:
                    7e:6d:58:72:5d:dc:a3:36:cc:82:6c:26:03:72:4e:
                    e3:fe:b7:97:ea:16:d8:65:06:ef:4e:76:aa:e3:a4:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D6:C1:D2:1F:5E:8F:14:D0:A1:16:64:51:0F:EE:F7:BE:13:AF:00
            X509v3 Authority Key Identifier:
                keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:94:39:ae:18:4e:be:f4:40:cf:d1:19:f1:b2:00:f0:80:7a:
         f1:f2:ce:ce:12:83:91:6a:05:20:43:89:9b:fe:66:c0:fd:bf:
         ec:64:43:b8:cf:43:51:fa:f8:19:6a:16:45:57:0d:ae:bd:c8:
         a7:f0:f2:09:94:9a:e8:28:fe:1e:72:3b:93:5c:28:99:98:ed:
         90:c4:b7:8e:3e:85:50:02:bd:f1:7f:6a:57:fe:de:80:ac:f2:
         d4:6a:21:bc:48:31:57:b4:35:ad:a5:6c:85:9e:45:91:bd:cb:
         f8:d8:6c:60:7f:33:f6:23:9f:fd:39:86:12:8e:b0:38:f7:d3:
         e8:bf:db:98:9f:be:73:fe:53:b6:9f:97:de:88:6e:71:33:d2:
         51:1a:2a:cf:01:10:96:e6:71:04:40:c3:83:f1:b1:6d:09:66:
         9a:cc:29:a8:dd:40:d9:08:65:5b:25:78:ed:3a:1d:3d:9d:37:
         7a:43:c6:6f:d9:a8:9f:c3:61:4b:5b:11:92:ae:2f:ec:b9:35:
         ad:0b:43:ce:40:57:91:29:ec:ed:54:7e:0e:de:8a:23:34:a6:
         b4:00:c5:f0:3a:df:73:20:d0:05:48:0a:25:e5:da:b9:94:54:
         c9:58:74:85:34:17:93:2c:86:f8:67:ad:af:9e:32:0e:b7:b7:
         ec:b7:54:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC
RDNDMzg2NUUwHhcNMjUxMjIwMjIwMjU2WhcNMjUxMjI3MjIwMjU2WjAYMRYwFAYD
VQQDDA02OTQ3MWQxMS00NzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArT5wPkvPQe5fiZvrA4xJtL7Z6CtBBzN2ax+yaruZ8tbEwe2Orkq5Xw9K1RKH
zRp1kAJswqHAXJzKcL+TOGIPKgXMF2ISnh/pTNq68XXY03t95NePvSPPtOrIy/aS
Us5hIM1St0FI4TIBVJX517u2HxAXKb1b/Z8ER+C2HI0gFn3hm6xj03YMZO3wYcqh
qY9XN/K6EAKid7InlZOwkqf0tb8AEXlzJIwfHRoJEWbVbfZfvAquL7DFNJDU6IhD
KhLepyGMEaB9tL75Rd2lUq4U28C6sdrzZ1gJuniCJjqgRDF+bVhyXdyjNsyCbCYD
ck7j/reX6hbYZQbvTnaq46SnbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbWwdIf
Xo8U0KEWZFEP7ve+E68AMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD
OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo
bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh
UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHlDmuGE6+9EDP0RnxsgDwgHrx8s7OEoORagUgQ4mb/mbA/b/sZEO4
z0NR+vgZahZFVw2uvcin8PIJlJroKP4ecjuTXCiZmO2QxLeOPoVQAr3xf2pX/t6A
rPLUaiG8SDFXtDWtpWyFnkWRvcv42GxgfzP2I5/9OYYSjrA499Pov9uYn75z/lO2
n5feiG5xM9JRGirPARCW5nEEQMOD8bFtCWaazCmo3UDZCGVbJXjtOh09nTd6Q8Zv
2aifw2FLWxGSri/suTWtC0POQFeRKeztVH4O3oojNKa0AMXwOt9zINAFSAol5dq5
lFTJWHSFNBeTLIb4Z62vnjIOt7fst1RK
-----END CERTIFICATE-----
Generated at Sun Dec 21 16:16:51 2025 by rpki-client