This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
File:                     OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft (raw, json)
Hash identifier:          k2oHWsOqe5Z5cGEDS5Y7bJdukIGvGXaHBwsAw1sRXlA=
Subject key identifier:   30:32:4F:F2:58:C0:6D:4A:49:3B:AF:40:B3:32:E9:4D:24:51:F9:04
Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4
Certificate issuer:       /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
Manifest number:          01C6
Signing time:             Sun 21 Dec 2025 02:19:39 +0000
Manifest this update:     Sun 21 Dec 2025 02:19:39 +0000
Manifest next update:     Sun 28 Dec 2025 02:19:39 +0000
Files and hashes:         1: OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl (hash: 6oKEdOhdsgdQ5CJIwHEPqYoIlyaxY3Q7MImTp0au4CI=)
                          2: FC73357271B811EEAEDED685C4F9AE02.roa (hash: 9meNSQ7mHgauWkjfmq+w3XZ8VLbZDlhWM/Yy7ZYJH2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl
                          rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916600A, serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
        Validity
            Not Before: Dec 21 02:19:39 2025 GMT
            Not After : Dec 28 02:19:39 2025 GMT
        Subject: CN=6947593b-f2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:8e:bf:14:0d:09:09:84:9c:e8:a4:b7:b6:
                    5a:83:f5:54:82:5d:c7:c0:8f:c5:16:d1:b9:4f:8b:
                    c5:ee:10:30:c7:48:03:4c:b5:de:f3:bf:02:12:3c:
                    a5:50:13:06:1e:02:23:22:2f:0c:bb:2f:a3:09:83:
                    d4:ce:b2:5d:e4:6d:86:68:e8:b9:58:59:8c:01:76:
                    c8:0f:32:55:13:48:d8:e0:21:47:8c:18:44:e8:43:
                    6b:f5:a8:a4:88:3e:3a:3d:72:4e:53:24:a0:89:1b:
                    68:38:0f:c3:dc:71:1e:9b:37:1e:98:fd:d1:d1:2c:
                    bd:4a:17:72:84:f2:0d:be:21:4c:49:3c:81:d6:70:
                    4c:fa:06:32:92:05:e1:34:c5:79:74:e5:34:18:f4:
                    0e:1c:4c:69:33:35:b0:45:0b:01:8b:f8:21:eb:05:
                    5f:29:7a:59:75:9a:9d:40:7d:fb:8e:59:ed:40:3d:
                    39:8e:11:28:4d:a5:d6:7e:6a:cd:33:99:60:09:42:
                    73:dc:08:34:23:f8:46:64:30:4b:a9:ad:a5:2d:b0:
                    dc:0c:41:2c:bd:82:27:a5:f5:af:47:75:b0:4a:62:
                    09:85:71:e1:3b:e4:d4:41:e2:44:3c:42:91:bc:7f:
                    f9:0a:d3:9e:24:9a:b4:5c:57:c6:32:60:fd:d4:71:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:4F:F2:58:C0:6D:4A:49:3B:AF:40:B3:32:E9:4D:24:51:F9:04
            X509v3 Authority Key Identifier:
                keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a3:05:ee:bb:f8:7b:1c:84:c0:66:5f:23:f1:6f:3f:6f:eb:
         a8:48:69:41:1a:50:4c:4d:8f:bc:3a:d9:82:4f:75:b9:b2:e5:
         88:64:cd:fe:e5:dd:0d:fb:31:5f:01:59:65:42:85:38:97:37:
         f9:e9:7f:8d:56:e1:d5:b0:88:41:ed:65:2f:14:ef:2f:b5:44:
         72:c4:8e:00:99:f9:c8:d0:84:51:93:47:1c:8a:51:c7:06:82:
         20:22:4d:f9:de:68:74:84:7f:c9:c0:24:83:68:88:c1:18:15:
         79:36:7e:46:83:d1:a4:7f:e4:46:07:d1:a6:3e:5b:15:ba:53:
         56:3d:b6:a5:b9:be:0d:7a:d7:4d:e4:db:6d:85:2c:f7:2b:00:
         96:98:56:73:2d:16:68:2e:44:97:17:4a:2e:4d:6f:16:7b:57:
         d5:97:6e:c7:cc:4f:d8:08:ec:28:2b:f8:30:9e:44:20:ce:bc:
         e0:d5:2f:8d:6f:37:30:d5:cc:df:54:a6:66:8a:35:c7:e9:eb:
         f1:58:c1:16:d4:1d:49:16:40:c0:a0:ec:05:24:39:1a:c7:64:
         1c:5e:d1:18:94:3b:97:98:96:6e:bc:80:a7:3e:bd:fb:0c:0e:
         43:44:da:6d:4d:78:7f:88:65:ad:2c:98:a8:7d:3e:79:ff:ea:
         72:16:38:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYwMEExMTAvBgNVBAUTKDM4RUMxOURBQ0E1OEM0NUQ5MUM2NTlEMzVGRTRGMjZE
RDgyNEFDRTQwHhcNMjUxMjIxMDIxOTM5WhcNMjUxMjI4MDIxOTM5WjAYMRYwFAYD
VQQDDA02OTQ3NTkzYi1mMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAroKOvxQNCQmEnOikt7Zag/VUgl3HwI/FFtG5T4vF7hAwx0gDTLXe878CEjyl
UBMGHgIjIi8Muy+jCYPUzrJd5G2GaOi5WFmMAXbIDzJVE0jY4CFHjBhE6ENr9aik
iD46PXJOUySgiRtoOA/D3HEemzcemP3R0Sy9ShdyhPINviFMSTyB1nBM+gYykgXh
NMV5dOU0GPQOHExpMzWwRQsBi/gh6wVfKXpZdZqdQH37jlntQD05jhEoTaXWfmrN
M5lgCUJz3Ag0I/hGZDBLqa2lLbDcDEEsvYInpfWvR3WwSmIJhXHhO+TUQeJEPEKR
vH/5CtOeJJq0XFfGMmD91HEZdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAyT/JY
wG1KSTuvQLMy6U0kUfkEMB8GA1UdIwQYMBaAFDjsGdrKWMRdkcZZ01/k8m3YJKzk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjAwQS85RUEyQkI3RTND
RDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhGMlJ4bG5UWC1UeWJkZ2ty
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09Pd1oyc3BZeEYyUnhsblRYLVR5YmRna3JPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjAwQS85RUEyQkI3RTNDRDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhG
MlJ4bG5UWC1UeWJkZ2tyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2owXuu/h7HITAZl8j8W8/b+uoSGlBGlBMTY+8OtmCT3W5suWIZM3+
5d0N+zFfAVllQoU4lzf56X+NVuHVsIhB7WUvFO8vtURyxI4AmfnI0IRRk0ccilHH
BoIgIk353mh0hH/JwCSDaIjBGBV5Nn5Gg9Gkf+RGB9GmPlsVulNWPbalub4NetdN
5NtthSz3KwCWmFZzLRZoLkSXF0ouTW8We1fVl27HzE/YCOwoK/gwnkQgzrzg1S+N
bzcw1czfVKZmijXH6evxWMEW1B1JFkDAoOwFJDkax2QcXtEYlDuXmJZuvICnPr37
DA5DRNptTXh/iGWtLJiofT55/+pyFjgB
-----END CERTIFICATE-----
Generated at Mon Dec 22 23:51:42 2025 by rpki-client