This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
File:                     mOHpsEPmjTdp6aaNscJtcVEI94c.mft (raw, json)
Hash identifier:          cZlD4k0181I67ywip/W0F98Wt0J4Nvh7K/QsLPlVTY0=
Subject key identifier:   7D:25:BB:3E:78:3F:0E:DE:5E:EB:F3:C4:BA:38:5E:08:F0:F4:27:45
Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87
Certificate issuer:       /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
Manifest number:          FD
Signing time:             Wed 17 Dec 2025 04:41:04 +0000
Manifest this update:     Wed 17 Dec 2025 04:41:04 +0000
Manifest next update:     Wed 24 Dec 2025 04:41:04 +0000
Files and hashes:         1: mOHpsEPmjTdp6aaNscJtcVEI94c.crl (hash: nAovu8TWJo/S5X2zpMQhJ6veGMZyC9yaEjdYcp79N4U=)
                          2: 6BC308A4ABD111F0A03CFC15C4F9AE02.roa (hash: KXJnMGfGJ3kG3e40pHo+x5iAcN5v1yBqTBZ04eTSA8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl
                          rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 04:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177772, serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
        Validity
            Not Before: Dec 17 04:41:04 2025 GMT
            Not After : Dec 24 04:41:04 2025 GMT
        Subject: CN=69423460-4468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:4f:f7:cc:05:07:66:be:be:b4:54:a1:d2:
                    7b:cb:2d:3b:e5:54:33:ab:74:24:01:1c:0a:ee:4e:
                    5e:3f:c2:2f:82:bb:9c:06:04:fe:f8:da:90:72:54:
                    c1:e3:f4:b8:b3:2c:04:ef:9c:c3:66:d3:35:64:13:
                    84:91:cd:dd:4a:5d:aa:2b:b5:7b:f9:4a:8d:c6:db:
                    01:6c:96:55:f5:40:82:8a:fa:32:36:02:ff:3e:80:
                    88:3e:88:eb:38:ec:b9:31:97:e6:70:5f:57:7e:0f:
                    38:f4:ab:bb:3b:9e:13:90:19:d8:26:cd:92:66:73:
                    7f:59:68:ce:82:78:a3:63:31:80:b4:90:e1:ca:f5:
                    36:b5:f6:58:76:11:28:5c:80:b4:62:c4:c8:54:0f:
                    1e:a5:5d:98:b7:7f:45:11:d5:01:51:f0:de:94:6b:
                    2e:37:c8:be:2a:1d:15:62:af:a0:64:96:41:68:9b:
                    a8:a0:de:68:c7:20:81:f2:90:a1:f4:31:04:6d:8c:
                    76:f6:c1:8f:90:a8:dc:85:e9:cb:35:e8:6a:84:ba:
                    d8:4f:0f:17:c3:30:56:a7:13:32:fb:a5:ce:74:82:
                    86:c6:e8:48:28:f7:67:8c:74:d6:51:d3:27:e0:07:
                    fc:da:0b:10:5c:c1:60:5f:c7:a8:3b:2c:ab:d2:92:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:25:BB:3E:78:3F:0E:DE:5E:EB:F3:C4:BA:38:5E:08:F0:F4:27:45
            X509v3 Authority Key Identifier:
                keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2b:b3:4b:c5:d3:21:77:ec:a7:ce:0d:b8:2f:a2:69:a9:d8:
         76:8a:80:fd:5b:2f:fb:2a:7c:82:7d:f4:94:59:1f:ed:ed:25:
         a4:fd:a1:06:18:e2:06:ec:94:26:f0:be:1a:40:2d:94:49:77:
         84:67:38:c7:52:86:c6:6c:2b:f7:77:a9:33:8e:53:0f:dd:4a:
         69:9b:04:08:ed:7f:03:ee:2c:da:63:d2:0a:1e:94:e4:ad:13:
         0f:15:cb:ee:30:12:ce:6b:9c:a1:2f:15:90:25:13:cd:66:42:
         46:28:bd:39:88:37:64:02:89:d4:eb:01:dd:55:a5:c3:09:90:
         50:95:5a:6f:33:c9:ae:70:71:d8:ba:0a:07:57:4a:22:28:8d:
         3f:8d:a2:18:8b:08:f3:af:e5:7f:88:13:8b:e6:b8:68:2d:cd:
         52:46:da:19:9b:70:e8:1e:0a:f5:12:d2:e3:13:f5:19:55:82:
         f4:07:26:f3:45:9b:7b:fb:7a:97:9a:30:5c:dc:b9:43:e8:11:
         68:80:c6:48:09:14:b4:c8:9b:13:ed:46:19:90:1b:33:a4:d7:
         cd:df:23:00:39:bd:cf:c9:a0:7c:a8:c8:50:44:e9:f3:1c:f3:
         bb:54:14:c2:2b:37:3c:e7:79:be:b2:97:31:b0:cf:2e:75:86:
         63:68:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:55:51 2025 by rpki-client