This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
File:                     UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft (raw, json)
Hash identifier:          TU9h/u1mCb0Wo8LF+koDyyEsf4UOyB+mWK1KsjdHNBc=
Subject key identifier:   B3:A6:A9:FC:CD:11:8A:09:E5:30:70:CC:23:94:93:87:6F:43:9C:93
Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Certificate issuer:       /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
Manifest number:          012F
Signing time:             Tue 23 Dec 2025 03:35:26 +0000
Manifest this update:     Tue 23 Dec 2025 03:35:26 +0000
Manifest next update:     Tue 30 Dec 2025 03:35:26 +0000
Files and hashes:         1: UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl (hash: P/45e1Lam46Qa4eJ7/x04S/I1zyk9U73dqX9Lcpr7/8=)
                          2: 18141426114211EFA0FF3956C4F9AE02.roa (hash: Eui373BUJyp7nsyCOnfLERZIVy0mxRMvMhZrx/SFoPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1630, serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
        Validity
            Not Before: Dec 23 03:35:26 2025 GMT
            Not After : Dec 30 03:35:26 2025 GMT
        Subject: CN=694a0dfe-308e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:91:40:d8:ee:eb:8b:5d:03:73:a4:f5:7d:
                    dd:8c:5e:0a:c7:70:06:9b:25:14:dc:5c:16:66:8c:
                    12:e3:a6:f6:8e:a7:9e:21:9c:e8:fd:2e:d5:a4:0f:
                    3c:4c:87:3a:c8:2f:14:e5:50:95:8b:72:49:70:51:
                    04:29:2a:b7:12:1f:a9:91:3b:c7:ed:33:bd:5b:c3:
                    23:23:0f:75:67:77:f7:8c:16:d4:83:6b:93:52:e8:
                    44:06:4f:b8:94:ca:40:d3:86:1a:77:f2:71:79:46:
                    45:4d:d2:2a:e8:b5:83:49:9b:13:a1:d8:c5:25:b6:
                    51:92:2a:d5:46:a2:98:ae:ea:39:d1:d7:31:72:ee:
                    08:92:6f:54:5c:44:7c:85:e8:3e:e4:1c:07:72:88:
                    88:b2:76:75:f2:e8:ac:ea:f4:3d:b6:9c:33:70:88:
                    0d:f7:c4:76:9d:01:f6:25:b3:a1:af:5f:1d:4d:4a:
                    ea:5c:15:d7:ea:48:c3:cc:b2:93:9a:1b:37:98:1e:
                    93:73:c5:4b:60:33:b6:dd:6f:d5:4e:46:fd:ed:a0:
                    8b:9e:d2:a5:62:61:0a:a2:56:84:67:ca:82:f5:cc:
                    f5:fd:ed:b1:5f:4d:59:84:ad:78:ec:bd:f1:d0:07:
                    3e:66:ca:f9:86:28:6b:51:ee:47:0f:69:0d:72:1c:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A6:A9:FC:CD:11:8A:09:E5:30:70:CC:23:94:93:87:6F:43:9C:93
            X509v3 Authority Key Identifier:
                keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:63:a7:ff:07:3a:50:4f:eb:64:16:8f:53:84:43:9a:fd:4a:
         c2:79:99:46:e8:fb:86:3e:bd:e1:f1:25:29:f3:39:6d:89:9f:
         16:73:5e:60:1c:6e:16:4e:60:fd:d8:a5:b9:6b:69:e0:c8:75:
         7e:64:60:00:da:16:9d:8d:fe:10:3f:d1:81:1c:d9:69:a5:76:
         48:85:7e:c8:11:42:78:98:1f:8b:c2:c1:13:2d:a9:7a:42:e0:
         3f:8d:be:4d:b6:31:61:cd:ec:1c:be:58:3a:c1:32:69:a0:a6:
         f9:52:c9:a9:76:15:fa:6c:11:09:ad:56:7b:21:0f:d1:88:91:
         0e:1d:bf:c0:f8:56:53:0c:f6:44:39:d3:f5:52:17:02:30:af:
         ea:b7:01:c3:1e:0a:d3:89:5c:c9:fb:45:86:27:04:e8:fc:26:
         3a:74:f5:d7:e7:11:e4:36:e9:83:bc:1a:c4:92:da:cd:a3:5b:
         4a:28:83:59:3f:a8:a5:ad:73:e1:cf:0c:88:68:91:67:12:0b:
         b4:67:c3:14:fd:01:f3:ad:f5:e5:f5:de:bf:34:fe:ed:64:07:
         25:6a:b0:3d:f0:7d:c6:9b:e7:ee:3b:cf:29:1a:8d:67:e9:62:
         d0:c1:da:7c:f6:6c:e9:21:90:6a:9d:42:0e:40:e2:c5:09:4c:
         d7:6e:6a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:16 2025 by rpki-client