This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
File:                     OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json)
Hash identifier:          F9yFk1VCihDy7w+LlpCpyO2+xLip8NcKWq9g+4pTfbE=
Subject key identifier:   26:63:6D:C6:F1:D7:4F:F2:84:1C:3F:E5:E7:97:71:56:27:B3:A4:6F
Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8
Certificate issuer:       /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
Manifest number:          CC
Signing time:             Wed 03 Dec 2025 04:10:01 +0000
Manifest this update:     Wed 03 Dec 2025 04:10:01 +0000
Manifest next update:     Wed 10 Dec 2025 04:10:01 +0000
Files and hashes:         1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: J6stYBl+2Som9MXfyn4DiqtuPD21IUe4FZkyeC3JSGU=)
                          2: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: X6VArMN74z4tgeDbEQQzHaT88BAEASciUle7rIza6xc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl
                          rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8
        Validity
            Not Before: Dec  3 04:10:01 2025 GMT
            Not After : Dec 10 04:10:01 2025 GMT
        Subject: CN=692fb819-e457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:9b:d1:31:12:c0:69:de:51:41:11:72:72:
                    b9:12:6e:66:b8:3c:12:4b:d5:e3:02:f7:50:33:db:
                    81:a2:d2:e6:ee:0b:aa:fc:b8:20:9d:cd:1c:3a:6e:
                    cc:f4:27:88:33:55:23:8b:ed:8f:a4:b2:fb:26:c2:
                    ca:e1:9a:45:09:bc:62:e9:7f:cd:6a:1d:0c:d4:f3:
                    5f:3c:ce:19:2f:32:69:11:ba:6c:51:f3:aa:05:0d:
                    5f:f1:a1:a4:80:ab:49:37:ec:8c:6f:5e:8e:3c:e9:
                    85:8d:c8:58:79:f7:f0:80:7f:85:90:e5:d2:a5:3e:
                    07:50:85:10:d7:72:60:82:4a:e9:5a:a8:c5:b4:15:
                    4e:90:df:aa:aa:f9:7b:90:c5:ca:a4:45:eb:fb:39:
                    14:2b:3e:47:19:31:8c:b8:e3:16:62:01:14:f9:a4:
                    9b:ec:38:bd:4e:21:90:77:0f:ef:c9:d3:97:d7:61:
                    ef:99:cf:b3:9b:0c:56:2b:00:5b:89:39:61:a1:b3:
                    80:d0:aa:1a:ee:2a:ba:bf:32:6e:87:61:bf:83:44:
                    6f:22:30:71:4e:27:6a:4d:68:ad:6b:1b:ba:b5:f6:
                    a1:df:9c:4c:5c:16:eb:4d:ed:da:bb:03:9a:3b:41:
                    62:ab:19:1a:ae:0c:84:2b:34:a0:06:82:c4:8a:4e:
                    88:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:63:6D:C6:F1:D7:4F:F2:84:1C:3F:E5:E7:97:71:56:27:B3:A4:6F
            X509v3 Authority Key Identifier:
                keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:7f:ba:a1:f4:64:cc:78:27:1c:89:d4:de:a2:29:84:7c:
         69:24:8f:99:6a:f7:db:54:09:a7:88:10:7d:67:89:ab:55:d0:
         c2:02:06:2a:3a:99:11:0f:5a:f8:1b:6f:cf:fe:9d:61:76:5e:
         d4:2b:c2:36:7f:9d:2b:ff:65:f6:03:95:d0:2d:47:c4:00:0e:
         1b:4d:4f:bd:31:c2:38:c0:23:9b:56:d2:59:b0:f8:85:20:cf:
         b2:54:ce:4a:82:92:5f:03:f2:95:73:01:ad:c1:2a:99:62:43:
         db:cb:e5:2a:dc:38:d8:84:58:04:9a:cb:09:4a:1c:78:70:7d:
         45:1f:7f:84:00:77:72:48:00:d7:59:90:ec:15:99:c8:d1:64:
         3d:b2:34:6c:0e:c1:19:e8:c1:51:3c:62:4e:61:47:6b:25:12:
         b3:31:d1:28:da:33:d2:b8:ff:75:ed:5b:d0:32:74:bb:89:4b:
         26:26:1a:c6:0c:a1:ac:cf:01:da:50:87:aa:e0:f0:e8:ea:2f:
         6e:f7:95:c2:a6:43:f6:7c:f9:50:9d:13:f9:1d:e1:2f:24:89:
         6d:96:cb:26:6d:f5:a2:a7:94:cc:c4:85:cf:3a:68:0b:96:a2:
         a9:ff:b2:89:92:a8:59:a1:6b:c5:01:a5:42:f9:45:28:4c:a7:
         25:c6:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:38 2025 by rpki-client