This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File:                     o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier:          VuhEQQd6/UTpqzuVblb7EK7G26OyuwgVQL9sYB36Mss=
Subject key identifier:   F5:B3:E3:47:5E:25:9E:4B:00:00:28:9B:BD:C5:DE:E9:5C:78:DD:CA
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer:       /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial:       039B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number:          0394
Signing time:             Fri 19 Dec 2025 00:02:04 +0000
Manifest this update:     Fri 19 Dec 2025 00:02:04 +0000
Manifest next update:     Fri 26 Dec 2025 00:02:04 +0000
Files and hashes:         1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: xfkIvtz0K6XbJSXgvSsbgk/dT4kjPryEPbZEKVcwlM0=)
                          2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: DhDV/fmV49KF53LCzY2iPFhFE+P1oeX1k0nYiQfDFpM=)
                          3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: xTkFFGEwoSM0XslM057b0r3pWef291E2LlOQWfzYUXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
        Validity
            Not Before: Dec 19 00:02:04 2025 GMT
            Not After : Dec 26 00:02:04 2025 GMT
        Subject: CN=694495fc-3092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7d:07:af:10:c1:cd:16:bc:ac:1b:01:a2:57:
                    ff:6b:0d:ea:9e:f2:e4:fa:a7:52:eb:44:ff:a6:6e:
                    e3:38:9f:af:f5:42:59:dc:2d:6d:cb:52:f7:67:1f:
                    82:e4:c3:57:38:bb:c9:c9:1d:6d:41:41:41:b1:4e:
                    3c:5d:b2:c0:f5:06:04:e1:ff:0b:c9:78:d1:50:ff:
                    65:99:59:7d:d9:df:33:bc:16:1a:c7:9f:7c:85:aa:
                    69:a1:50:c4:f0:2f:37:94:3a:78:a5:62:91:6e:7f:
                    20:23:0a:ba:18:93:a5:87:06:e5:c5:45:c3:b9:2a:
                    48:91:18:f1:a8:e0:2b:65:70:07:5c:d9:a4:b2:c4:
                    4f:57:86:94:71:bb:d0:6c:7c:62:29:12:1b:d4:1c:
                    f3:c6:7b:81:e4:98:59:86:ae:1c:d7:7c:d7:5e:39:
                    42:b4:df:a3:23:1d:9a:46:fb:57:9c:b3:e0:77:c1:
                    04:70:3c:f5:d2:4f:f5:05:e8:9c:af:08:08:13:b5:
                    81:86:ee:ed:da:6e:16:03:cc:7a:30:f8:b6:d6:54:
                    67:08:a2:92:58:c3:d4:42:40:a6:ed:d5:a3:43:6c:
                    be:7a:13:7b:76:64:f8:02:55:39:48:d5:9a:50:29:
                    54:20:96:fc:8f:c6:49:b5:f8:50:ff:b3:73:b1:c2:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B3:E3:47:5E:25:9E:4B:00:00:28:9B:BD:C5:DE:E9:5C:78:DD:CA
            X509v3 Authority Key Identifier:
                keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5a:b5:54:4e:1f:34:a3:92:98:40:45:1e:4c:5b:c4:8a:63:
         4c:3d:27:12:61:07:a2:07:de:13:2c:ee:f6:e6:3d:64:73:e3:
         1e:0a:1a:b1:c5:b8:a9:8c:7c:e7:b5:e6:0e:66:11:9c:76:a9:
         30:a2:9f:41:cd:a6:76:30:74:c8:83:6b:9e:19:bd:49:fd:d7:
         17:42:e2:99:6d:34:c7:05:de:58:e6:9d:92:14:e3:48:4e:9c:
         7d:05:b3:dd:6a:c1:30:b8:e6:57:6d:dc:1b:2f:ae:ad:59:88:
         6f:df:f9:0d:f3:b5:63:c8:03:0f:57:57:59:0b:72:24:99:87:
         02:2c:e6:d7:da:b2:5a:91:1b:b1:7f:0e:e3:ac:d1:9f:6f:4e:
         ad:f9:07:48:d4:0f:fc:5a:ea:f9:93:01:4c:12:d4:b4:d7:14:
         e5:de:4c:92:76:62:b8:33:83:77:ee:e5:11:77:60:26:5b:4e:
         5b:a2:ec:37:27:b0:cb:b5:5f:09:da:50:a6:85:ff:88:ed:c5:
         f1:6a:41:2d:5e:b0:44:66:b5:ef:d0:23:fb:21:5b:c7:f6:26:
         1a:4b:ad:74:87:bf:eb:61:20:78:b9:5e:ef:24:98:ac:61:e8:
         dd:e9:52:16:b6:c8:d6:bf:dd:8e:39:49:ab:91:27:d2:12:57:
         35:ae:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:34:36 2025 by rpki-client