This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
File:                     OM4nbIW20tDq_p0_ilpQjN26uWg.mft (raw, json)
Hash identifier:          oywip9RAhrBTdHdpgRQc/Wf46p4awTfGnZkyKDV+h/U=
Subject key identifier:   20:65:4E:30:08:14:56:06:64:6D:2E:8A:28:95:D6:75:1C:F4:CA:D7
Authority key identifier: 38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68
Certificate issuer:       /CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968
Certificate serial:       0710
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
Manifest number:          0709
Signing time:             Mon 22 Dec 2025 21:09:32 +0000
Manifest this update:     Mon 22 Dec 2025 21:09:31 +0000
Manifest next update:     Mon 29 Dec 2025 21:09:31 +0000
Files and hashes:         1: OM4nbIW20tDq_p0_ilpQjN26uWg.crl (hash: cuO/RYrIqqbX3SAqYyMUl8x+C7UeithLXy+4o3DlRkk=)
                          2: 6473BE24979811EB97001639C4F9AE02.roa (hash: 2h+gg3bjxIldHS97Lzce3I89lkJGy2giiZHmYtJCKjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl
                          rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F053E, serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968
        Validity
            Not Before: Dec 22 21:09:31 2025 GMT
            Not After : Dec 29 21:09:31 2025 GMT
        Subject: CN=6949b38b-b322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:d1:b2:a8:81:76:07:61:cf:90:33:5b:3b:
                    e9:80:a8:ca:c2:ba:a7:05:5a:a3:4a:a1:86:fd:b6:
                    26:e4:fe:61:68:4f:dc:4e:0b:b3:67:e4:51:26:6a:
                    a5:56:48:ed:a9:b1:b5:93:49:3c:eb:f5:f4:aa:6a:
                    42:c0:2d:27:d3:df:ea:ec:f6:27:0c:32:ba:31:96:
                    e5:16:e2:d0:3c:01:c0:14:7e:8e:95:42:58:bd:14:
                    d5:5a:f2:14:d3:71:10:4b:f8:52:65:61:78:04:38:
                    ae:6e:a4:fe:f9:e3:3d:1e:2c:f2:22:c9:72:47:86:
                    f0:32:f0:48:2b:9f:6e:8f:fc:b3:34:13:bd:0f:5d:
                    b4:d9:13:2a:18:e9:5e:00:05:37:fb:07:d2:28:b8:
                    da:64:69:32:54:5a:8b:e2:3e:50:5e:69:52:96:66:
                    6c:3a:ff:d6:09:63:d4:92:37:18:3d:98:71:7b:3e:
                    ba:70:b3:1a:a6:0c:f1:51:bb:3e:0f:34:5c:bd:73:
                    83:b4:41:2d:f9:b1:5d:11:0c:33:3d:1e:2d:10:e0:
                    e7:ac:13:cd:65:37:af:d6:9d:c4:22:67:e5:fc:7d:
                    a4:dd:66:73:4e:90:61:ef:c2:c4:51:29:73:d9:1b:
                    ec:0e:ad:cc:c5:5e:7d:d9:be:46:50:e8:01:3e:4f:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:65:4E:30:08:14:56:06:64:6D:2E:8A:28:95:D6:75:1C:F4:CA:D7
            X509v3 Authority Key Identifier:
                keyid:38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2a:a4:d0:ff:3e:de:d2:21:a5:4e:1c:64:28:59:9a:26:c2:
         ba:6f:33:b6:92:ed:f4:fa:03:0b:84:49:c6:66:42:b0:ce:13:
         c7:8f:80:6c:15:54:d3:35:82:5f:0d:88:a3:f2:34:48:45:19:
         a3:42:c0:9b:ec:6b:e4:ec:79:0b:55:01:07:0a:8d:60:31:1a:
         94:24:90:bd:c2:97:90:1b:95:27:80:f2:3a:02:64:56:71:31:
         34:b7:b5:3d:9a:03:8e:9c:b4:30:08:8b:0e:76:f7:b2:a9:ad:
         b7:f3:4e:6e:c2:e8:a9:a5:b6:ad:ad:84:fa:31:a0:09:2e:12:
         96:d0:76:82:ec:2c:80:c8:19:71:8d:64:34:20:0a:11:ac:9b:
         e7:d5:4a:ed:88:03:7d:11:c5:0e:eb:3e:e6:dc:37:c2:2e:d4:
         ff:b7:c2:9d:81:a7:54:8b:94:1c:bc:d6:d6:75:56:97:6d:da:
         90:7d:96:bf:ab:83:0b:be:9a:71:37:b8:63:66:94:ec:d8:4a:
         de:7c:9c:53:ec:53:38:28:07:25:be:a3:d4:b1:72:d8:c9:c4:
         2e:2d:86:1d:cd:67:53:02:95:d0:9b:fe:c5:45:1e:40:50:90:
         b5:c2:75:cd:fb:30:69:03:6d:16:02:8e:97:b2:c7:b6:e5:4d:
         11:bd:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:51 2025 by rpki-client