This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
File:                     oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json)
Hash identifier:          wQdloopT2Zn9CJFVjFbIggezk7Ii8yAdV2PwKoanFR8=
Subject key identifier:   C8:B8:3B:BD:F1:35:B6:CC:9B:8E:84:50:17:C2:37:8A:07:42:90:16
Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
Certificate issuer:       /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Certificate serial:       141A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
Manifest number:          140F
Signing time:             Tue 16 Dec 2025 16:49:13 +0000
Manifest this update:     Tue 16 Dec 2025 16:49:13 +0000
Manifest next update:     Tue 23 Dec 2025 16:49:13 +0000
Files and hashes:         1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: EJJjT6BFtXoLK01gpy9yGs0QU2HCIrAUZXu7h6p7558=)
                          2: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: M9FXaqMN3xRXkYSG9XQqHpw6Lro8+iU9Ajk3i3+nJw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 16:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5146 (0x141a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
        Validity
            Not Before: Dec 16 16:49:13 2025 GMT
            Not After : Dec 23 16:49:13 2025 GMT
        Subject: CN=69418d89-fc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:15:d1:7d:0b:90:9e:4f:7e:b4:e0:76:44:bb:
                    99:cb:ea:be:15:97:1f:85:91:ba:b8:7d:76:ec:d9:
                    af:ab:10:d4:7b:ab:00:62:b9:6a:4e:6d:0b:12:06:
                    84:91:9f:ca:39:84:b7:e3:07:1e:05:db:c0:de:84:
                    ae:29:11:b2:81:97:fc:eb:1d:df:a8:5f:fa:16:05:
                    6f:6d:6f:0c:ba:be:59:e1:eb:64:41:8b:f7:b2:f2:
                    9d:9e:0a:85:fd:5b:76:00:67:90:48:5a:cd:a9:97:
                    99:03:d0:8c:d5:8e:fa:21:cb:21:dc:79:75:db:bc:
                    6e:64:23:a6:6a:3a:99:14:29:57:2e:b9:fa:96:d0:
                    28:c9:8f:3b:95:82:10:ce:01:33:12:63:7f:58:05:
                    92:5d:39:db:af:e6:4e:99:8b:79:10:c1:27:ab:8b:
                    c5:23:2d:55:bb:32:10:c8:75:ad:53:a1:10:44:1b:
                    66:73:61:85:af:28:03:7b:e7:4a:fb:c7:bb:e9:53:
                    e4:cd:6e:d4:d0:1e:76:24:7a:0f:e4:f2:46:30:59:
                    2b:49:d5:76:27:75:f3:11:0b:58:46:5b:8d:a3:ce:
                    f1:b5:70:db:e5:e1:39:98:2e:39:23:78:1e:8b:ac:
                    6b:f5:ff:66:22:c1:47:9a:2c:32:67:bc:80:ad:a9:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B8:3B:BD:F1:35:B6:CC:9B:8E:84:50:17:C2:37:8A:07:42:90:16
            X509v3 Authority Key Identifier:
                keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:df:d8:1a:90:17:df:ed:a6:34:4e:99:45:3a:c5:53:84:2e:
         eb:b1:87:24:28:18:f9:fe:b3:92:b3:d2:f2:1f:1e:83:a2:42:
         4e:87:9e:12:be:08:12:12:6e:9e:de:06:f4:6f:0d:ae:ce:b9:
         4c:b0:31:c8:ce:ee:ff:5b:a8:6d:bb:53:e7:55:71:53:8e:e0:
         10:e8:6c:96:25:bf:41:c9:41:20:78:d4:24:2c:ab:9a:1f:c4:
         e7:58:92:41:1a:4a:0f:05:14:db:0e:93:bd:0a:cc:e3:9a:90:
         8e:58:2b:0e:f9:29:c5:07:83:fd:d8:95:59:1d:ab:dd:af:43:
         37:a0:78:26:32:ca:15:c6:9e:54:e3:5b:0f:3d:3d:70:81:72:
         ef:4b:5d:7c:b5:c7:6c:39:f3:63:52:fe:46:70:47:96:90:1e:
         6d:e4:fa:ea:23:d9:fb:eb:54:aa:6a:7e:78:8f:ea:0c:a3:12:
         6c:38:70:e5:b6:74:9d:7e:6c:7b:7d:77:82:5e:11:fc:c9:a8:
         70:09:a2:f4:18:f1:e0:d6:c4:a1:7c:67:36:b7:a0:0d:f2:d1:
         18:8c:a9:b0:3d:de:30:20:f6:9b:c9:98:93:13:29:4b:0b:e5:
         d5:59:45:0c:7c:0a:14:79:d7:79:1f:6d:56:a1:59:87:29:9c:
         ff:a8:82:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY2MzkxMTAvBgNVBAUTKEExNDlFN0ZENEQ3OTA2RkMxQTYzNDEyOTg2NTVEQTgx
ODVGMjkwMTQwHhcNMjUxMjE2MTY0OTEzWhcNMjUxMjIzMTY0OTEzWjAYMRYwFAYD
VQQDDA02OTQxOGQ4OS1mYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAixXRfQuQnk9+tOB2RLuZy+q+FZcfhZG6uH127NmvqxDUe6sAYrlqTm0LEgaE
kZ/KOYS34wceBdvA3oSuKRGygZf86x3fqF/6FgVvbW8Mur5Z4etkQYv3svKdngqF
/Vt2AGeQSFrNqZeZA9CM1Y76Icsh3Hl127xuZCOmajqZFClXLrn6ltAoyY87lYIQ
zgEzEmN/WAWSXTnbr+ZOmYt5EMEnq4vFIy1VuzIQyHWtU6EQRBtmc2GFrygDe+dK
+8e76VPkzW7U0B52JHoP5PJGMFkrSdV2J3XzEQtYRluNo87xtXDb5eE5mC45I3ge
i6xr9f9mIsFHmiwyZ7yArall3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMi4O73x
NbbMm46EUBfCN4oHQpAWMB8GA1UdIwQYMBaAFKFJ5/1NeQb8GmNBKYZV2oGF8pAU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzOS9BRUYwNjhCODkw
RUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2d2FZMEVwaGxYYWdZWHlr
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Vbm5fVTE1QnZ3YVkwRXBobFhhZ1lYeWtCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjYzOS9BRUYwNjhCODkwRUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2
d2FZMEVwaGxYYWdZWHlrQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCW39gakBff7aY0TplFOsVThC7rsYckKBj5/rOSs9LyHx6DokJOh54S
vggSEm6e3gb0bw2uzrlMsDHIzu7/W6htu1PnVXFTjuAQ6GyWJb9ByUEgeNQkLKua
H8TnWJJBGkoPBRTbDpO9CszjmpCOWCsO+SnFB4P92JVZHavdr0M3oHgmMsoVxp5U
41sPPT1wgXLvS118tcdsOfNjUv5GcEeWkB5t5PrqI9n761Sqan54j+oMoxJsOHDl
tnSdfmx7fXeCXhH8yahwCaL0GPHg1sShfGc2t6AN8tEYjKmwPd4wIPabyZiTEylL
C+XVWUUMfAoUedd5H21WoVmHKZz/qILn
-----END CERTIFICATE-----
Generated at Tue Dec 16 21:23:23 2025 by rpki-client