This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
File:                     OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json)
Hash identifier:          4CPcaTr+ZUQ+2ZF/lMU97B51O2yqL+Q5HT0dnSHA+Q4=
Subject key identifier:   93:01:43:0B:49:2E:83:6D:50:9F:ED:2A:9E:0D:A1:E7:97:4A:CE:DF
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Certificate issuer:       /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial:       1F07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
Manifest number:          1EFB
Signing time:             Thu 18 Dec 2025 15:56:47 +0000
Manifest this update:     Thu 18 Dec 2025 15:56:47 +0000
Manifest next update:     Thu 25 Dec 2025 15:56:47 +0000
Files and hashes:         1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: DEueg9GtClfRPSjYYY36LA/muMKiaZsS73kdXP4ypSo=)
                          2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: W0ZWmGkhW06fRZVPw8jscLCIBobXeY3y+SwBDvJ1Z0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
                          rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7943 (0x1f07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1
        Validity
            Not Before: Dec 18 15:56:47 2025 GMT
            Not After : Dec 25 15:56:47 2025 GMT
        Subject: CN=6944243f-3af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:9c:64:4f:9b:23:13:b6:4d:17:15:4d:3f:f3:
                    87:9a:da:c3:90:07:e0:c7:dc:d0:a5:05:26:c9:e7:
                    93:fc:ed:47:c3:ab:73:2b:01:c1:ad:a3:de:f2:ce:
                    06:d7:b2:9f:d9:2a:d4:40:b0:a8:e1:e9:c3:7b:8d:
                    e9:34:9b:7d:1d:ec:30:8b:5d:d3:ec:51:32:84:55:
                    dc:5a:ae:d2:8e:f5:a4:38:14:12:0d:a7:1f:7b:4c:
                    35:cf:04:1f:94:7f:bd:b3:27:a5:e6:53:dc:7d:ab:
                    35:67:63:51:6a:81:65:39:33:a9:51:c7:2b:1a:b9:
                    14:73:05:62:32:a9:3c:4b:87:33:75:a3:c5:90:40:
                    e4:e3:50:43:83:66:9c:9a:29:2e:42:b1:0a:c4:84:
                    12:2a:18:80:62:a8:45:f3:8f:1f:a5:74:7e:b2:e3:
                    a0:e7:2f:4e:89:2b:26:fd:ff:d2:e5:4d:60:d6:95:
                    3c:f6:4c:90:8e:9d:86:93:74:1e:f9:30:59:fd:df:
                    dd:f8:8c:ce:98:1f:e6:50:c3:a1:71:b5:96:0f:89:
                    1d:e4:a2:fb:61:44:be:ef:76:b8:27:a5:40:62:2a:
                    7c:e8:66:d0:1f:2f:75:e9:b1:9b:8d:34:53:eb:95:
                    7a:78:a7:be:47:d6:63:01:83:d2:25:36:e6:79:22:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:01:43:0B:49:2E:83:6D:50:9F:ED:2A:9E:0D:A1:E7:97:4A:CE:DF
            X509v3 Authority Key Identifier:
                keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:43:6f:e3:50:fe:0c:ae:63:92:49:c1:d7:64:e3:5a:97:d4:
         74:84:a9:8a:34:29:ee:a1:9c:31:79:a8:df:fe:01:ee:24:9e:
         a4:23:83:77:c6:c8:54:71:ce:67:dd:0a:a5:b7:6f:a4:9a:37:
         2b:2f:51:60:df:98:0a:a1:5e:7f:99:4c:a9:90:3b:18:b2:c2:
         14:98:52:27:18:e2:8b:2b:34:9f:54:53:df:01:ba:8c:9c:7b:
         a0:ca:98:f7:44:f0:a4:37:87:9f:17:9c:a3:0a:55:fc:d5:8b:
         b4:4d:64:70:f0:63:cd:b9:b4:d8:35:c0:f7:20:56:a2:4e:14:
         f7:f3:34:0d:ce:3e:05:e9:7f:76:ac:e1:98:73:82:9f:15:b9:
         e6:14:3a:a0:37:43:e1:19:10:3f:80:c9:2e:f4:8a:19:06:b6:
         44:12:a2:4d:de:3a:40:80:e3:09:1a:c4:1e:6d:5c:1e:b0:bd:
         58:46:7e:eb:fb:21:0f:b6:39:f7:09:cd:75:20:f5:47:b5:5a:
         15:f5:d6:6e:ec:ac:3e:ea:7f:c2:99:ec:e9:55:a7:fc:b8:ac:
         8a:9c:9f:6d:0a:3d:ea:32:e8:ea:74:34:e4:54:55:f6:2a:69:
         7e:2b:16:0d:cd:66:25:ff:9d:8c:33:11:af:31:80:8c:00:b3:
         1e:7c:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:04 2025 by rpki-client