This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File:                     bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier:          DuTNunaBkKNE9ZcLc/SVyC2DT79kEVkv6eECysQprR0=
Subject key identifier:   FD:9F:A8:36:4E:B0:38:75:AC:AF:76:7D:2B:DB:6C:8A:8D:49:6E:29
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer:       /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number:          0199
Signing time:             Fri 19 Dec 2025 02:37:45 +0000
Manifest this update:     Fri 19 Dec 2025 02:37:45 +0000
Manifest next update:     Fri 26 Dec 2025 02:37:45 +0000
Files and hashes:         1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: PLJ+dIvNbWolxDgslrqEsnK8k2aEkVYli2BoPkyzpKo=)
                          2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: sGfgOeU/fHIH2HrB1IOWJi3rlZbzHtByfN0MLcFepBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
                          rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120E98, serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
        Validity
            Not Before: Dec 19 02:37:45 2025 GMT
            Not After : Dec 26 02:37:45 2025 GMT
        Subject: CN=6944ba79-7193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:66:e1:d7:01:51:5c:15:50:58:12:11:bf:
                    57:3e:84:69:58:70:bd:90:21:dc:58:a4:75:48:f5:
                    3e:4c:2a:31:d1:f7:ad:1a:91:30:39:be:c5:70:1d:
                    a5:f6:72:68:f4:af:02:e9:1d:b7:7b:c1:55:d1:8f:
                    f9:c9:d7:77:2e:9e:93:33:81:e3:1b:cb:57:a2:97:
                    d8:94:ec:df:1c:01:7f:f5:f7:70:9d:1e:ef:41:9f:
                    d4:11:29:b0:a4:fc:9d:7a:75:81:34:ad:47:4b:d8:
                    03:26:2c:8b:ae:5b:4b:0d:5d:9f:0c:f1:f9:70:d8:
                    63:4d:8a:96:14:80:7a:17:fd:a5:3b:e5:ce:fc:3a:
                    a7:ca:0c:42:95:30:aa:12:f9:ac:8a:eb:47:59:28:
                    fd:9f:40:b0:f5:52:11:d3:07:1b:78:fc:55:24:22:
                    cf:fc:c6:43:03:5c:01:72:e1:8d:58:de:47:5c:83:
                    a4:ba:5e:be:04:41:c0:c6:91:f2:59:7b:e7:ce:e8:
                    24:a0:5f:9b:f0:d7:be:4b:7c:55:50:72:4e:2d:93:
                    e7:15:bf:e6:90:c2:24:ff:81:3c:04:0f:76:99:a0:
                    30:18:dd:2e:5d:d5:60:59:c0:50:5e:49:22:e8:9f:
                    9f:36:41:ee:fd:64:e8:77:fc:fd:a4:e2:a6:fe:a9:
                    08:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9F:A8:36:4E:B0:38:75:AC:AF:76:7D:2B:DB:6C:8A:8D:49:6E:29
            X509v3 Authority Key Identifier:
                keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1a:a7:63:6b:cf:5c:8c:5f:2c:e1:bb:15:b8:02:62:14:52:
         e3:c8:51:4d:d6:88:5a:91:b7:b8:47:8b:dd:6c:c9:bf:99:38:
         7a:f8:29:50:07:d8:14:e4:be:cf:61:81:91:2a:65:7f:b6:ba:
         ad:be:18:b4:1e:4d:1d:59:d5:ff:02:d1:fb:83:b2:3d:b2:33:
         2b:70:24:e1:59:d3:38:ce:3e:6d:01:00:e6:1a:de:48:30:3a:
         e6:92:15:42:6f:48:95:87:be:ae:dd:27:87:57:81:85:57:05:
         02:b8:3a:79:c5:32:e5:c2:0c:dd:71:02:d2:cd:38:ff:05:75:
         26:de:47:88:df:c2:5a:43:0f:d2:75:bd:88:4a:cc:08:3b:d1:
         5a:71:d7:84:e9:65:67:af:72:3d:3a:8c:08:a2:78:e9:ad:63:
         16:91:d8:14:0a:5f:7b:73:34:93:c6:6c:15:a8:72:18:03:af:
         0b:17:cf:56:57:35:4b:73:e5:c2:7a:64:ad:b8:5a:e1:5d:0e:
         54:8d:9e:41:53:67:b4:1c:45:d1:2a:d7:e9:24:d4:4a:c2:95:
         36:22:e6:10:2a:d0:1a:04:01:53:15:23:b1:92:1c:76:42:a3:
         c0:7e:bc:a6:52:f1:82:bb:6d:65:6f:6b:dd:da:85:8e:46:af:
         48:a3:a8:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBFOTgxMTAvBgNVBAUTKDZDRTJEN0QwRDk1OTgwRDc0M0NBRDQ4NDg2OTg0OERC
QTEyNUMyOUIwHhcNMjUxMjE5MDIzNzQ1WhcNMjUxMjI2MDIzNzQ1WjAYMRYwFAYD
VQQDDA02OTQ0YmE3OS03MTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+5m4dcBUVwVUFgSEb9XPoRpWHC9kCHcWKR1SPU+TCox0fetGpEwOb7FcB2l
9nJo9K8C6R23e8FV0Y/5ydd3Lp6TM4HjG8tXopfYlOzfHAF/9fdwnR7vQZ/UESmw
pPydenWBNK1HS9gDJiyLrltLDV2fDPH5cNhjTYqWFIB6F/2lO+XO/DqnygxClTCq
EvmsiutHWSj9n0Cw9VIR0wcbePxVJCLP/MZDA1wBcuGNWN5HXIOkul6+BEHAxpHy
WXvnzugkoF+b8Ne+S3xVUHJOLZPnFb/mkMIk/4E8BA92maAwGN0uXdVgWcBQXkki
6J+fNkHu/WTod/z9pOKm/qkIAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2fqDZO
sDh1rK92fSvbbIqNSW4pMB8GA1UdIwQYMBaAFGzi19DZWYDXQ8rUhIaYSNuhJcKb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEU5OC83NEZENUU4MjZF
NTMxMUVFOUI5MTdFNzlDNEY5QUUwMi9iT0xYME5sWmdOZER5dFNFaHBoSTI2RWx3
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JPTFgwTmxaZ05kRHl0U0VocGhJMjZFbHdwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEU5OC83NEZENUU4MjZFNTMxMUVFOUI5MTdFNzlDNEY5QUUwMi9iT0xYME5sWmdO
ZER5dFNFaHBoSTI2RWx3cHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8Gqdja89cjF8s4bsVuAJiFFLjyFFN1ohakbe4R4vdbMm/mTh6+ClQ
B9gU5L7PYYGRKmV/trqtvhi0Hk0dWdX/AtH7g7I9sjMrcCThWdM4zj5tAQDmGt5I
MDrmkhVCb0iVh76u3SeHV4GFVwUCuDp5xTLlwgzdcQLSzTj/BXUm3keI38JaQw/S
db2ISswIO9FacdeE6WVnr3I9OowIonjprWMWkdgUCl97czSTxmwVqHIYA68LF89W
VzVLc+XCemStuFrhXQ5UjZ5BU2e0HEXRKtfpJNRKwpU2IuYQKtAaBAFTFSOxkhx2
QqPAfrymUvGCu21lb2vd2oWORq9Io6hV
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:18 2025 by rpki-client