This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
File:                     olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json)
Hash identifier:          GheE0xBc804n2bpUtSTnhF4v7Fclw/1/1EFJIxM2Og8=
Subject key identifier:   37:46:D6:97:C9:E2:1C:D1:5F:7C:EC:92:65:56:AC:19:12:8C:2D:3F
Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
Certificate issuer:       /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Certificate serial:       0614
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
Manifest number:          0614
Signing time:             Tue 30 Dec 2025 22:04:42 +0000
Manifest this update:     Tue 30 Dec 2025 22:04:42 +0000
Manifest next update:     Tue 06 Jan 2026 22:04:42 +0000
Files and hashes:         1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: JLLl3nt3PzQY5L2NsrpH20gknNibauE0A0gwNcMVURg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 22:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
        Validity
            Not Before: Dec 30 22:04:42 2025 GMT
            Not After : Jan  6 22:04:42 2026 GMT
        Subject: CN=69544c7a-601f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:01:89:9f:22:17:2c:3c:57:05:df:43:59:
                    eb:95:84:18:4c:24:a9:a6:16:9e:37:c1:40:da:31:
                    c4:e8:8f:dc:50:f3:a7:78:cb:b9:4f:d7:ee:25:a1:
                    ca:15:47:5b:de:73:3f:99:d3:43:71:33:6f:40:1c:
                    01:a3:44:0c:f7:0d:54:25:56:cf:0f:c9:46:24:3a:
                    fa:73:5d:34:da:25:47:48:31:55:74:fa:cb:a3:c4:
                    62:26:cc:df:7d:ca:6b:12:ee:f6:81:54:1a:75:d8:
                    3f:c8:af:68:5c:81:92:6e:ed:43:6d:b4:00:cd:5f:
                    ff:c8:d9:ec:f3:3b:56:b7:67:ff:f0:9a:1d:75:52:
                    a5:c7:17:16:33:26:f9:ca:db:e1:56:02:92:3f:ae:
                    7c:bd:ff:24:8b:62:61:d5:f1:48:2d:c8:ea:4e:15:
                    89:dd:36:b2:1b:05:fd:c4:8a:32:5f:d6:2e:65:df:
                    4c:44:2b:fb:60:85:ec:7b:78:1a:6a:c4:22:42:d9:
                    ed:c5:6f:80:10:e7:7f:c4:20:8e:1e:8c:f4:b8:12:
                    3b:89:9b:14:c0:69:ae:4b:c9:84:98:46:63:3e:a2:
                    37:f2:4c:eb:b3:19:fb:7e:dd:97:02:cf:2e:71:db:
                    40:41:d1:33:ac:68:a8:6e:cb:95:1b:aa:f3:d2:66:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:46:D6:97:C9:E2:1C:D1:5F:7C:EC:92:65:56:AC:19:12:8C:2D:3F
            X509v3 Authority Key Identifier:
                keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:eb:2e:a6:7a:98:ac:1d:de:90:2f:2f:9c:18:97:73:e0:
         31:08:37:fd:44:b5:96:9d:e2:ae:29:cc:9c:f6:47:47:42:0d:
         d4:e9:34:d9:2e:de:41:a7:02:0b:08:19:51:82:b1:d5:65:a8:
         33:6d:14:e6:35:de:47:47:fa:1f:dc:26:7f:b2:e6:d1:91:c5:
         2a:71:6e:39:f2:73:04:83:a7:31:6b:78:bd:b4:e4:53:a6:1f:
         93:27:5d:0a:98:03:72:21:ae:c9:7b:cb:bd:ab:5a:92:2b:ec:
         83:01:a7:83:fa:7f:15:50:f8:56:e1:e9:34:9a:97:83:83:1c:
         73:b2:89:84:5a:7f:10:d3:72:a9:79:70:e9:b7:57:32:f0:58:
         ce:d8:84:e9:d5:cb:ba:e4:c6:e7:11:5e:fe:32:29:85:8c:84:
         81:ae:80:a3:26:ac:19:32:a0:17:66:5f:f3:ed:c5:31:7b:78:
         27:55:cf:b7:30:2c:5e:d0:cf:ef:d3:ee:e0:da:6e:fb:d8:3d:
         2a:fa:80:92:20:ee:16:fa:e5:5c:5a:55:a3:b0:79:32:67:6b:
         64:24:77:1c:e2:16:c1:86:0f:d9:f9:1f:f7:d4:19:42:ab:24:
         49:b3:e5:c1:c5:4e:24:86:82:85:3d:8a:3a:8f:c4:b5:e7:b3:
         e6:d8:c3:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM3MzgxMTAvBgNVBAUTKEEyNUJERjc2M0YwQkE2M0M0OUEzNzZBQkY5NkU1NTUw
ODc5RTg1QkEwHhcNMjUxMjMwMjIwNDQyWhcNMjYwMTA2MjIwNDQyWjAYMRYwFAYD
VQQDDA02OTU0NGM3YS02MDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvzUBiZ8iFyw8VwXfQ1nrlYQYTCSpphaeN8FA2jHE6I/cUPOneMu5T9fuJaHK
FUdb3nM/mdNDcTNvQBwBo0QM9w1UJVbPD8lGJDr6c1002iVHSDFVdPrLo8RiJszf
fcprEu72gVQaddg/yK9oXIGSbu1DbbQAzV//yNns8ztWt2f/8JoddVKlxxcWMyb5
ytvhVgKSP658vf8ki2Jh1fFILcjqThWJ3TayGwX9xIoyX9YuZd9MRCv7YIXse3ga
asQiQtntxW+AEOd/xCCOHoz0uBI7iZsUwGmuS8mEmEZjPqI38kzrsxn7ft2XAs8u
cdtAQdEzrGiobsuVG6rz0mYe2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdG1pfJ
4hzRX3zskmVWrBkSjC0/MB8GA1UdIwQYMBaAFKJb33Y/C6Y8SaN2q/luVVCHnoW6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zQkYwQUU5Q0M5
RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBqeEpvM2FyLVc1VlVJZWVo
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29sdmZkajhMcGp4Sm8zYXItVzVWVUllZWhiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzczOC8zQkYwQUU5Q0M5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBq
eEpvM2FyLVc1VlVJZWVoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYp+supnqYrB3ekC8vnBiXc+AxCDf9RLWWneKuKcyc9kdHQg3U6TTZ
Lt5BpwILCBlRgrHVZagzbRTmNd5HR/of3CZ/subRkcUqcW458nMEg6cxa3i9tORT
ph+TJ10KmANyIa7Je8u9q1qSK+yDAaeD+n8VUPhW4ek0mpeDgxxzsomEWn8Q03Kp
eXDpt1cy8FjO2ITp1cu65MbnEV7+MimFjISBroCjJqwZMqAXZl/z7cUxe3gnVc+3
MCxe0M/v0+7g2m772D0q+oCSIO4W+uVcWlWjsHkyZ2tkJHcc4hbBhg/Z+R/31BlC
qyRJs+XBxU4khoKFPYo6j8S157Pm2MMP
-----END CERTIFICATE-----
Generated at Wed Dec 31 21:05:15 2025 by rpki-client