This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
File:                     OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json)
Hash identifier:          YzcBTb8lJ/vPzrkRH5ofS3YQtXNxOfjF9l+UG21PUe4=
Subject key identifier:   35:42:9E:95:DB:1C:08:09:EC:44:63:E2:B5:E6:F7:A4:93:62:A2:55
Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
Certificate issuer:       /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
Manifest number:          063A
Signing time:             Fri 26 Dec 2025 21:55:12 +0000
Manifest this update:     Fri 26 Dec 2025 21:55:11 +0000
Manifest next update:     Fri 02 Jan 2026 21:55:11 +0000
Files and hashes:         1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: 86O3VaIuQoqtTYZpd2zocTY0hNzAOAw4KTQ1/ktouMQ=)
                          2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: B/l1/qnG+ox/f3khU2Qu7i7cTmOVlXxBXIJAWV1sQEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
                          rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 21:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
        Validity
            Not Before: Dec 26 21:55:11 2025 GMT
            Not After : Jan  2 21:55:11 2026 GMT
        Subject: CN=694f0440-d800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:55:f8:e5:00:3d:88:e6:23:e0:7f:92:4d:
                    49:be:91:e5:97:dd:3a:d4:59:40:7e:f8:94:43:6c:
                    f2:43:90:ce:4d:2f:16:37:14:f9:d7:2c:26:eb:18:
                    f5:0e:d1:f9:38:04:58:60:2f:4e:da:9d:db:50:eb:
                    05:7f:fd:3d:e1:00:35:79:be:41:44:35:2e:b1:34:
                    f6:c7:6e:53:fe:87:96:8c:6b:24:46:47:0e:d4:0a:
                    8a:69:1a:ce:7b:52:72:30:d6:d3:5f:8d:ea:16:29:
                    2a:a2:fc:70:00:84:83:8e:72:31:b6:3d:05:8a:a6:
                    ac:52:f6:98:7c:4a:11:3e:08:41:f0:09:76:0a:92:
                    52:d0:47:15:9a:02:58:ed:65:a1:d0:3b:69:f7:65:
                    6c:01:62:19:2d:11:97:73:54:97:82:f0:26:32:ee:
                    6f:38:58:01:7e:9e:ec:f3:e4:fc:9f:e5:da:46:b8:
                    37:74:46:69:4c:b6:88:95:d8:9c:e2:02:53:7f:02:
                    d0:e6:cf:77:4e:eb:a3:96:61:a7:ac:0d:77:40:07:
                    f9:74:bb:2a:89:1b:7c:8d:7c:ee:b9:be:1c:ea:bd:
                    a8:99:52:47:cd:2a:33:ab:fd:3b:fe:20:62:00:49:
                    b9:68:cd:6b:c2:c4:ba:4c:c5:0a:bc:0e:5d:b0:41:
                    48:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:42:9E:95:DB:1C:08:09:EC:44:63:E2:B5:E6:F7:A4:93:62:A2:55
            X509v3 Authority Key Identifier:
                keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4c:35:d5:63:3a:9c:fb:fa:c3:fe:e5:a9:df:e8:eb:06:99:
         a8:33:cb:2b:ce:17:d3:e2:3d:2c:f5:38:c2:a3:8d:3c:85:f8:
         c5:c1:aa:8b:f8:8a:3a:d4:f3:f1:42:9d:85:88:3b:5f:9d:47:
         8a:4f:1b:76:92:54:b2:a5:d8:5b:fa:aa:f1:2f:d3:cb:85:4e:
         e8:7d:60:1d:e9:c2:b0:ac:83:3a:d7:f1:da:04:1a:2f:6c:d2:
         cf:09:6a:77:f0:6a:5d:85:47:e5:27:9d:b4:da:2b:cb:c2:95:
         38:16:05:32:fa:94:8f:6a:ee:f7:f3:20:b1:18:07:85:a4:74:
         b1:15:dc:9f:cb:b7:85:73:03:72:64:f1:db:83:28:ad:3b:bc:
         02:3e:f8:43:bc:6b:81:d3:0f:44:52:b5:d4:5b:de:b7:bc:fe:
         d4:d5:b5:ea:00:be:d6:79:06:b5:99:4d:80:1f:b1:ba:8a:9e:
         87:a6:e2:48:1f:55:bb:c5:02:de:20:11:fa:c9:f1:49:47:4a:
         9f:04:39:af:1b:2e:55:55:26:3e:d9:9e:9c:74:11:c6:8a:4d:
         83:76:98:33:c0:6b:cf:40:45:99:9f:f5:fe:73:94:db:3f:63:
         f6:f1:05:9a:26:0c:47:d6:00:4c:d4:17:56:7f:bb:e2:42:88:
         f1:b8:93:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC
RDNDMzg2NUUwHhcNMjUxMjI2MjE1NTExWhcNMjYwMTAyMjE1NTExWjAYMRYwFAYD
VQQDDA02OTRmMDQ0MC1kODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArddV+OUAPYjmI+B/kk1JvpHll9061FlAfviUQ2zyQ5DOTS8WNxT51ywm6xj1
DtH5OARYYC9O2p3bUOsFf/094QA1eb5BRDUusTT2x25T/oeWjGskRkcO1AqKaRrO
e1JyMNbTX43qFikqovxwAISDjnIxtj0FiqasUvaYfEoRPghB8Al2CpJS0EcVmgJY
7WWh0Dtp92VsAWIZLRGXc1SXgvAmMu5vOFgBfp7s8+T8n+XaRrg3dEZpTLaIldic
4gJTfwLQ5s93TuujlmGnrA13QAf5dLsqiRt8jXzuub4c6r2omVJHzSozq/07/iBi
AEm5aM1rwsS6TMUKvA5dsEFIPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVCnpXb
HAgJ7ERj4rXm96STYqJVMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD
OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo
bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh
UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdTDXVYzqc+/rD/uWp3+jrBpmoM8srzhfT4j0s9TjCo408hfjFwaqL
+Io61PPxQp2FiDtfnUeKTxt2klSypdhb+qrxL9PLhU7ofWAd6cKwrIM61/HaBBov
bNLPCWp38GpdhUflJ5202ivLwpU4FgUy+pSPau738yCxGAeFpHSxFdyfy7eFcwNy
ZPHbgyitO7wCPvhDvGuB0w9EUrXUW963vP7U1bXqAL7WeQa1mU2AH7G6ip6HpuJI
H1W7xQLeIBH6yfFJR0qfBDmvGy5VVSY+2Z6cdBHGik2DdpgzwGvPQEWZn/X+c5Tb
P2P28QWaJgxH1gBM1BdWf7viQojxuJNz
-----END CERTIFICATE-----
Generated at Sun Dec 28 09:42:09 2025 by rpki-client