This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
File:                     5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json)
Hash identifier:          iqVJKmfrWdsPd995c550LddOajLkEZv5zp8leLybquI=
Subject key identifier:   86:AD:8B:F1:AC:41:C1:BC:C7:77:B8:F6:FE:BF:67:42:09:53:31:6A
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Certificate issuer:       /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial:       0E28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
Manifest number:          0E13
Signing time:             Thu 18 Dec 2025 17:38:01 +0000
Manifest this update:     Thu 18 Dec 2025 17:38:00 +0000
Manifest next update:     Thu 25 Dec 2025 17:38:00 +0000
Files and hashes:         1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: Dw37ViCpEDndNgu9zMEoDOijJqu1s+eEvKdEnSb1RDw=)
                          2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: P63HmzuTgX6+OxmcbQTN/m0eCDcj1q5olNwP8Hf8SvI=)
                          3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: jkm23RvGSquZwL1DUARD3YaIj647wpqnNA3CvWP1hl8=)
                          4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: uZutnh3IDqFkeTM2HclLSv5xEA3RHi+jQtpjzohkCIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
                          rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3624 (0xe28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
        Validity
            Not Before: Dec 18 17:38:00 2025 GMT
            Not After : Dec 25 17:38:00 2025 GMT
        Subject: CN=69443bf9-6fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:51:e8:c1:3c:28:d9:18:1c:76:8e:9c:b4:
                    46:2d:9f:c9:12:bf:0a:e2:82:0f:b7:98:e0:44:61:
                    fc:61:3a:f4:1e:c8:cd:8c:63:c8:bb:8a:ac:7d:42:
                    70:f6:59:e8:16:e6:87:0c:89:a3:8e:9d:f9:2f:29:
                    37:41:ba:46:fd:7e:87:29:e3:ea:12:91:b4:01:a6:
                    11:0c:42:a1:b6:d8:d9:93:43:85:03:46:aa:95:17:
                    93:d3:00:ee:f8:8b:6b:19:cc:1d:d0:3f:b7:a4:80:
                    89:52:7c:59:d7:5e:78:cb:96:e3:fe:a3:b8:f8:2b:
                    b6:fa:71:0c:3c:af:58:50:81:82:f1:48:4f:1a:4b:
                    22:d9:0e:40:1d:ae:66:41:8a:2f:00:cf:08:13:f5:
                    70:b0:cf:7b:0c:71:09:ec:a9:92:5a:77:b0:ca:7a:
                    31:c1:68:0b:25:df:fc:a2:ad:b3:eb:9a:ea:34:ad:
                    0a:31:a2:bf:4f:c5:ca:4e:a0:02:6f:33:34:88:f2:
                    09:2f:86:70:d0:e8:66:7c:4b:af:50:bc:30:d3:f5:
                    e1:9d:66:a7:a2:d6:72:b9:44:77:cb:8e:28:48:07:
                    d8:38:6e:c8:1a:ba:86:78:0e:8b:a7:81:58:e5:12:
                    f8:c2:53:ef:49:96:02:52:7b:61:5b:63:8e:55:4d:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AD:8B:F1:AC:41:C1:BC:C7:77:B8:F6:FE:BF:67:42:09:53:31:6A
            X509v3 Authority Key Identifier:
                keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1c:45:62:cd:de:3a:22:27:01:44:af:37:43:3b:31:df:48:
         ff:69:02:4d:b8:da:2a:98:80:74:b8:db:80:3f:c6:43:35:c5:
         d1:f7:43:95:e4:a1:37:09:52:9c:9e:59:b1:71:4a:2c:60:a4:
         f7:23:69:b9:f0:69:33:7f:29:a2:2f:bd:fe:49:85:65:75:c0:
         4a:f8:97:8b:c8:54:76:ef:4b:58:03:49:4b:d0:ea:f5:78:5b:
         2d:64:48:71:84:a3:00:06:86:d8:90:46:9d:86:ca:79:e3:82:
         8d:87:46:de:63:98:0d:44:12:40:94:16:a9:d0:79:2f:3b:9f:
         cd:84:f8:e1:09:9f:05:95:da:a4:8a:93:03:28:23:6d:17:65:
         c7:55:aa:68:86:56:2a:9c:75:81:a5:3c:42:37:9f:b6:6e:77:
         89:f8:ba:53:2a:61:7b:fc:ad:46:2b:4b:7a:8b:bd:ad:e2:31:
         6e:d7:b1:77:29:83:ce:f4:e8:00:24:2a:43:ac:2f:0a:1d:45:
         3b:6c:41:38:29:ef:b1:f4:1d:4b:89:71:ca:72:c1:f7:21:52:
         ff:da:8d:fd:74:ae:94:3a:ca:06:d8:69:b1:c0:f8:dc:7f:c2:
         15:d0:46:7d:27:1f:e5:5f:d8:68:99:30:60:bb:02:a6:8c:09:
         78:03:5c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:33 2025 by rpki-client