This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
File:                     ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json)
Hash identifier:          sUAXe9fMyPNrYtEYUrihQTkPSg6UUVrX5L5O8qqCAKs=
Subject key identifier:   1B:D4:6E:88:22:EE:36:45:E5:D3:74:B2:CB:8E:E9:DC:BE:E5:6C:33
Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
Certificate issuer:       /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Certificate serial:       01D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
Manifest number:          01AB
Signing time:             Sun 21 Dec 2025 02:56:14 +0000
Manifest this update:     Sun 21 Dec 2025 02:56:13 +0000
Manifest next update:     Sun 28 Dec 2025 02:56:13 +0000
Files and hashes:         1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: 5VrRrpKkzssrQ189gi2sxK+6TZtgv/xvmO1vPMd1Nv8=)
                          2: 8AE913AED18811F08493AE11C4F9AE02.roa (hash: I/oWc9zkVDHhsjHv5f98gAoWosrJVNL6hHr8fJcRXjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
                          rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
        Validity
            Not Before: Dec 21 02:56:13 2025 GMT
            Not After : Dec 28 02:56:13 2025 GMT
        Subject: CN=694761cd-bd93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:a4:48:25:4c:9c:41:bd:bf:9a:a4:9c:04:
                    09:92:a4:a0:d9:a1:6a:08:03:fc:1f:f4:13:4e:bd:
                    a0:98:ba:c6:f5:ad:7d:67:62:ef:5a:81:b5:b6:7e:
                    48:a7:ac:5e:87:93:ce:2f:82:d1:c5:80:4b:d2:d2:
                    ab:e3:0b:95:94:d7:a7:d9:36:ed:e7:1e:78:cb:77:
                    b7:a9:24:cc:cf:78:e8:30:06:d2:fe:7a:31:c4:36:
                    53:21:3b:a9:49:72:81:01:63:07:8a:0d:6b:88:56:
                    be:06:30:23:5a:e4:a0:33:13:32:2f:5e:cc:2e:b6:
                    97:99:d7:48:a3:a4:89:6f:f8:07:96:b7:d7:08:fc:
                    d6:9b:34:d3:cc:ad:c3:11:91:c9:a1:f6:06:c4:a4:
                    97:b3:3e:ea:fb:9e:c0:bc:37:d3:9f:d5:9b:ec:38:
                    49:20:25:e1:b9:d3:6e:cd:be:fd:19:e1:f0:5e:e8:
                    9b:ef:10:2e:4a:d6:db:3e:e3:de:5c:2f:a2:22:ab:
                    40:35:6b:fc:b1:62:5c:d4:c0:b3:9a:f3:42:3b:cd:
                    2e:16:b7:b6:9a:e0:53:72:3a:c3:33:14:32:93:c2:
                    6d:b9:96:3c:a6:13:94:04:63:ab:95:fa:cb:93:06:
                    b6:68:12:c5:7a:fb:00:b2:9c:0e:68:f7:45:a8:44:
                    2a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D4:6E:88:22:EE:36:45:E5:D3:74:B2:CB:8E:E9:DC:BE:E5:6C:33
            X509v3 Authority Key Identifier:
                keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f0:62:be:1b:0d:29:6a:67:98:eb:4d:7f:78:02:a8:3b:7a:
         c0:0f:f3:21:c1:58:10:6c:ee:df:4e:34:4b:48:09:04:64:42:
         24:28:8f:22:9d:e9:85:79:28:05:83:25:6b:5c:93:51:f3:e6:
         16:5d:51:66:94:6c:24:32:f7:44:2d:dd:c9:97:a0:0b:7b:5a:
         06:65:ca:69:75:df:42:a3:22:5d:04:c5:72:c3:91:ed:98:55:
         13:b8:17:1b:30:87:eb:19:1b:3f:c9:79:7e:aa:66:a6:b1:fa:
         ea:16:1d:16:83:70:3d:b1:c6:86:1c:b1:47:cc:d4:7a:ff:de:
         b5:42:b7:e0:dd:86:35:3c:d6:53:57:30:8b:c5:83:ff:62:d6:
         a3:0a:9e:a9:68:7e:d0:2d:4b:fa:f0:d7:4e:b0:b6:3e:13:51:
         f9:d6:39:89:2c:a0:4e:0c:b1:cf:74:02:a9:39:c7:b7:87:1c:
         2b:7d:3d:b7:b4:c4:c8:a9:1a:42:38:b5:0b:b6:d5:4a:c3:3a:
         78:40:a3:8c:99:cc:b5:44:07:2e:d0:3d:05:ab:a8:41:a3:74:
         9a:55:6a:94:c7:d9:0c:90:9c:2a:ec:2a:32:47:fd:b2:87:a6:
         93:30:f4:fc:57:02:3a:21:d9:36:a1:2c:3a:33:04:a8:f9:a7:
         0d:65:94:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:57:44 2025 by rpki-client