This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
File:                     cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft (raw, json)
Hash identifier:          Ki0v/XLt5lDbBP5x8bXB4mclK7gUx5afADT3Q+lvAKw=
Subject key identifier:   B0:FD:98:A6:36:78:DC:A9:F5:53:D5:4B:74:A5:D1:B0:FB:B8:7E:30
Authority key identifier: 70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01
Certificate issuer:       /CN=A91764E1/serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
Manifest number:          015A
Signing time:             Fri 19 Dec 2025 03:15:45 +0000
Manifest this update:     Fri 19 Dec 2025 03:15:45 +0000
Manifest next update:     Fri 26 Dec 2025 03:15:45 +0000
Files and hashes:         1: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl (hash: aTPYuiSe/OREtaSSbSG12tmsd8sPrfcahADdEvxZh6I=)
                          2: 0C708FB4C67E11EE87B34958C4F9AE02.roa (hash: Emtdf6B32dUyriQRU+z92VLtRvSD7HNe+9gqK+EmXtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl
                          rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764E1, serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801
        Validity
            Not Before: Dec 19 03:15:45 2025 GMT
            Not After : Dec 26 03:15:45 2025 GMT
        Subject: CN=6944c361-1408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c8:b8:72:e5:11:d2:96:83:70:fb:65:b4:e4:
                    b4:dd:2b:e9:c5:f2:08:90:d5:95:b6:25:c5:e8:b1:
                    94:09:92:09:a8:e4:fe:d2:5c:b7:2e:e1:2f:8f:b9:
                    53:b5:1a:d8:17:7e:86:54:57:22:66:eb:cb:3e:01:
                    96:72:10:fc:ef:4f:71:6f:94:32:af:37:44:2a:5a:
                    51:4e:df:d4:b1:ff:b1:ee:f3:eb:fe:eb:47:c8:12:
                    38:01:a4:06:17:0c:90:a5:5a:a0:38:43:8b:b6:6a:
                    ba:cc:09:8e:8f:97:7b:9e:61:02:29:55:5b:af:71:
                    84:bd:d4:ca:46:f1:e4:60:ac:87:66:ed:71:4b:0c:
                    9e:e2:8b:22:1e:f8:77:83:06:3f:bf:45:72:3f:a3:
                    98:27:8c:3b:fa:44:45:62:04:71:a1:92:b1:fb:ae:
                    31:0f:de:e4:9a:ea:32:90:98:5c:f7:45:b9:40:3f:
                    95:d4:b0:08:6e:af:10:29:c5:ef:36:22:9f:01:2d:
                    37:54:7e:da:95:ab:3d:68:f8:d4:2f:70:e6:b2:02:
                    52:09:dc:3f:6d:a8:63:40:dd:6b:ef:65:bb:47:08:
                    bf:d0:c4:68:1d:0b:76:cb:ca:16:6e:ab:79:27:7a:
                    60:77:f9:ae:aa:7d:8f:6e:62:8b:97:d5:72:fa:79:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FD:98:A6:36:78:DC:A9:F5:53:D5:4B:74:A5:D1:B0:FB:B8:7E:30
            X509v3 Authority Key Identifier:
                keyid:70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:11:b3:0e:cb:0b:bd:08:39:33:e9:1e:bb:d4:f4:38:5d:bd:
         d6:89:00:86:f3:c6:68:a0:13:b4:41:0c:18:15:92:59:9b:98:
         aa:1d:1c:8b:47:bc:58:94:46:04:f6:00:4d:7f:60:1a:cc:4d:
         5d:d9:83:e3:49:e3:0c:e3:a8:65:dd:79:c1:80:72:86:a1:38:
         5c:d7:b8:b5:e2:84:98:27:99:14:d2:14:a4:2d:66:6e:4f:8b:
         51:fe:f2:9a:60:89:9b:64:cf:b0:e4:a9:0e:e3:7f:62:8e:27:
         0d:14:0a:a8:45:86:a7:13:0d:e6:a9:3b:c3:bc:68:25:78:e4:
         95:57:15:8b:e5:aa:6c:68:71:25:2b:31:7e:19:02:d7:ed:c8:
         26:54:d6:0d:5d:eb:42:6b:c9:5d:20:57:65:e7:3b:ea:2f:6f:
         2c:f6:95:a4:9e:4c:fa:67:3d:03:bb:fd:3b:a4:15:28:9c:ad:
         25:a8:20:9f:52:19:32:a3:da:2f:3f:49:86:a6:04:6e:27:76:
         fb:e8:dd:80:60:58:9d:f7:d6:be:f8:6e:6a:eb:aa:d8:22:18:
         f1:c7:f7:63:05:0c:26:9d:31:82:58:ea:2b:d2:5d:19:cc:ae:
         cc:28:ce:7e:85:53:32:48:df:aa:92:58:c0:2f:21:0d:91:08:
         2f:9c:26:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:59:58 2025 by rpki-client