This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File:                     OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier:          4gOJuwAtzSrBvV85LmOc/6ZstDHnG3U5TNOPaUoDljQ=
Subject key identifier:   E4:1A:2E:C8:66:51:F1:41:A4:FD:41:F5:F0:7F:B9:84:65:9A:30:F7
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer:       /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number:          0136
Signing time:             Fri 19 Dec 2025 01:45:57 +0000
Manifest this update:     Fri 19 Dec 2025 01:45:57 +0000
Manifest next update:     Fri 26 Dec 2025 01:45:57 +0000
Files and hashes:         1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: z1l8jJ0WvGTUjsmJt8/8h6kf4U4wpcxnhFQqJScxsBM=)
                          2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: nFQQw/dyghkb1sXKy9uupZRqxzdAPtcnxFOFgRiXGi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
        Validity
            Not Before: Dec 19 01:45:57 2025 GMT
            Not After : Dec 26 01:45:57 2025 GMT
        Subject: CN=6944ae55-8924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:71:9a:fb:ce:f1:40:b7:07:0a:51:82:b0:
                    f7:54:e6:2f:74:2b:ca:a6:6b:d9:bc:8a:60:70:84:
                    22:bf:29:89:84:c8:1a:57:b4:a9:af:4f:83:6c:00:
                    fc:2a:5f:3e:08:02:b5:1b:a5:33:6a:7d:59:6d:07:
                    4f:2c:f2:68:b7:e0:03:0f:bb:8a:51:2f:48:50:40:
                    a7:c2:04:4a:f4:99:0a:3d:da:e7:db:f6:7d:47:8f:
                    f9:4e:b6:f1:33:20:ca:d6:ab:61:5d:62:86:b1:a9:
                    ad:f0:f3:fb:6b:65:44:e8:14:5d:54:ae:98:30:50:
                    9c:ed:5f:7c:eb:06:5f:c8:f7:0d:b3:c7:db:e9:a3:
                    0d:48:c2:c6:17:cb:c1:04:53:19:ba:a2:f2:e8:4b:
                    0d:71:ed:38:a7:c8:2f:f6:51:dd:ef:ae:90:e0:8c:
                    c3:db:a9:c6:ee:1c:7a:42:53:d5:37:a8:e9:58:19:
                    bf:50:88:1c:17:8e:8d:07:4e:38:65:04:be:c0:29:
                    0c:10:33:40:0a:d5:03:06:06:f3:80:95:68:f7:75:
                    40:44:0a:76:3d:6a:fa:f5:e7:dd:18:87:75:4d:03:
                    cd:47:42:aa:da:63:e2:46:9a:06:e9:81:b8:56:b4:
                    7c:3a:b0:be:b3:2a:19:15:83:c1:bb:4b:e3:4c:35:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1A:2E:C8:66:51:F1:41:A4:FD:41:F5:F0:7F:B9:84:65:9A:30:F7
            X509v3 Authority Key Identifier:
                keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:16:0d:17:14:63:e0:01:83:0b:8b:ef:f4:a1:2f:f9:dc:b3:
         50:60:5f:d2:d4:ff:8c:bc:78:a4:04:43:ce:97:bc:7b:0f:96:
         82:24:42:2f:e2:ba:f7:b0:01:e2:86:44:d2:8e:de:c4:cf:e8:
         3b:c7:6b:92:32:6d:ec:a8:92:36:d1:f7:dc:e0:c6:1e:f3:f0:
         9c:a3:84:5e:a4:86:b3:c7:92:18:c3:00:47:12:d4:e2:8b:fb:
         55:90:bf:7b:aa:3f:31:9d:cd:c6:fd:12:b2:19:1f:7f:c3:ef:
         68:31:70:e2:bc:ca:fe:04:77:dc:9d:22:11:38:77:c5:97:58:
         91:3b:4a:fc:b1:1f:a4:00:e1:db:ca:e6:35:65:26:b5:ce:9a:
         2a:75:90:5d:13:ce:b6:b4:17:4b:e4:03:70:19:0b:be:ae:c4:
         41:d1:a6:17:8d:f1:3d:90:b2:1a:89:91:6d:20:b0:a5:ab:e0:
         3c:42:af:42:44:c2:e4:80:b8:56:48:06:9d:7e:2b:6b:ef:b9:
         a8:e5:43:24:96:28:c5:bb:97:9b:e7:ac:6b:10:a3:61:0e:d5:
         75:3d:cc:6b:d7:0f:98:96:82:c3:4b:ce:5b:ab:22:19:91:8c:
         28:03:64:bd:11:a6:c2:33:89:c4:12:14:9c:b9:86:cf:89:80:
         8e:67:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:35 2025 by rpki-client