This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
File:                     oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json)
Hash identifier:          5TQ8P5DjITlboCsWaV2GAwqjzhOyI6F463dbfd8omBc=
Subject key identifier:   26:9D:44:BE:8E:4A:FE:D4:F7:BD:4A:C8:CF:5E:0B:18:D2:31:E6:A0
Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
Certificate issuer:       /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
Manifest number:          73
Signing time:             Fri 19 Dec 2025 05:51:32 +0000
Manifest this update:     Fri 19 Dec 2025 05:51:31 +0000
Manifest next update:     Fri 26 Dec 2025 05:51:31 +0000
Files and hashes:         1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: zp+y5eypobahwOm/WcWaYKZKq1i+1sWztiYqW03T14E=)
                          2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: F4KKMKiW48gN9aBGOT2hP2pHnwX5JnqO3laTg5f8NeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
                          rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
        Validity
            Not Before: Dec 19 05:51:31 2025 GMT
            Not After : Dec 26 05:51:31 2025 GMT
        Subject: CN=6944e7e4-de85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:6e:4d:69:57:43:14:67:db:a3:d9:16:24:
                    26:4b:7b:b2:ec:d5:02:d2:67:0b:19:52:2e:52:9c:
                    65:d9:d8:ca:28:2b:c7:f9:a0:9b:86:34:ff:c5:88:
                    7e:6d:34:3c:37:51:36:67:d1:af:07:1a:db:8d:d6:
                    10:d1:b0:dd:62:e7:97:5e:af:99:55:d4:c2:ea:89:
                    e4:b5:4e:87:01:4a:cc:06:87:a1:e4:19:2b:c2:40:
                    51:8c:7f:a0:34:a7:2e:56:dc:c5:47:4c:b9:57:f7:
                    f2:1f:97:35:7d:7e:7f:07:ed:3f:85:7f:66:7e:46:
                    2c:fc:62:f0:94:f0:f8:ad:1d:e9:80:6c:e8:ff:58:
                    68:af:b1:e2:7c:5d:36:99:e9:7b:73:7a:50:33:74:
                    c5:e4:76:4a:cb:98:65:18:9f:fc:68:21:77:7e:c4:
                    96:04:c6:be:99:fa:ce:15:2f:35:49:da:73:63:0c:
                    5c:81:65:dc:37:0b:5f:f4:53:5b:8b:51:a0:aa:50:
                    60:78:b8:8f:09:44:5f:cf:dc:52:17:9d:ff:34:ed:
                    9e:99:6c:61:dc:c6:67:73:88:fc:12:4d:4f:84:c7:
                    84:0d:52:8a:2b:c0:e0:01:bc:9d:1f:5a:31:8e:20:
                    0c:91:80:16:c6:75:a8:6e:1b:87:80:53:36:a0:3b:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9D:44:BE:8E:4A:FE:D4:F7:BD:4A:C8:CF:5E:0B:18:D2:31:E6:A0
            X509v3 Authority Key Identifier:
                keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:56:d4:57:9f:cc:bf:5c:fe:46:84:5b:72:b9:5d:7e:70:86:
         a9:9f:c5:44:4e:aa:e8:f3:e0:65:60:6d:63:80:92:fb:f2:81:
         cf:c2:5c:4e:1b:2d:65:ca:d1:03:2b:78:6c:6f:6c:55:db:73:
         38:ee:40:bd:28:21:ac:a0:24:29:f4:91:32:cd:b6:c0:d6:fb:
         cd:6c:6e:de:69:1a:dc:a9:61:0a:5b:de:30:b0:0f:85:be:a1:
         2f:42:b2:69:f8:4d:5d:0e:c0:88:3b:e6:0c:d4:dd:ea:58:5f:
         8a:83:30:14:85:e2:a0:25:cd:cf:f5:97:f3:64:b4:55:59:ac:
         bc:4f:76:73:66:fc:fc:e6:4e:1f:28:fc:fc:ac:78:2a:a4:e3:
         dc:ea:ee:53:38:ae:d4:81:89:ca:bf:97:dd:a4:cb:9d:81:7a:
         4a:dc:b9:6b:94:3c:0f:62:b9:f4:e9:67:88:c3:6e:44:b0:26:
         5e:11:d4:c0:2f:b2:b7:c4:53:69:06:d7:cb:52:01:5d:a7:88:
         84:d6:e7:a2:02:b9:b0:3d:31:7e:05:5d:9b:82:92:d4:d5:45:
         54:20:73:fa:8a:ba:20:e7:dd:d9:6e:43:3f:4f:0e:cc:fe:92:
         2d:c4:0b:89:8f:68:ad:d3:e1:c6:64:cb:79:f0:a8:88:9d:f6:
         e6:7b:8b:b8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QTVENjExMC8GA1UEBRMoQTEyRTVFMUIyMjExNzIxODNCRjZCNjU3REYxQTA2RDMw
Q0ExMEJGRjAeFw0yNTEyMTkwNTUxMzFaFw0yNTEyMjYwNTUxMzFaMBgxFjAUBgNV
BAMMDTY5NDRlN2U0LWRlODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuqG5NaVdDFGfbo9kWJCZLe7Ls1QLSZwsZUi5SnGXZ2MooK8f5oJuGNP/FiH5t
NDw3UTZn0a8HGtuN1hDRsN1i55der5lV1MLqieS1TocBSswGh6HkGSvCQFGMf6A0
py5W3MVHTLlX9/IflzV9fn8H7T+Ff2Z+Riz8YvCU8PitHemAbOj/WGivseJ8XTaZ
6XtzelAzdMXkdkrLmGUYn/xoIXd+xJYExr6Z+s4VLzVJ2nNjDFyBZdw3C1/0U1uL
UaCqUGB4uI8JRF/P3FIXnf807Z6ZbGHcxmdziPwSTU+Ex4QNUoorwOABvJ0fWjGO
IAyRgBbGdahuG4eAUzagO1mfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJp1Evo5K
/tT3vUrIz14LGNIx5qAwHwYDVR0jBBgwFoAUoS5eGyIRchg79rZX3xoG0wyhC/8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNUQ2LzZFQUZCNTI0MkND
QjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hnNzlyWlgzeG9HMHd5aENf
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb1M1ZUd5SVJjaGc3OXJaWDN4b0cwd3loQ184LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB
NUQ2LzZFQUZCNTI0MkNDQjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hn
NzlyWlgzeG9HMHd5aENfOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAF1W1FefzL9c/kaEW3K5XX5whqmfxUROqujz4GVgbWOAkvvygc/CXE4b
LWXK0QMreGxvbFXbczjuQL0oIaygJCn0kTLNtsDW+81sbt5pGtypYQpb3jCwD4W+
oS9Csmn4TV0OwIg75gzU3epYX4qDMBSF4qAlzc/1l/NktFVZrLxPdnNm/PzmTh8o
/PyseCqk49zq7lM4rtSBicq/l92ky52BekrcuWuUPA9iufTpZ4jDbkSwJl4R1MAv
srfEU2kG18tSAV2niITW56ICubA9MX4FXZuCktTVRVQgc/qKuiDn3dluQz9PDsz+
ki3EC4mPaK3T4cZky3nwqIid9uZ7i7g=
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:32:02 2025 by rpki-client