This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
File:                     UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft (raw, json)
Hash identifier:          hZOOfZp5+sl4G9qPTEa999YO9NffK8bNCPAv1sQuVoE=
Subject key identifier:   53:74:19:F3:13:F2:8C:80:9C:77:5F:E4:3D:59:E9:47:D4:8D:C5:A6
Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Certificate issuer:       /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
Manifest number:          012D
Signing time:             Fri 19 Dec 2025 03:44:44 +0000
Manifest this update:     Fri 19 Dec 2025 03:44:43 +0000
Manifest next update:     Fri 26 Dec 2025 03:44:43 +0000
Files and hashes:         1: UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl (hash: 8VoaLiHnomjjSaDtqa3LBpI/axlNDimY/rtw953OJVQ=)
                          2: 18141426114211EFA0FF3956C4F9AE02.roa (hash: Eui373BUJyp7nsyCOnfLERZIVy0mxRMvMhZrx/SFoPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1630, serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
        Validity
            Not Before: Dec 19 03:44:43 2025 GMT
            Not After : Dec 26 03:44:43 2025 GMT
        Subject: CN=6944ca2c-8e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:22:3d:18:9e:50:5e:9a:da:54:e5:38:a5:
                    41:ec:f4:24:f1:73:c0:8e:e9:f2:cd:51:51:c5:09:
                    87:ac:41:c0:72:f6:ee:7c:d9:e7:a9:95:e8:66:e6:
                    f3:72:28:ef:5d:28:7c:04:73:df:d0:b5:4c:10:94:
                    55:65:ea:8e:31:67:ac:33:9a:de:b5:f2:0f:9b:92:
                    71:7b:5d:ab:88:91:8f:4a:d8:9c:fe:57:a5:a2:31:
                    26:39:3b:ad:a2:cc:a8:76:b9:61:a8:8a:f8:b0:42:
                    d7:10:de:7e:44:57:41:dd:3e:f1:09:7f:ae:72:57:
                    fe:4f:99:ae:02:9b:d5:c0:4e:ca:86:7e:71:17:21:
                    09:9d:37:99:1e:0a:85:3d:34:4e:74:8f:ca:52:52:
                    9d:e5:7a:4e:2f:44:0b:52:5c:b4:09:1a:27:2c:25:
                    76:01:59:f2:71:29:95:eb:eb:d6:ca:5b:2e:e4:f6:
                    77:7f:65:98:51:5d:9a:93:44:bf:85:89:11:be:69:
                    67:b9:b7:fe:7a:46:4f:e0:b1:53:7c:06:1a:d2:aa:
                    f2:7b:db:49:6f:f8:10:4c:fa:eb:06:39:c4:e2:8c:
                    ad:28:23:95:db:77:06:65:83:89:4e:42:56:9d:6d:
                    65:10:37:8f:cb:13:2b:3f:7f:9f:50:07:59:ae:53:
                    5f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:74:19:F3:13:F2:8C:80:9C:77:5F:E4:3D:59:E9:47:D4:8D:C5:A6
            X509v3 Authority Key Identifier:
                keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4c:70:d2:a3:31:ca:7c:45:ec:bb:4a:86:f8:7c:e7:4b:46:
         92:d6:57:54:d8:56:f8:f2:80:02:0d:a9:85:50:e5:48:0f:de:
         76:6f:e2:a6:08:ed:49:c7:e1:09:e2:04:6d:ba:64:9b:60:6f:
         07:b0:ab:67:98:09:03:05:93:ba:0c:6a:37:64:dc:8f:f3:e8:
         6e:97:09:a1:37:81:32:84:20:e8:53:f2:17:df:32:74:b4:bc:
         4c:97:59:10:a4:72:4d:e6:63:d5:d7:2a:f3:39:bd:d9:85:3c:
         53:ec:7c:fe:49:e6:b2:89:92:ff:b8:be:de:b5:d8:d6:83:61:
         3d:24:97:83:23:13:99:6e:b9:e2:61:ff:c7:6d:87:b5:ab:bf:
         f3:b9:a9:ac:9e:7b:69:22:12:40:24:d7:45:d7:f7:8a:66:e9:
         c4:cd:48:32:b4:e7:fe:87:bf:09:e9:98:ee:69:c9:dc:8f:5c:
         28:4a:45:a9:10:2e:97:99:78:ad:96:ee:64:75:63:56:6d:69:
         f3:1d:43:67:9d:af:1c:6b:91:7d:54:4b:e3:83:6b:0e:0d:d5:
         30:ca:1e:b1:24:43:d7:fd:0e:7d:97:91:21:bf:1a:10:b1:2c:
         38:5e:85:5b:71:ee:98:db:e3:a6:17:f8:2e:a6:65:aa:09:88:
         7c:f5:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:02:59 2025 by rpki-client