This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
File:                     MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json)
Hash identifier:          0zaBJ4MA1ECiYEb/ntSDVWaeOburKVsuZGssaX0Wkvo=
Subject key identifier:   72:76:79:56:A1:C4:18:07:FB:44:4E:26:C0:EF:5C:EA:A1:E3:12:83
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Certificate issuer:       /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial:       03E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
Manifest number:          03B2
Signing time:             Fri 19 Dec 2025 00:05:17 +0000
Manifest this update:     Fri 19 Dec 2025 00:05:17 +0000
Manifest next update:     Fri 26 Dec 2025 00:05:17 +0000
Files and hashes:         1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: vfy31iB1R/6HZpBI05IeG7yA4iopuUQDL0mBz90Ru54=)
                          2: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: Qa66QzBziJdm9L3gqGzaylVuTVRVatV8AuZ/B+L6zpk=)
                          3: 96A539C2278211EF902D8D85C4F9AE02.roa (hash: rYHOV+63ySve2lLbeG71M0SUbKfF20oOi9uas6YcF+A=)
                          4: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: 83Wv2JxvwigdbCeSHljXaATCprN0duFOpBL+VJFLFxQ=)
                          5: 80F23C7E1BC011EFB7916B7DC4F9AE02.roa (hash: uCCq9Jdh0+tPxus1xQJGSoE4R/e4MPlh9WCF8V7YB1Q=)
                          6: 9B8A0A56F56F11EF84317935C4F9AE02.roa (hash: hUEi5Mxm1d2fdxW2k3TL0lrkSD9s1MOK7bqcVMZxr0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
        Validity
            Not Before: Dec 19 00:05:17 2025 GMT
            Not After : Dec 26 00:05:17 2025 GMT
        Subject: CN=694496bd-7cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:85:b6:c2:ad:01:ec:eb:96:98:19:ee:2e:
                    ec:b4:be:27:fb:7b:6b:e7:96:29:f7:56:bb:4b:e0:
                    05:50:60:8d:74:22:09:f6:7d:59:f5:29:e9:27:70:
                    07:0d:eb:fb:55:32:ef:da:0f:37:5f:48:e0:33:3d:
                    45:c1:fa:35:62:0c:90:d8:99:e3:bc:5e:ea:4a:3a:
                    e4:e3:d4:b1:d2:b9:0b:db:74:28:6f:d2:09:d6:be:
                    97:10:b4:26:49:ba:39:d4:d0:5c:d8:f0:e8:89:35:
                    6a:5c:f7:4c:1e:fb:cc:31:0c:86:21:3a:a2:5d:b6:
                    15:9e:d2:29:7f:cc:3d:fd:8d:ef:fc:a9:07:32:09:
                    4f:ea:aa:f2:dc:09:ce:85:81:14:3b:0d:de:40:2a:
                    24:29:bb:e9:57:7e:bd:e9:66:c8:c1:b2:d9:5a:42:
                    85:52:9f:7a:ba:fb:4b:11:b5:a0:53:54:2a:31:74:
                    4e:8a:4c:67:4e:20:34:c5:4e:16:a4:07:54:4f:8b:
                    2b:73:8d:fa:8b:f1:ac:49:0c:81:3f:8c:7b:2e:26:
                    ec:00:62:10:0b:95:f0:d4:f2:ed:85:db:fc:7c:fe:
                    df:10:a8:34:5a:e2:2e:0c:57:91:2a:3d:c3:f2:e2:
                    5b:b1:db:cb:79:a0:7d:5d:e0:50:80:47:72:f2:83:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:76:79:56:A1:C4:18:07:FB:44:4E:26:C0:EF:5C:EA:A1:E3:12:83
            X509v3 Authority Key Identifier:
                keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d3:16:17:50:74:d5:c1:5b:a9:14:73:bd:94:1c:90:ab:d0:
         bc:2d:3c:77:9f:a8:c2:64:41:b2:ac:0d:52:00:b2:43:79:ad:
         dd:62:e7:56:2d:5a:8f:0f:fe:39:01:90:2c:4e:09:c9:d3:21:
         c2:b9:6e:0e:a4:2f:38:49:fd:88:32:38:2c:d8:10:5c:2e:a0:
         90:3c:e6:34:aa:8c:3f:aa:32:2a:d7:21:39:ee:02:24:e8:8c:
         b1:35:6c:15:57:4e:3c:c4:6a:32:99:ad:d4:d1:80:31:8d:91:
         bc:5b:48:24:c5:85:49:92:24:e2:4f:10:da:34:16:a3:de:9c:
         13:10:a1:29:24:21:6b:91:a8:f8:bc:2a:3b:8b:b9:70:78:b8:
         04:3d:d9:b2:fa:7b:99:d8:fa:24:9b:a6:22:b2:9c:8c:df:b7:
         c1:b6:4e:80:e8:b6:16:81:d9:d0:87:31:7a:4d:31:a2:e0:77:
         a3:2c:fd:8a:64:bb:aa:a7:84:7e:ad:89:60:76:c4:20:cb:a0:
         70:37:fe:58:58:62:a7:7f:31:36:42:96:bd:41:c5:c1:dc:2b:
         3f:8e:00:f4:a3:7d:a3:fd:5a:01:8f:2f:75:3f:98:ca:8c:54:
         2b:d0:ca:a0:ca:1c:0e:cc:4c:ce:39:04:58:d2:6a:27:f7:60:
         ac:3d:66:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMyNjkxMTAvBgNVBAUTKDMwRTIwNjFGN0MyMEJEODQzQkVFNTM3MkMxMzIxQzM1
RkJCMUQzRUYwHhcNMjUxMjE5MDAwNTE3WhcNMjUxMjI2MDAwNTE3WjAYMRYwFAYD
VQQDDA02OTQ0OTZiZC03Y2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA062FtsKtAezrlpgZ7i7stL4n+3tr55Yp91a7S+AFUGCNdCIJ9n1Z9SnpJ3AH
Dev7VTLv2g83X0jgMz1Fwfo1YgyQ2JnjvF7qSjrk49Sx0rkL23Qob9IJ1r6XELQm
Sbo51NBc2PDoiTVqXPdMHvvMMQyGITqiXbYVntIpf8w9/Y3v/KkHMglP6qry3AnO
hYEUOw3eQCokKbvpV3696WbIwbLZWkKFUp96uvtLEbWgU1QqMXROikxnTiA0xU4W
pAdUT4src436i/GsSQyBP4x7LibsAGIQC5Xw1PLthdv8fP7fEKg0WuIuDFeRKj3D
8uJbsdvLeaB9XeBQgEdy8oP7DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJ2eVah
xBgH+0ROJsDvXOqh4xKDMB8GA1UdIwQYMBaAFDDiBh98IL2EO+5TcsEyHDX7sdPv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CQTY3NkUzMENG
RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZUTc3bE55d1RJY05mdXgw
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PSUdIM3dndllRNzdsTnl3VEljTmZ1eDAtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzI2OS9CQTY3NkUzMENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZ
UTc3bE55d1RJY05mdXgwLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC60xYXUHTVwVupFHO9lByQq9C8LTx3n6jCZEGyrA1SALJDea3dYudW
LVqPD/45AZAsTgnJ0yHCuW4OpC84Sf2IMjgs2BBcLqCQPOY0qow/qjIq1yE57gIk
6IyxNWwVV048xGoyma3U0YAxjZG8W0gkxYVJkiTiTxDaNBaj3pwTEKEpJCFrkaj4
vCo7i7lweLgEPdmy+nuZ2Pokm6YispyM37fBtk6A6LYWgdnQhzF6TTGi4HejLP2K
ZLuqp4R+rYlgdsQgy6BwN/5YWGKnfzE2Qpa9QcXB3Cs/jgD0o32j/VoBjy91P5jK
jFQr0MqgyhwOzEzOOQRY0mon92CsPWbF
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:04 2025 by rpki-client