This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File:                     o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier:          3ESvin2raNKKNLmj6C6qKsiDgfHXlHSbj21G+LmphbQ=
Subject key identifier:   C4:25:FF:D2:A6:C5:AE:41:3C:49:EA:42:15:20:FA:20:33:96:4E:E6
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer:       /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial:       03A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number:          0399
Signing time:             Sun 28 Dec 2025 23:51:41 +0000
Manifest this update:     Sun 28 Dec 2025 23:51:41 +0000
Manifest next update:     Sun 04 Jan 2026 23:51:41 +0000
Files and hashes:         1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: +WrRy2yMY1lAPlEJCwJnsnNS0xocefUNalAcb28Ao1Q=)
                          2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: DhDV/fmV49KF53LCzY2iPFhFE+P1oeX1k0nYiQfDFpM=)
                          3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: xTkFFGEwoSM0XslM057b0r3pWef291E2LlOQWfzYUXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 23:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928 (0x3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
        Validity
            Not Before: Dec 28 23:51:41 2025 GMT
            Not After : Jan  4 23:51:41 2026 GMT
        Subject: CN=6951c28d-abde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:8c:7e:3c:c9:ee:19:02:55:d5:31:42:24:
                    92:8d:c3:1a:6d:31:e8:6a:60:c2:28:84:b8:19:d8:
                    04:92:25:69:c9:54:0e:9c:89:ab:41:c1:22:22:45:
                    69:a4:21:68:1f:9f:97:16:d7:0d:b9:41:76:cb:fc:
                    94:d0:db:da:7f:1d:d5:02:4b:19:94:a4:60:67:81:
                    5e:7a:63:c2:c2:f5:ef:82:09:10:7f:83:a6:62:7a:
                    00:df:d9:e0:e7:2d:9e:c6:39:03:6c:03:e0:06:91:
                    41:85:af:16:4b:f7:11:02:7a:9c:7f:a5:59:06:fb:
                    23:49:eb:18:5d:06:54:c7:0e:1d:3b:70:2a:e5:46:
                    d0:5a:5e:9b:76:98:35:49:24:45:db:36:4d:f2:b4:
                    0f:d7:8f:0b:99:2f:f5:22:62:a2:5d:53:a2:dc:17:
                    e9:ff:73:e6:04:d7:9c:ee:e3:73:8a:18:77:0f:c4:
                    d4:0c:e0:b5:45:98:28:12:cd:b8:5b:75:45:c2:80:
                    f1:f7:13:f5:05:49:b1:96:89:6a:d0:a0:c4:0e:e0:
                    58:20:7e:e8:aa:db:a3:fc:c7:52:0c:88:92:f1:0e:
                    7d:27:07:8e:7b:b9:4c:9c:5e:db:e7:cc:ff:6b:52:
                    31:ba:a8:ce:79:2f:09:37:3e:94:0a:1f:fb:49:8d:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:25:FF:D2:A6:C5:AE:41:3C:49:EA:42:15:20:FA:20:33:96:4E:E6
            X509v3 Authority Key Identifier:
                keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:db:0a:39:4c:5c:6a:f0:a7:b8:d6:a8:31:17:3c:d4:e6:7d:
         0c:c5:36:41:cd:6a:5d:50:6c:f8:99:b4:87:8e:06:18:0e:80:
         34:6c:55:e3:26:fb:db:c1:d8:3b:bc:06:db:56:a2:64:6d:6b:
         7b:75:06:e2:01:98:4d:24:fb:ee:05:2d:94:f1:84:dd:22:6c:
         89:76:1b:20:7f:4c:ca:21:7b:7c:67:a3:f8:0a:82:54:97:22:
         7a:e9:18:9d:f1:3c:37:d8:f6:5e:33:8d:c4:e3:e2:30:ec:35:
         18:2c:8d:90:a6:fa:8d:85:84:9c:94:cc:00:26:83:d3:60:a9:
         18:81:c8:38:02:05:25:64:a8:95:27:bb:3a:f7:11:fd:b0:78:
         a3:d7:dc:28:fb:2c:5b:1a:0a:fc:06:8a:1e:02:17:5b:0c:4e:
         16:0b:45:cc:49:41:6a:fe:22:20:39:5f:8b:73:d8:a1:ee:d2:
         b3:6d:c8:21:74:c2:f5:88:69:50:a9:cb:bc:d0:07:56:8f:1c:
         4b:37:a7:53:51:7a:fc:f9:3a:97:cf:36:16:06:7b:31:74:81:
         26:07:63:3d:bf:7d:54:9d:65:eb:fc:77:f1:d1:cc:d4:38:94:
         9e:99:f9:10:87:48:7f:10:7d:b3:e2:bf:9a:a3:63:1f:0c:5b:
         ae:fc:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 08:50:20 2025 by rpki-client