This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
File:                     oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json)
Hash identifier:          2MAbGF8bCygCcZo6RM/PZO4DGt5hsDMkx3jlxI1PmjQ=
Subject key identifier:   E1:1D:DB:29:1A:30:95:DD:4C:C3:A0:31:F6:F8:62:16:CC:0E:4C:67
Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
Certificate issuer:       /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
Manifest number:          017E
Signing time:             Fri 19 Dec 2025 02:52:27 +0000
Manifest this update:     Fri 19 Dec 2025 02:52:26 +0000
Manifest next update:     Fri 26 Dec 2025 02:52:26 +0000
Files and hashes:         1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: Q/OK/5WOnwZT06aR6OCTwFvkuidrm/KOO/3c8+8Cxrk=)
                          2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: 2n+kYuaKH+b63s11qTM8MFxtWRsl5POY9pDyQ9VblQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE620, serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
        Validity
            Not Before: Dec 19 02:52:26 2025 GMT
            Not After : Dec 26 02:52:26 2025 GMT
        Subject: CN=6944bdeb-3476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:b9:a7:bc:be:68:0b:b3:e1:88:91:e8:8e:
                    84:28:a3:14:e8:92:85:20:c7:37:5f:6d:a0:10:b7:
                    78:c9:80:12:56:4b:4e:3b:23:35:e0:96:f7:34:9e:
                    ee:a6:e3:81:14:0b:c6:5f:b5:6d:c5:d6:e5:5a:b7:
                    7d:10:80:21:7e:5d:8a:c8:2d:dd:2c:4b:ab:17:e0:
                    ea:f1:6f:11:29:0e:d1:9a:d5:7c:64:48:d1:9b:0a:
                    58:2a:8d:69:17:8a:c8:66:61:f1:66:97:f4:3f:3d:
                    d7:68:3e:fa:97:42:4f:35:dd:a0:8e:c4:21:a9:25:
                    af:88:aa:57:fd:6f:94:1b:ac:6e:78:4b:96:b7:27:
                    a4:25:a1:b3:10:eb:14:dd:8e:a3:d3:82:77:dd:5a:
                    ec:9e:07:26:c5:2d:32:f7:1d:21:d6:0e:52:82:25:
                    60:58:f0:02:1c:d6:f3:c7:a1:7f:af:fb:e8:9a:7b:
                    98:cb:3c:c1:20:2a:4b:2f:b9:a7:bc:0a:e5:f2:5d:
                    cd:e8:ac:c9:e9:0b:8a:b4:2c:4a:1e:44:27:f8:04:
                    cf:d0:2d:49:1d:be:e6:13:e3:04:98:c7:3b:43:64:
                    48:cd:c2:2d:38:2b:6b:d9:21:f1:01:52:ea:e6:99:
                    7a:f5:04:51:aa:db:e4:c2:56:d1:17:31:8c:5c:b8:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1D:DB:29:1A:30:95:DD:4C:C3:A0:31:F6:F8:62:16:CC:0E:4C:67
            X509v3 Authority Key Identifier:
                keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:77:d4:31:13:f4:01:d5:e7:84:eb:8f:bb:2b:8f:3c:7b:
         1e:71:69:f1:50:48:74:ba:d6:7c:f0:63:e0:2f:01:b5:30:2d:
         ce:1a:c6:51:d1:0e:ad:9f:6e:4b:e8:f2:4a:80:56:66:f1:8a:
         11:05:39:d0:ff:34:0e:22:96:d6:f3:1f:6f:fa:3a:f3:56:9c:
         42:01:f2:03:27:02:1d:d6:af:8f:dd:0b:19:55:2e:dc:70:a7:
         1c:59:15:28:16:5f:a2:e9:bc:f7:1c:9a:5e:05:51:0d:e1:ae:
         1c:a3:64:72:30:84:c4:ba:4e:5f:ff:e8:7e:de:fc:cc:5c:33:
         09:fd:84:0a:e1:25:4d:09:94:9f:81:dd:fb:d0:7d:cc:c2:4a:
         c8:41:9f:75:a2:fd:d3:0f:d1:37:0c:f1:59:74:86:68:98:e3:
         38:61:e5:33:a0:7c:0f:9b:ec:ce:09:d0:d9:bd:bd:e7:ec:2e:
         8c:d9:75:11:20:1b:3a:26:af:ae:ce:96:71:d1:07:96:01:b8:
         03:28:e2:ed:b0:5e:20:4d:91:23:97:b4:cc:9c:03:a7:c0:2a:
         d0:de:2e:33:e3:46:44:57:fc:e9:9d:36:5c:9e:96:65:e0:15:
         d3:8b:41:8b:15:a3:ed:04:2b:06:4e:85:e4:fc:c0:fc:71:23:
         54:a7:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:24:09 2025 by rpki-client