This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
File:                     bMOGDamHeDpQBVpRk5gw980cgms.mft (raw, json)
Hash identifier:          emgu2evDpwJluTd94WiOu1Dw+R4ND2DprVjqDKINaXQ=
Subject key identifier:   71:F5:0D:FC:04:72:C6:32:D0:3A:96:15:DF:61:E5:66:61:0C:36:5A
Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B
Certificate issuer:       /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
Certificate serial:       0595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
Manifest number:          058B
Signing time:             Fri 26 Dec 2025 22:26:36 +0000
Manifest this update:     Fri 26 Dec 2025 22:26:35 +0000
Manifest next update:     Fri 02 Jan 2026 22:26:35 +0000
Files and hashes:         1: bMOGDamHeDpQBVpRk5gw980cgms.crl (hash: opzwU8UgIrWQmLMikuT8iv6XIYQ9GODCNGJLDg8klyQ=)
                          2: A6C3D8721A9711EC88A50A2CC4F9AE02.roa (hash: 1vf9P/QtdrpBSKw8qqd8SeCC6jjDqgo10TfCx7FVFT8=)
                          3: 4D336D62B53F11F09557A379C4F9AE02.roa (hash: vE9V/Y5qS78Xgv5y/9F43RWt3eLux4Isa2PTEon+j2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl
                          rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 22:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
        Validity
            Not Before: Dec 26 22:26:35 2025 GMT
            Not After : Jan  2 22:26:35 2026 GMT
        Subject: CN=694f0b9c-5cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:7e:72:9c:7a:03:91:b0:bb:91:29:56:94:
                    dc:78:f3:b0:bc:01:55:3f:ac:3f:9a:02:07:7f:54:
                    9f:98:7b:4b:a6:94:46:78:6e:28:7a:c5:b9:6f:2e:
                    85:45:a3:18:8c:46:a0:92:65:16:83:a9:cb:3b:7d:
                    e6:42:10:e4:19:22:fa:71:ca:62:26:fa:0d:b0:22:
                    1b:b5:c2:e2:90:15:c0:41:8f:89:a8:70:38:eb:19:
                    fa:af:92:b7:7e:f0:c5:21:b7:ce:d3:cd:96:4b:94:
                    e6:c3:cb:25:88:e3:5e:4b:76:04:6d:b4:df:86:a2:
                    26:92:17:50:52:da:03:36:26:23:43:bc:f2:75:cd:
                    ba:97:7a:ba:92:5d:f8:eb:32:3d:11:34:a8:cc:b5:
                    40:0e:51:aa:28:20:01:68:73:4c:49:34:39:47:db:
                    13:ea:32:71:56:b4:59:71:ac:a8:5a:24:15:49:73:
                    46:da:8c:c8:f3:38:d4:24:76:45:27:bd:1a:62:be:
                    4c:2a:59:d2:7f:bf:3d:8d:c7:e2:97:f4:83:58:14:
                    d1:a7:fe:4b:54:f7:11:56:5b:6d:30:0e:8a:2a:6f:
                    8f:88:2a:f6:9c:c0:2d:c7:1e:15:ce:d0:c8:3e:48:
                    a4:c5:85:e4:7a:3d:39:dc:52:6a:0b:06:66:ed:ea:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F5:0D:FC:04:72:C6:32:D0:3A:96:15:DF:61:E5:66:61:0C:36:5A
            X509v3 Authority Key Identifier:
                keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:f7:4f:d6:00:7b:cc:c3:aa:66:1b:3e:0b:5b:5b:7d:1a:
         0c:1a:5e:3c:0e:8f:5c:22:c5:fa:6e:3d:f7:79:7b:32:1c:4e:
         37:fa:28:40:b7:45:4d:42:0f:2f:4a:a8:13:94:f1:20:81:01:
         43:3d:a6:6b:b7:7a:4e:dc:26:d4:46:56:ea:6d:4a:32:0d:a8:
         63:c6:84:92:2d:f6:18:b8:57:67:df:66:21:ba:dd:f7:46:da:
         76:63:84:fb:85:3d:b0:96:46:df:0c:bf:42:f7:1e:1d:5c:21:
         37:e2:ed:7c:26:71:7c:66:b8:f5:f9:53:8a:53:62:b0:6a:77:
         45:04:97:b7:91:ea:5d:88:6b:f6:5c:2b:c2:9d:6e:f7:26:05:
         68:2b:1b:d8:62:93:27:7b:c4:ac:72:6d:b0:3c:ef:be:8a:84:
         44:7b:a9:ce:00:89:a7:d1:ab:07:f6:65:c7:3e:2f:43:cc:8c:
         e7:28:f9:63:b7:33:77:d9:4d:b5:0a:6d:9d:0d:06:93:ca:01:
         a9:0b:e4:fc:29:29:a4:f4:30:bc:02:10:bf:d5:98:96:a0:e9:
         99:f7:0a:98:30:79:6c:77:a8:3a:f5:e8:46:40:b4:a0:90:24:
         e7:0b:59:93:2a:29:b7:4c:bb:35:f1:5d:b8:14:b2:f3:a1:da:
         0f:21:f0:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE2MjMxMTAvBgNVBAUTKDZDQzM4NjBEQTk4Nzc4M0E1MDA1NUE1MTkzOTgzMEY3
Q0QxQzgyNkIwHhcNMjUxMjI2MjIyNjM1WhcNMjYwMTAyMjIyNjM1WjAYMRYwFAYD
VQQDDA02OTRmMGI5Yy01Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnrZ+cpx6A5Gwu5EpVpTcePOwvAFVP6w/mgIHf1SfmHtLppRGeG4oesW5by6F
RaMYjEagkmUWg6nLO33mQhDkGSL6ccpiJvoNsCIbtcLikBXAQY+JqHA46xn6r5K3
fvDFIbfO082WS5Tmw8sliONeS3YEbbTfhqImkhdQUtoDNiYjQ7zydc26l3q6kl34
6zI9ETSozLVADlGqKCABaHNMSTQ5R9sT6jJxVrRZcayoWiQVSXNG2ozI8zjUJHZF
J70aYr5MKlnSf789jcfil/SDWBTRp/5LVPcRVlttMA6KKm+PiCr2nMAtxx4VztDI
PkikxYXkej053FJqCwZm7eq9gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHH1DfwE
csYy0DqWFd9h5WZhDDZaMB8GA1UdIwQYMBaAFGzDhg2ph3g6UAVaUZOYMPfNHIJr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9ERDZCNzUyODA2
MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVEcFFCVnBSazVndzk4MGNn
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JNT0dEYW1IZURwUUJWcFJrNWd3OTgwY2dtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTYyMy9ERDZCNzUyODA2MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVE
cFFCVnBSazVndzk4MGNnbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATj/dP1gB7zMOqZhs+C1tbfRoMGl48Do9cIsX6bj33eXsyHE43+ihA
t0VNQg8vSqgTlPEggQFDPaZrt3pO3CbURlbqbUoyDahjxoSSLfYYuFdn32Yhut33
Rtp2Y4T7hT2wlkbfDL9C9x4dXCE34u18JnF8Zrj1+VOKU2KwandFBJe3kepdiGv2
XCvCnW73JgVoKxvYYpMne8Sscm2wPO++ioREe6nOAImn0asH9mXHPi9DzIznKPlj
tzN32U21Cm2dDQaTygGpC+T8KSmk9DC8AhC/1ZiWoOmZ9wqYMHlsd6g69ehGQLSg
kCTnC1mTKim3TLs18V24FLLzodoPIfCO
-----END CERTIFICATE-----
Generated at Sat Dec 27 02:15:29 2025 by rpki-client