This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File:                     OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier:          hUFArIwL7idPczQl1c6oPDj0qrgkurPnLOM9SHlHe5U=
Subject key identifier:   49:30:B1:2C:47:5E:51:26:CC:EA:05:B2:DC:99:11:11:75:73:AF:BF
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer:       /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial:       1AF0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number:          1AB7
Signing time:             Thu 18 Dec 2025 16:13:07 +0000
Manifest this update:     Thu 18 Dec 2025 16:13:06 +0000
Manifest next update:     Thu 25 Dec 2025 16:13:06 +0000
Files and hashes:         1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: 1OL98N/rf/GDuKU8P3/QCFBRg9AB2YYyGQ+4GMVaYwA=)
                          2: 6E44CE88597B11EDB603273AC4F9AE02.roa (hash: dKPGvO7USSf0Gvl/Kq6maRursYdlv2phLnH5EYaGXWM=)
                          3: 6C897E54597B11EDB603273AC4F9AE02.roa (hash: mlfmqDTHF8r4WiB66Nr0P3hrVzV24v6mqRzRLKrnHpE=)
                          4: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: 3KQPIvcXhoeigK5nYecGIeVlvEMUeYlMi6hOC8mFEdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
                          rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6896 (0x1af0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
        Validity
            Not Before: Dec 18 16:13:06 2025 GMT
            Not After : Dec 25 16:13:06 2025 GMT
        Subject: CN=69442813-120f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:03:4f:cc:f7:11:68:62:69:0a:a9:0a:51:
                    63:59:0c:d9:4b:98:df:4d:2b:61:ab:f4:79:7a:06:
                    de:cf:ca:ae:9b:d2:6f:c6:ce:89:7e:30:f4:fb:a2:
                    50:fe:fa:9d:22:bd:82:c3:2f:79:56:34:72:74:bd:
                    5d:1f:a8:66:35:33:4d:e6:07:a0:99:82:7d:49:86:
                    b1:e6:9d:fd:cc:97:a7:89:a4:4e:06:4d:52:33:35:
                    32:4f:a9:92:d7:8a:fd:03:b1:c7:51:89:85:99:3a:
                    10:b6:72:d8:68:56:18:bc:75:49:21:6e:b5:e9:8c:
                    35:54:cc:0e:f4:ec:12:83:13:ba:b6:d0:7e:6a:a3:
                    a8:89:8f:a8:90:94:21:24:01:3f:7c:ec:fd:09:c7:
                    39:21:3d:4a:eb:ed:02:73:18:c0:02:76:9f:cd:43:
                    73:b9:db:ba:2a:01:55:45:87:6f:af:79:25:38:be:
                    ee:10:9b:37:57:13:68:40:a0:ff:e6:27:cd:b0:cb:
                    c4:2c:42:7d:e0:b7:1e:c2:07:33:26:fd:1a:9c:0e:
                    2e:16:fc:63:1e:be:b2:16:c0:79:47:e4:05:ea:df:
                    f3:e0:0a:31:db:9f:15:de:ea:2e:a3:9d:80:60:19:
                    82:39:03:3a:8c:87:85:a3:ac:a1:b4:c6:e3:d6:da:
                    9a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:30:B1:2C:47:5E:51:26:CC:EA:05:B2:DC:99:11:11:75:73:AF:BF
            X509v3 Authority Key Identifier:
                keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0a:2f:ad:74:9f:65:82:bd:82:f6:b3:b0:2b:f6:a6:49:b3:
         b1:bd:8a:f1:6c:7a:57:f4:0f:c0:eb:0f:1f:eb:8b:fc:86:78:
         c7:90:2a:aa:c2:27:78:16:1d:98:ee:14:83:1e:8f:0f:d5:6b:
         1a:39:24:49:1d:4c:fd:97:48:2b:58:f5:95:6a:02:30:3f:44:
         3b:cb:d9:08:73:3c:57:4f:9c:c5:d8:c3:39:bf:f6:2b:8a:d4:
         c2:80:c1:1f:f6:1d:f2:d6:87:fb:69:78:90:80:66:f5:07:7e:
         08:08:92:5b:a8:f1:78:6b:e2:07:c6:49:6e:b3:28:ba:36:31:
         05:79:fc:90:83:ac:b0:92:7c:c2:8c:4b:5a:98:ce:41:45:4d:
         63:4e:2f:43:ab:39:86:d5:7f:59:e6:f2:a4:6e:fb:7e:21:b0:
         33:04:da:78:4a:02:02:63:b8:15:9d:26:9a:cc:a8:24:d6:27:
         95:2a:88:a0:aa:8c:51:50:4a:db:88:7b:73:e8:e5:a5:33:ec:
         7d:e8:a2:82:dd:bd:8b:19:b2:90:80:b0:3d:76:8e:2c:b7:9a:
         42:d6:e3:48:03:51:3f:9b:fa:8b:99:27:8f:02:71:81:a0:4f:
         2a:8d:3a:a3:bf:4c:f4:0d:56:53:2c:a4:69:93:46:6f:b9:01:
         26:9b:db:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUIwNzcxMTAvBgNVBAUTKDM4NkY2RjhBQTFFNjZDNTI1NEVBMUU0Nzg4OEMxMDNG
NDUzNjIyMkEwHhcNMjUxMjE4MTYxMzA2WhcNMjUxMjI1MTYxMzA2WjAYMRYwFAYD
VQQDDA02OTQ0MjgxMy0xMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1DADT8z3EWhiaQqpClFjWQzZS5jfTSthq/R5egbez8qum9Jvxs6JfjD0+6JQ
/vqdIr2Cwy95VjRydL1dH6hmNTNN5gegmYJ9SYax5p39zJeniaROBk1SMzUyT6mS
14r9A7HHUYmFmToQtnLYaFYYvHVJIW616Yw1VMwO9OwSgxO6ttB+aqOoiY+okJQh
JAE/fOz9Ccc5IT1K6+0CcxjAAnafzUNzudu6KgFVRYdvr3klOL7uEJs3VxNoQKD/
5ifNsMvELEJ94LcewgczJv0anA4uFvxjHr6yFsB5R+QF6t/z4Aox258V3uouo52A
YBmCOQM6jIeFo6yhtMbj1tqaowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkwsSxH
XlEmzOoFstyZERF1c6+/MB8GA1UdIwQYMBaAFDhvb4qh5mxSVOoeR4iMED9FNiIq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA3Ny9EQjdCNzAwNjQ4
MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJGSlU2aDVIaUl3UVAwVTJJ
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09HOXZpcUhtYkZKVTZoNUhpSXdRUDBVMklpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjA3Ny9EQjdCNzAwNjQ4MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJG
SlU2aDVIaUl3UVAwVTJJaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfCi+tdJ9lgr2C9rOwK/amSbOxvYrxbHpX9A/A6w8f64v8hnjHkCqq
wid4Fh2Y7hSDHo8P1WsaOSRJHUz9l0grWPWVagIwP0Q7y9kIczxXT5zF2MM5v/Yr
itTCgMEf9h3y1of7aXiQgGb1B34ICJJbqPF4a+IHxklusyi6NjEFefyQg6ywknzC
jEtamM5BRU1jTi9DqzmG1X9Z5vKkbvt+IbAzBNp4SgICY7gVnSaazKgk1ieVKoig
qoxRUErbiHtz6OWlM+x96KKC3b2LGbKQgLA9do4st5pC1uNIA1E/m/qLmSePAnGB
oE8qjTqjv0z0DVZTLKRpk0ZvuQEmm9sP
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:43:51 2025 by rpki-client