This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
File:                     0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json)
Hash identifier:          UEUPBgYft5PtOgGosGCVGUEIDs1mqlR/SgZ4WJcotwg=
Subject key identifier:   50:B9:11:86:4C:5B:22:F3:F1:F0:35:98:11:E9:AA:B4:DF:70:37:BC
Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82
Certificate issuer:       /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482
Certificate serial:       0EBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
Manifest number:          0EB6
Signing time:             Wed 24 Dec 2025 17:22:05 +0000
Manifest this update:     Wed 24 Dec 2025 17:22:05 +0000
Manifest next update:     Wed 31 Dec 2025 17:22:05 +0000
Files and hashes:         1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: ld0CK9y+UAKi0QG8ZAKW2VxQ8fcdq1SyyCHMnCnbGxo=)
                          2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl
                          rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3773 (0xebd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482
        Validity
            Not Before: Dec 24 17:22:05 2025 GMT
            Not After : Dec 31 17:22:05 2025 GMT
        Subject: CN=694c213d-77b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6c:b5:b2:23:86:80:41:3f:d3:4d:91:08:3e:
                    44:24:56:8b:0c:90:79:29:1d:45:0a:35:0b:c9:59:
                    f0:c8:57:9e:a1:bb:9e:40:97:97:82:0b:d2:43:13:
                    71:f0:36:36:db:e5:0d:8b:c8:ec:9f:2a:15:9e:c4:
                    18:5a:72:8a:6b:3c:49:47:64:25:27:ac:45:ca:d4:
                    8c:8e:9b:4b:ae:5a:2e:c3:f6:33:2a:60:a9:3f:cf:
                    55:a7:bf:3d:51:80:85:dd:aa:3b:8a:f8:de:60:ca:
                    37:7d:62:b3:56:15:eb:41:b4:88:ed:4f:b4:7d:72:
                    d1:b6:24:d3:02:64:a8:fd:36:8b:d2:b4:5e:04:28:
                    3c:74:8e:6b:ac:ce:b1:21:03:ff:a2:2f:1d:bb:ac:
                    02:d3:10:e3:94:b6:08:83:d1:c5:4d:6e:e9:b4:17:
                    c7:1d:1d:61:6d:93:67:3e:5b:09:f5:32:3f:e8:ec:
                    af:04:fe:8d:0d:92:8c:45:53:4c:38:cc:49:1d:68:
                    36:75:a7:55:d9:c8:ea:00:82:2c:14:af:30:a6:35:
                    21:20:ae:f9:2f:df:07:95:6a:87:5c:5b:07:fb:3d:
                    bd:11:79:0a:39:cf:9b:19:55:98:34:da:5d:58:b2:
                    15:19:82:bc:df:1b:2d:b5:59:f2:3f:49:b4:38:35:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B9:11:86:4C:5B:22:F3:F1:F0:35:98:11:E9:AA:B4:DF:70:37:BC
            X509v3 Authority Key Identifier:
                keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:45:99:9f:3a:c9:fc:e7:9c:d8:56:de:53:79:d5:78:4d:b2:
         1e:21:00:3f:f5:09:fb:12:27:c4:ac:f1:b9:dd:28:7c:cc:19:
         cd:03:23:ec:cc:dd:cc:8d:16:92:d8:1e:f7:4f:58:40:c4:a9:
         de:4a:8d:05:dc:8e:37:11:90:28:25:be:8d:e9:03:7a:d1:65:
         3a:a7:38:77:c2:2d:8c:20:ee:e0:91:58:e7:83:65:7a:47:f3:
         d4:c7:65:31:b3:65:9c:27:d7:35:9c:08:a6:d8:25:69:76:ff:
         25:89:32:a9:d3:c3:ae:1f:61:6b:74:7c:19:b3:2a:fc:62:93:
         55:e4:07:ba:96:22:66:b4:50:43:cf:0d:cf:d5:01:46:f6:b4:
         6b:b7:dd:b9:06:ac:05:cd:64:98:45:af:27:62:b8:8c:46:29:
         71:25:95:5f:a0:99:74:de:a3:10:43:4f:fe:7c:35:ab:e1:3c:
         e3:70:a6:ce:bf:ba:12:9a:4e:5d:7a:72:7c:b8:b5:4f:e8:cd:
         f2:6a:b4:87:0f:af:1e:d0:a7:bc:61:de:13:c5:5a:c1:78:c7:
         70:13:70:35:2d:e9:6b:f7:d1:3f:0f:64:6a:6b:30:ff:a7:17:
         f0:85:a2:6a:62:cd:07:aa:66:ba:93:37:f5:e3:eb:be:8e:bc:
         e1:a0:c0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:36:42 2025 by rpki-client