This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
File:                     AuOHDsPGHid3cW1wGLNMszV6AsQ.mft (raw, json)
Hash identifier:          E4FJb9NHmCTgWZceOHnoFAA90XGi2MBVtVtC5A1aKaI=
Subject key identifier:   B4:05:C7:5C:E4:B5:32:1F:64:58:BC:75:B9:98:90:02:39:BF:F6:5E
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Certificate issuer:       /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial:       06E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
Manifest number:          06CB
Signing time:             Sun 28 Dec 2025 21:29:37 +0000
Manifest this update:     Sun 28 Dec 2025 21:29:37 +0000
Manifest next update:     Sun 04 Jan 2026 21:29:37 +0000
Files and hashes:         1: AuOHDsPGHid3cW1wGLNMszV6AsQ.crl (hash: XVyBhvax2QaSQ7QxcrLk+3VqZota9eU/QrGQTFScCz4=)
                          2: 78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa (hash: abKS8DFxopy0SkfBdSlbneXvrNcWYhB7U9fJI/TJdHw=)
                          3: 79B5BD3A6AC011ED9C15EE6BC4F9AE02.roa (hash: OtQTBoAM9EmxMwAes+EtOCVgR6i+GiXjgoJuhPDzA28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 21:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763 (0x6e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5B0D, serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
        Validity
            Not Before: Dec 28 21:29:37 2025 GMT
            Not After : Jan  4 21:29:37 2026 GMT
        Subject: CN=6951a141-031b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:4c:8d:a2:32:74:10:6c:f6:6c:cc:ee:f1:
                    5a:52:ab:ca:f7:24:a0:82:50:66:7a:2d:09:e2:3d:
                    a7:c0:5e:ff:ad:95:73:fa:42:9d:1f:15:27:ad:b8:
                    aa:31:30:08:54:7c:2b:04:c6:36:74:2a:0a:17:56:
                    2b:63:d7:aa:6f:a8:11:70:8f:2f:4a:5b:35:6d:09:
                    c9:27:86:aa:ba:f8:7c:32:ed:b9:66:d0:9c:3d:4f:
                    f9:e6:81:35:b4:34:e0:c4:cb:ae:f8:66:9c:f9:ce:
                    9d:aa:8e:48:c6:43:bd:fe:13:eb:78:0f:87:db:b8:
                    69:25:65:3b:33:7c:b3:50:b1:86:b2:a8:fd:64:98:
                    b8:2b:4a:27:97:cd:40:05:cc:24:29:53:78:39:2c:
                    13:ec:f6:44:ea:f0:32:d0:fe:08:de:12:a8:ab:9f:
                    6e:4d:35:de:73:86:db:46:69:8e:2c:e2:43:6f:bb:
                    2e:2d:5f:9e:f1:55:f5:4c:31:c6:65:69:67:5a:64:
                    7f:09:43:e1:8d:71:6c:8f:e6:39:2a:12:3b:21:da:
                    ad:9e:ce:7e:a6:69:5c:ea:a1:08:6f:ab:dc:c7:ae:
                    e5:89:ec:37:b5:9a:4f:d9:2f:89:20:eb:d9:42:58:
                    32:77:dc:7d:38:c0:d7:48:45:16:b4:bc:27:72:81:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:05:C7:5C:E4:B5:32:1F:64:58:BC:75:B9:98:90:02:39:BF:F6:5E
            X509v3 Authority Key Identifier:
                keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:55:9c:77:10:b6:d6:b5:db:77:3e:69:e6:56:be:56:41:
         f4:c4:ec:43:4a:c0:69:b9:5f:6d:f4:e6:e2:aa:43:2a:b5:f4:
         07:94:b1:43:80:6b:7e:d7:9e:16:58:ff:34:8e:de:dc:01:c7:
         a9:5f:b0:06:0a:bc:43:16:20:e3:5e:08:12:7d:33:06:97:b7:
         c3:82:18:02:b3:59:44:b5:a2:e2:a3:cc:1f:67:45:48:e3:a3:
         6e:26:35:e9:86:62:a3:b2:e8:ff:a6:c9:6d:37:62:2e:13:15:
         8b:ee:6f:85:86:e8:b9:e3:f6:bd:f6:19:da:f5:93:b0:87:ee:
         55:9a:2c:09:fb:b2:0e:1f:3b:b1:a8:db:d4:5a:6c:9f:d3:51:
         06:e6:1a:0f:bc:73:11:74:aa:22:73:61:a9:47:3d:0f:43:b5:
         e5:65:ef:45:d9:f9:3c:e3:08:36:6f:9a:32:b2:72:5a:3b:74:
         f3:64:b7:fe:06:ba:93:5a:6a:d4:0b:ac:d1:03:87:f4:b4:ab:
         a7:fd:a7:1a:a0:39:82:8f:12:80:96:31:fb:e1:6a:bc:15:60:
         9d:c2:aa:57:06:40:49:99:b3:b0:0c:0e:2a:ca:95:5b:28:15:
         b4:55:81:07:06:09:8b:27:e1:75:66:da:7c:18:7c:b4:91:3e:
         2d:23:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 20:20:37 2025 by rpki-client