This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
File:                     O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json)
Hash identifier:          /gLafFJV5EPDA+pPOvGqN+jY04HtLWxsv1Pqs7UYnGo=
Subject key identifier:   B0:DC:9C:9C:28:B7:59:AF:29:39:57:34:78:01:D9:99:F6:C5:E8:35
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Certificate issuer:       /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial:       029C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
Manifest number:          0294
Signing time:             Mon 29 Dec 2025 00:35:06 +0000
Manifest this update:     Mon 29 Dec 2025 00:35:06 +0000
Manifest next update:     Mon 05 Jan 2026 00:35:06 +0000
Files and hashes:         1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: c7PAWlsSDMIXm1ftma+mMm29ZamVDsOVW9cBS9j/ics=)
                          2: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: ujc0MMs38JAyLv/lgGmTZJVWFsrRIcXX0fImBXf2Gng=)
                          3: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: FEAq+U9IY/vjb8fj+kVPH0Boa2FLCn9hMhhxSh+Ch10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 00:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
        Validity
            Not Before: Dec 29 00:35:06 2025 GMT
            Not After : Jan  5 00:35:06 2026 GMT
        Subject: CN=6951ccba-2f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:b5:93:ce:0d:d1:44:2c:73:bf:24:5d:5d:
                    2e:eb:84:22:3d:7a:c2:73:d8:53:37:9e:1d:e0:40:
                    87:c0:37:1f:3f:19:57:19:12:e8:e8:c1:7f:ea:2c:
                    4f:7f:52:27:06:04:64:bf:f2:59:e5:ae:8b:3b:e0:
                    68:0b:c0:53:dd:f7:5d:a5:1e:91:af:1f:1c:9a:82:
                    b4:d0:8f:75:bf:f1:de:7e:cb:93:b3:8f:51:33:55:
                    eb:f0:68:2f:41:18:7e:67:3d:5b:15:5d:63:11:e5:
                    2f:ce:f0:41:87:21:87:d8:28:ce:27:5a:2f:e9:1e:
                    69:73:8a:ce:a2:cb:7d:f8:58:fe:68:d5:36:34:ca:
                    05:fe:7f:50:d4:fe:ed:f6:13:a4:f3:9a:f8:32:da:
                    3a:21:93:81:7f:18:67:94:25:47:a7:e8:6c:fa:ed:
                    f7:8a:58:60:69:82:01:22:bd:dd:6a:43:79:74:1a:
                    47:2e:08:70:56:28:ae:c2:14:1f:98:41:e0:f6:b8:
                    b3:12:2a:51:9c:7a:4c:b6:91:0a:da:be:3a:e3:47:
                    1d:40:f3:50:db:a2:e6:e6:0f:ae:89:44:84:70:3b:
                    fa:eb:bc:38:9f:96:ec:b2:c6:73:60:22:dd:c5:7a:
                    96:d7:d4:53:48:f3:a5:ee:ea:be:f3:66:fd:d8:d0:
                    cb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DC:9C:9C:28:B7:59:AF:29:39:57:34:78:01:D9:99:F6:C5:E8:35
            X509v3 Authority Key Identifier:
                keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:27:80:e5:90:73:74:e2:8b:3f:52:03:0c:e6:a4:80:d9:
         57:5f:05:2b:b8:c8:13:86:69:8c:5a:20:b7:0f:03:3e:86:e8:
         e0:66:57:a7:9e:54:20:cc:85:08:25:28:66:e2:70:c7:b7:17:
         57:66:e6:f7:de:57:c0:f4:97:52:7c:8f:b5:69:5a:d4:97:c9:
         98:f4:4a:cd:b8:9a:d0:6c:06:a3:61:d9:74:85:be:65:94:bc:
         8f:fc:cc:34:c8:23:63:bf:ac:9c:91:ba:9b:45:5e:a9:35:63:
         6a:2e:30:ad:46:6f:81:c1:53:29:71:5c:41:a6:2b:0d:74:c9:
         a8:57:de:33:0e:0c:0f:a4:11:86:29:4c:04:27:0b:02:84:e0:
         ee:33:6d:73:45:a2:36:5d:c3:a2:ed:ea:45:60:18:04:54:1c:
         17:db:db:02:6e:4c:0e:38:df:2f:0b:d4:f6:16:33:23:66:bc:
         4c:b5:3d:46:da:e9:25:f4:4c:85:bf:a5:80:90:6b:0d:c3:f6:
         cd:f1:ab:12:12:c4:c4:61:b2:5d:51:ef:6b:b3:37:d9:a2:57:
         70:1c:9e:95:d1:11:80:e3:8c:c3:d8:9d:47:f3:77:69:38:57:
         28:f5:42:8d:5d:36:4e:e6:56:f9:3e:9e:1c:b0:4c:7d:fb:ed:
         26:4a:36:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:38:24 2025 by rpki-client