This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
File:                     OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json)
Hash identifier:          slbsakRV4zkqwMF8h3GI7bKXIZ56x9SmmOLAwI8SH/I=
Subject key identifier:   EA:CF:E2:FE:F1:ED:F9:FE:2E:A2:9B:A4:91:78:D7:5C:B9:5F:9D:96
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Certificate issuer:       /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial:       1F08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
Manifest number:          1EFC
Signing time:             Sat 20 Dec 2025 15:51:52 +0000
Manifest this update:     Sat 20 Dec 2025 15:51:52 +0000
Manifest next update:     Sat 27 Dec 2025 15:51:52 +0000
Files and hashes:         1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: 0N1u6E9/fylHBK0wyPi9IEAOIKQEADcutssnPfVwtk8=)
                          2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: W0ZWmGkhW06fRZVPw8jscLCIBobXeY3y+SwBDvJ1Z0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
                          rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 15:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7944 (0x1f08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1
        Validity
            Not Before: Dec 20 15:51:52 2025 GMT
            Not After : Dec 27 15:51:52 2025 GMT
        Subject: CN=6946c618-5fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:df:14:37:40:83:83:3f:cb:b9:6f:0f:b5:
                    54:12:3f:9e:57:ba:6a:85:3b:f5:f3:67:1b:80:ae:
                    d0:d5:db:81:66:dc:ba:92:91:2c:a3:83:a1:c5:d9:
                    7a:da:ce:19:7a:c2:8d:0a:d9:4f:a8:ac:5b:dc:e8:
                    57:7a:22:6c:b2:45:b0:82:40:d8:00:4b:5a:d9:c8:
                    86:8f:34:95:58:2a:8a:c2:22:17:0a:a9:f0:ea:22:
                    94:b8:9f:69:c7:a9:7d:6c:5c:7d:0b:1c:be:9a:f0:
                    6c:3b:e3:16:0d:6f:38:d9:c5:e5:02:91:03:34:b3:
                    a9:85:3c:e4:8a:69:e1:d6:27:b8:b8:7a:aa:56:0a:
                    ae:39:5b:02:23:98:6a:da:59:5e:d9:70:96:c9:f4:
                    87:98:9f:ca:cc:17:05:f0:6d:9e:ac:cb:51:ba:ae:
                    f2:6e:58:9e:ba:35:15:bc:92:c9:71:ee:24:d6:45:
                    e7:b5:f7:4c:96:29:e8:f3:e9:87:f8:cc:32:83:e3:
                    de:e7:c9:80:f8:d1:be:91:39:8d:1d:be:4c:dc:0b:
                    24:0c:60:29:c8:80:30:9d:16:f9:bd:6a:29:71:82:
                    d9:7b:a5:71:07:ca:94:87:db:97:9a:e9:79:51:8b:
                    ce:d0:a1:42:b0:b3:7b:71:55:21:ad:62:b8:71:92:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CF:E2:FE:F1:ED:F9:FE:2E:A2:9B:A4:91:78:D7:5C:B9:5F:9D:96
            X509v3 Authority Key Identifier:
                keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:2e:c8:e4:45:0b:8c:b0:d6:ef:e4:46:8e:5e:70:2b:0d:3f:
         32:82:8a:28:ec:69:0a:4e:0c:63:f9:3a:14:77:4d:c3:4c:14:
         6c:ff:4d:0c:90:79:8a:ff:0b:40:58:3f:ec:2b:5b:45:30:04:
         9a:a2:0b:cc:f6:15:ca:09:bc:b8:ce:6a:7e:2d:cb:c6:ac:76:
         45:f5:1a:98:d9:ac:b0:20:a1:f6:0a:83:89:e9:d4:70:5e:57:
         04:e1:60:94:f9:57:31:03:89:36:53:7c:98:10:2e:cc:cc:71:
         f2:dc:18:63:c1:61:01:46:14:22:80:13:a0:0a:6e:1e:da:45:
         2a:b8:e2:cf:dc:7f:60:ba:76:69:b7:11:c0:f6:28:0d:45:d4:
         5f:c7:1e:ad:c3:f2:d4:fb:d6:e9:95:47:0a:57:d9:d6:68:4f:
         53:ee:d9:6a:a2:52:9b:ab:6f:c7:65:09:c9:14:df:c9:0a:c9:
         ca:7b:f4:f3:33:23:c5:b5:ed:61:a4:04:be:48:99:74:02:ca:
         db:e3:ba:07:a4:18:ac:48:1a:48:f2:25:20:69:92:ca:b9:95:
         01:a1:ce:5a:c9:f1:14:b4:b0:b9:95:53:ed:82:ed:fb:17:e3:
         c3:f4:91:cb:7d:b5:a7:aa:47:ce:40:a9:5b:04:74:8a:70:1e:
         96:ec:61:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:01:54 2025 by rpki-client