This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
File:                     5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json)
Hash identifier:          Md0MrdH8i22t0UCWjVKWuY0Rnf8FNkNuvH7Yo3GRtno=
Subject key identifier:   38:46:D9:2C:69:61:CC:FD:6E:80:F5:9F:94:85:60:01:05:EF:6F:86
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Certificate issuer:       /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial:       0E22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
Manifest number:          0E0D
Signing time:             Sat 06 Dec 2025 17:16:29 +0000
Manifest this update:     Sat 06 Dec 2025 17:16:29 +0000
Manifest next update:     Sat 13 Dec 2025 17:16:29 +0000
Files and hashes:         1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: TRmyIGZtJ75ZabObyb3/r9anRy4rlpRXp7L8PpY544w=)
                          2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: P63HmzuTgX6+OxmcbQTN/m0eCDcj1q5olNwP8Hf8SvI=)
                          3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: jkm23RvGSquZwL1DUARD3YaIj647wpqnNA3CvWP1hl8=)
                          4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: uZutnh3IDqFkeTM2HclLSv5xEA3RHi+jQtpjzohkCIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
                          rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3618 (0xe22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
        Validity
            Not Before: Dec  6 17:16:29 2025 GMT
            Not After : Dec 13 17:16:29 2025 GMT
        Subject: CN=693464ed-b7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:d0:b5:a5:05:7d:44:2a:a7:b3:24:03:56:
                    c0:d0:f5:ee:53:56:62:70:0c:07:db:5c:e0:06:39:
                    a3:8d:05:c6:dd:1e:59:15:85:1d:f1:af:4d:52:89:
                    7a:16:5e:84:16:c6:67:91:cb:82:c5:00:ca:73:70:
                    4b:79:1e:15:f0:17:25:c7:23:0d:5c:81:bf:66:37:
                    c1:5f:a6:ad:21:8a:f7:f7:f8:88:05:3a:90:c9:2e:
                    33:39:10:e0:41:2d:db:c8:58:9c:be:58:0b:94:52:
                    44:a0:68:dc:d4:65:8c:2a:7b:4a:97:5c:68:6a:d0:
                    7e:aa:47:63:04:d8:5b:b3:01:3a:a4:b9:3a:f4:d5:
                    b1:9a:b5:9b:8e:84:63:37:df:ac:cb:d2:76:0c:dc:
                    82:f6:51:f4:eb:4d:9b:ea:5c:03:5f:ee:37:7d:bd:
                    4c:a4:2d:27:c9:f9:a3:67:17:92:1c:d2:f1:5d:c6:
                    de:c5:c8:8e:d8:ad:6a:6f:d8:19:b9:01:e0:65:de:
                    b9:70:fc:af:65:40:bf:0d:9c:8f:c0:9e:b3:25:f3:
                    fb:f6:49:3a:ad:2a:37:f6:9e:f3:c8:00:86:e4:4d:
                    68:8f:e8:80:a9:e4:ef:ad:02:3b:a8:d9:82:c6:cb:
                    f1:2a:b4:fa:2f:7f:b1:7c:89:5c:7b:43:2a:b3:7d:
                    7c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:46:D9:2C:69:61:CC:FD:6E:80:F5:9F:94:85:60:01:05:EF:6F:86
            X509v3 Authority Key Identifier:
                keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ba:73:af:0c:72:f8:18:49:6d:c4:23:f1:27:34:3e:ae:bc:
         a6:1a:3f:c8:e6:eb:86:98:a8:53:16:76:ba:6e:65:63:7b:59:
         15:ca:d9:7b:e3:43:64:d9:14:e9:3b:a7:fd:8b:ca:e4:1f:8a:
         de:93:cf:c7:45:3e:49:ec:26:c2:10:e7:ff:0f:91:17:1e:53:
         a4:f5:d5:c5:68:5f:ff:e9:4a:96:83:f7:dc:dc:53:34:03:b0:
         d3:ce:2b:54:2d:9a:44:0f:d8:41:d0:df:fb:5f:d1:f0:10:95:
         4e:d6:e0:e2:03:27:0f:00:76:9f:1b:5c:49:b3:cf:b9:ff:6f:
         9a:3b:c3:1f:99:9a:d7:4e:1f:ba:d0:5a:f7:37:e1:c1:0e:7c:
         5e:d3:92:e5:bf:02:1d:78:74:1c:fd:86:49:4e:be:12:01:a4:
         3d:47:79:7c:bf:b4:bd:bc:fb:f9:3e:c9:b3:30:40:96:3e:ab:
         0d:e3:fc:12:72:dc:2a:c5:ba:38:ff:f4:73:0e:52:67:95:e9:
         7b:43:e1:af:39:62:64:74:68:be:8d:20:29:f8:fb:9c:d5:a2:
         9e:2f:72:35:b2:d3:4b:09:e1:7a:f5:e0:49:e3:47:f9:24:80:
         9d:0d:11:07:5d:e9:87:68:a1:88:99:96:af:b3:11:e0:bf:36:
         47:0a:00:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0
QzA4OUZDNTMwHhcNMjUxMjA2MTcxNjI5WhcNMjUxMjEzMTcxNjI5WjAYMRYwFAYD
VQQDEw02OTM0NjRlZC1iN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAykvQtaUFfUQqp7MkA1bA0PXuU1ZicAwH21zgBjmjjQXG3R5ZFYUd8a9NUol6
Fl6EFsZnkcuCxQDKc3BLeR4V8BclxyMNXIG/ZjfBX6atIYr39/iIBTqQyS4zORDg
QS3byFicvlgLlFJEoGjc1GWMKntKl1xoatB+qkdjBNhbswE6pLk69NWxmrWbjoRj
N9+sy9J2DNyC9lH0602b6lwDX+43fb1MpC0nyfmjZxeSHNLxXcbexciO2K1qb9gZ
uQHgZd65cPyvZUC/DZyPwJ6zJfP79kk6rSo39p7zyACG5E1oj+iAqeTvrQI7qNmC
xsvxKrT6L3+xfIlce0Mqs318uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhG2Sxp
Ycz9boD1n5SFYAEF72+GMB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF
ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR
eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJunOvDHL4GEltxCPxJzQ+rrymGj/I5uuGmKhTFna6bmVje1kVytl7
40Nk2RTpO6f9i8rkH4rek8/HRT5J7CbCEOf/D5EXHlOk9dXFaF//6UqWg/fc3FM0
A7DTzitULZpED9hB0N/7X9HwEJVO1uDiAycPAHafG1xJs8+5/2+aO8MfmZrXTh+6
0Fr3N+HBDnxe05LlvwIdeHQc/YZJTr4SAaQ9R3l8v7S9vPv5PsmzMECWPqsN4/wS
ctwqxbo4//RzDlJnlel7Q+GvOWJkdGi+jSAp+Puc1aKeL3I1stNLCeF69eBJ40f5
JICdDREHXemHaKGImZavsxHgvzZHCgCw
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:52:42 2025 by rpki-client