This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
File:                     OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft (raw, json)
Hash identifier:          vUdys/xCtclkVSYRiYsbImSaYEYKZKGQ+Zm7+jg0ZfE=
Subject key identifier:   6E:85:AC:F9:D0:93:A7:23:74:71:16:93:E1:C6:1B:45:54:35:9E:CA
Authority key identifier: 3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
Certificate issuer:       /CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Certificate serial:       045C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
Manifest number:          0455
Signing time:             Thu 04 Dec 2025 22:41:04 +0000
Manifest this update:     Thu 04 Dec 2025 22:41:03 +0000
Manifest next update:     Thu 11 Dec 2025 22:41:03 +0000
Files and hashes:         1: OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl (hash: hmYp0M8LFsVFUAVma0a2WZdg7q2daigqGZVgFQlpZfM=)
                          2: F2BB36DC790E11EC8EA0F77FC4F9AE02.roa (hash: 17t3m0KvoRjfHzLmSGQMixJ4h1po9W3fjkqykP9EfmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl
                          rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116 (0x45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B32D, serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
        Validity
            Not Before: Dec  4 22:41:03 2025 GMT
            Not After : Dec 11 22:41:03 2025 GMT
        Subject: CN=69320dff-7de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:ff:63:2d:bf:4a:4d:a4:58:61:1e:21:a9:
                    31:73:a2:8a:7f:57:fa:c0:b5:c3:ca:56:7f:52:f4:
                    18:39:ec:5c:15:ab:08:76:56:c1:18:c4:7c:d0:99:
                    a6:5a:fe:51:b0:81:47:22:88:f4:3a:2a:30:aa:c4:
                    46:2b:d2:08:e7:07:9b:c7:b2:3e:dc:17:e0:42:95:
                    99:33:a6:3f:55:5a:76:89:37:86:11:4b:a4:28:d7:
                    f4:a7:cd:e1:0a:5b:3a:9e:7d:a8:5e:34:dd:9b:c7:
                    a8:81:42:70:16:f9:92:a3:49:53:61:eb:1b:a0:11:
                    2c:64:7f:06:88:65:88:df:8b:21:b1:72:41:72:96:
                    ed:df:79:d9:78:ad:ae:cf:81:7e:1f:05:f2:d9:f5:
                    33:51:d5:d2:bf:4d:ae:a5:c2:90:f7:69:d0:99:c9:
                    a0:da:2b:07:f5:ff:3c:62:19:2b:73:fd:a1:17:0f:
                    0e:73:af:e4:f4:47:06:3f:53:93:f8:81:e7:22:47:
                    4c:8f:cb:e8:f3:42:2f:d7:03:0a:28:83:65:88:d4:
                    3a:18:ca:23:89:10:83:7c:74:d7:56:69:72:89:1e:
                    d3:ea:c0:8d:b8:bc:50:da:cc:09:fb:ac:4e:f9:cd:
                    f6:e7:4e:71:e6:af:fc:fe:8f:f6:f4:07:6a:c0:dd:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:85:AC:F9:D0:93:A7:23:74:71:16:93:E1:C6:1B:45:54:35:9E:CA
            X509v3 Authority Key Identifier:
                keyid:3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:d5:e3:ce:69:71:83:43:9e:92:6a:99:e8:7a:82:22:65:e2:
         ca:c9:03:b3:42:56:11:3a:91:fd:30:0a:ef:57:c1:12:4c:e3:
         7f:9d:07:29:66:e9:a1:6e:01:eb:aa:25:cf:86:88:23:63:b7:
         8d:13:38:7d:29:40:21:2d:db:a0:22:0e:66:7e:9a:9d:52:ed:
         ff:43:49:50:3b:ba:50:f5:2c:22:c0:1a:e0:02:75:27:40:e2:
         d4:dd:02:a6:47:de:ae:f7:48:c5:32:f2:b8:de:01:30:a9:01:
         a3:a3:ca:c4:5e:ca:6c:80:9a:2f:26:68:ca:fe:b1:6e:4a:ab:
         86:ae:6f:7c:2f:1a:dd:2f:24:0b:33:60:77:cf:e4:11:c7:15:
         aa:91:ae:b2:1c:77:e7:ea:6c:f1:97:1d:18:31:d2:66:b0:f8:
         1a:63:d2:41:e7:6d:80:fa:f0:c5:71:23:5e:24:04:17:4f:30:
         ab:52:8b:29:d7:ee:6e:01:44:36:ec:3a:bc:54:66:5d:1e:76:
         a7:e2:a2:df:9d:04:21:ad:0c:10:72:95:b2:80:c8:a5:5f:46:
         b1:17:1d:87:29:a5:94:03:0c:05:02:8c:43:41:f7:e3:ca:2c:
         1a:3f:bb:c9:ff:c5:98:22:95:7f:ac:74:9b:5d:67:0a:46:bf:
         39:0e:bc:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IzMkQxMTAvBgNVBAUTKDNBNjhBMjIyQzJDMENGNDE0MzBDMDk2OEQyMzA5QUE4
OTNDNzRBM0IwHhcNMjUxMjA0MjI0MTAzWhcNMjUxMjExMjI0MTAzWjAYMRYwFAYD
VQQDEw02OTMyMGRmZi03ZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscz/Yy2/Sk2kWGEeIakxc6KKf1f6wLXDylZ/UvQYOexcFasIdlbBGMR80Jmm
Wv5RsIFHIoj0OiowqsRGK9II5webx7I+3BfgQpWZM6Y/VVp2iTeGEUukKNf0p83h
Cls6nn2oXjTdm8eogUJwFvmSo0lTYesboBEsZH8GiGWI34shsXJBcpbt33nZeK2u
z4F+HwXy2fUzUdXSv02upcKQ92nQmcmg2isH9f88Yhkrc/2hFw8Oc6/k9EcGP1OT
+IHnIkdMj8vo80Iv1wMKKINliNQ6GMojiRCDfHTXVmlyiR7T6sCNuLxQ2swJ+6xO
+c32505x5q/8/o/29AdqwN2EVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6FrPnQ
k6cjdHEWk+HGG0VUNZ7KMB8GA1UdIwQYMBaAFDpooiLCwM9BQwwJaNIwmqiTx0o7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMyRC84NkZEMTM4ODc5
MEExMUVDOEQwQTI5NzlDNEY5QUUwMi9PbWlpSXNMQXowRkREQWxvMGpDYXFKUEhT
anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09taWlJc0xBejBGRERBbG8wakNhcUpQSFNqcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjMyRC84NkZEMTM4ODc5MEExMUVDOEQwQTI5NzlDNEY5QUUwMi9PbWlpSXNMQXow
RkREQWxvMGpDYXFKUEhTanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC01ePOaXGDQ56SapnoeoIiZeLKyQOzQlYROpH9MArvV8ESTON/nQcp
ZumhbgHrqiXPhogjY7eNEzh9KUAhLdugIg5mfpqdUu3/Q0lQO7pQ9SwiwBrgAnUn
QOLU3QKmR96u90jFMvK43gEwqQGjo8rEXspsgJovJmjK/rFuSquGrm98LxrdLyQL
M2B3z+QRxxWqka6yHHfn6mzxlx0YMdJmsPgaY9JB522A+vDFcSNeJAQXTzCrUosp
1+5uAUQ27Dq8VGZdHnan4qLfnQQhrQwQcpWygMilX0axFx2HKaWUAwwFAoxDQffj
yiwaP7vJ/8WYIpV/rHSbXWcKRr85DrxP
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:32 2025 by rpki-client