This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
File:                     o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json)
Hash identifier:          CbYFCOadru5yp7I6tYkZjwfcdo5sxZmID1IptlcwTO8=
Subject key identifier:   3B:C9:C9:0B:80:8D:B2:97:FB:4A:D1:B3:1C:6A:C9:0F:D3:E7:76:EA
Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
Certificate issuer:       /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Certificate serial:       0461
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
Manifest number:          045C
Signing time:             Sat 06 Dec 2025 22:51:16 +0000
Manifest this update:     Sat 06 Dec 2025 22:51:15 +0000
Manifest next update:     Sat 13 Dec 2025 22:51:15 +0000
Files and hashes:         1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: V7yNt4Qsc2uSMmd8zePZdSIV242Tf0Twk96B5S1Oqh8=)
                          2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: sgnzWnaw0vANyz/OY7RM5bLktuy+6I9RFPeqf3AsTxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
                          rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121 (0x461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
        Validity
            Not Before: Dec  6 22:51:15 2025 GMT
            Not After : Dec 13 22:51:15 2025 GMT
        Subject: CN=6934b363-f160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:89:88:80:2d:1b:db:86:07:29:29:d9:18:
                    a5:8a:d5:62:22:e2:f8:b8:55:63:a7:9e:f0:a6:d9:
                    7e:57:5c:18:ad:f0:e2:42:5c:68:80:6c:09:ea:35:
                    08:df:d3:e8:a8:8f:8a:d3:a1:d2:b2:88:20:33:9c:
                    36:12:75:40:65:bb:a1:fe:21:ae:8e:2b:99:a6:37:
                    f5:e1:73:f7:38:d1:21:7d:e0:4e:ae:d1:9a:fa:bd:
                    cf:99:db:a5:96:f3:49:72:23:76:19:04:2a:3a:33:
                    32:56:ee:a8:32:4f:ad:48:49:9d:38:3d:ab:0a:81:
                    5c:ad:c2:98:1a:9f:07:65:35:7d:75:af:1d:ff:a7:
                    01:3c:60:55:a0:20:4f:2f:da:38:ea:33:12:8a:a3:
                    84:11:f6:cf:88:6d:93:ab:05:bd:0f:f3:69:fb:1b:
                    21:68:18:52:4e:7b:59:28:6c:d1:44:9d:67:dc:1d:
                    57:e1:e1:0f:7e:1d:fb:64:9d:2f:ad:01:63:c8:fb:
                    29:26:44:e1:35:38:8a:c3:1c:8f:28:94:de:db:6c:
                    64:88:8b:d6:3b:f7:c5:3a:69:d2:93:fd:50:b9:75:
                    37:78:74:09:7f:d1:04:01:79:e3:fb:4a:cb:10:26:
                    21:57:69:ed:0e:69:ec:7f:11:b8:21:9d:63:c5:50:
                    3a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:C9:0B:80:8D:B2:97:FB:4A:D1:B3:1C:6A:C9:0F:D3:E7:76:EA
            X509v3 Authority Key Identifier:
                keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e3:f4:29:e7:c0:30:95:96:5d:d8:75:03:8c:46:93:eb:62:
         f4:80:3a:b5:7f:6a:ca:58:34:90:96:e2:35:bd:fb:11:3e:5b:
         9d:37:e4:87:d1:97:8e:74:28:ea:18:0c:49:0d:1c:66:5e:9a:
         1b:86:23:70:9d:b1:3c:49:23:98:fa:8d:f3:9c:2f:84:bb:6d:
         f2:e1:f0:3c:e2:65:08:8c:c8:76:dd:4e:54:e4:9d:7a:9e:ee:
         e8:91:63:6d:f3:86:f4:b5:3c:5c:7a:bf:3d:32:22:60:4a:a1:
         9f:3c:fe:24:08:24:5e:38:ab:d6:df:20:55:40:a4:ae:74:64:
         45:0d:4e:4b:6d:7f:39:e1:68:67:dd:3b:85:42:91:18:cc:75:
         e4:c1:1f:90:d5:25:5b:48:4b:2b:d2:aa:a2:c7:c4:8a:e3:1e:
         c0:69:99:0b:94:46:04:cf:3f:de:5c:d3:e8:fd:38:50:a7:16:
         e1:d7:22:66:02:c4:97:b0:40:10:9e:c2:25:95:76:b6:23:19:
         bf:a1:04:1b:f5:85:60:8f:b4:d4:47:0a:d5:5b:48:a5:ea:4b:
         32:77:d5:c8:5d:67:bb:1e:fe:94:d2:44:02:2d:98:bf:e4:f6:
         db:a9:ef:8f:2e:a7:0a:ad:da:39:e7:a7:d9:6e:73:c8:f4:85:
         75:90:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:22 2025 by rpki-client