This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
File:                     0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json)
Hash identifier:          A/8wBn22wQXNLsUj8vCUpSA+to0WUmIYTJO9E9rmQ0o=
Subject key identifier:   5E:6C:40:C0:E4:E4:3A:CB:92:DB:04:3B:9D:98:46:71:6F:AC:4E:F6
Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Certificate issuer:       /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Certificate serial:       0B39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
Manifest number:          0B2D
Signing time:             Thu 04 Dec 2025 18:37:02 +0000
Manifest this update:     Thu 04 Dec 2025 18:37:01 +0000
Manifest next update:     Thu 11 Dec 2025 18:37:01 +0000
Files and hashes:         1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: qxyAHQbaXEF2AYjIIyeLFCjzQ9eU0ps69y6k9BherPU=)
                          2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
                          rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2873 (0xb39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
        Validity
            Not Before: Dec  4 18:37:01 2025 GMT
            Not After : Dec 11 18:37:01 2025 GMT
        Subject: CN=6931d4ce-d67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:53:49:37:f6:e7:b1:f1:15:0e:26:85:58:84:
                    5f:f9:c7:31:e0:5d:48:3f:a6:81:65:82:74:d5:a8:
                    f3:01:f8:5a:c3:72:8b:ab:75:07:eb:fd:54:04:63:
                    5d:d3:43:7b:f9:a8:5c:4f:26:94:cd:86:5f:ec:5a:
                    22:99:4e:a9:7c:11:ba:ef:a0:be:05:e2:50:a8:0b:
                    3f:9f:67:00:93:74:82:f2:e2:60:9f:53:71:08:1d:
                    bc:65:8d:13:5d:53:8d:8b:41:b4:4e:8d:99:7a:28:
                    5c:1b:74:44:57:3e:56:80:4a:bc:14:57:5e:9b:50:
                    20:15:ab:09:d5:ad:24:7f:8b:ef:18:de:ae:32:06:
                    55:b1:22:26:52:9a:be:fb:05:f9:2a:bb:29:48:f4:
                    81:b6:6b:b7:14:b5:f1:25:16:47:b9:e3:82:41:0e:
                    cc:10:2d:94:00:21:92:b8:d4:62:8b:a6:95:a2:64:
                    12:6e:e5:46:05:68:b0:45:de:84:13:50:26:f8:53:
                    f7:1c:9b:0f:f8:03:45:6e:28:41:39:f1:c2:36:ac:
                    db:5c:22:bc:18:17:58:9e:27:60:9e:81:72:61:ec:
                    1f:f5:0e:cc:e8:75:56:14:d5:d1:2e:ad:b2:51:e9:
                    05:6e:a9:9f:60:a4:a7:31:91:9f:48:8c:43:30:dd:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6C:40:C0:E4:E4:3A:CB:92:DB:04:3B:9D:98:46:71:6F:AC:4E:F6
            X509v3 Authority Key Identifier:
                keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:90:33:bd:cf:37:04:ea:6e:24:42:42:0f:18:a4:59:c5:19:
         d3:c7:1a:83:3d:35:21:fa:05:7f:67:0b:70:b8:9d:f3:5b:e6:
         fe:63:6b:68:18:67:46:a8:00:08:4b:03:06:e7:ed:a6:74:95:
         2f:f4:02:f3:13:a4:92:1f:c7:d0:51:b7:a3:d9:b4:63:c3:27:
         e7:37:8d:49:12:c1:78:c4:5c:66:6d:84:42:a7:75:7d:16:63:
         43:9a:39:eb:d5:47:86:c7:72:7d:6a:5e:80:f5:37:a6:e4:5f:
         d5:98:c8:fb:57:5d:5c:bf:03:eb:43:0f:bf:8f:96:e7:76:63:
         c9:0b:cd:c5:f7:80:c4:f4:03:5d:0e:88:ee:38:79:b3:fd:13:
         49:b0:34:90:48:a2:16:6c:22:ca:63:24:e8:e7:76:18:4b:a9:
         0c:36:2b:15:fe:50:cd:69:4a:45:85:ef:66:4e:0d:17:91:ae:
         e5:6b:25:c6:9c:49:2b:ac:e0:50:0d:47:5f:84:71:b7:cf:77:
         23:b7:04:4b:c3:4d:63:ca:c7:a2:d0:0f:cc:04:72:62:97:f8:
         e5:95:84:83:70:2a:fc:db:0e:82:18:3c:5e:da:25:ef:9f:81:
         74:89:60:b4:c6:d5:91:7c:58:4b:2b:6c:d0:8e:2b:f9:69:3d:
         b3:7d:70:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:16 2025 by rpki-client