This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
File:                     Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json)
Hash identifier:          +B8UABxDnsjbJgEH5yWGkiiuyAkOhvBRxAm1BegA9cA=
Subject key identifier:   43:ED:58:50:DE:BF:28:F2:19:8A:89:9E:93:15:FF:4C:88:72:8D:D3
Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
Certificate issuer:       /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Certificate serial:       0364
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
Manifest number:          035E
Signing time:             Thu 04 Dec 2025 23:04:52 +0000
Manifest this update:     Thu 04 Dec 2025 23:04:51 +0000
Manifest next update:     Thu 11 Dec 2025 23:04:51 +0000
Files and hashes:         1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: yRVfB1RCyCCr5C4fsegoFJpFvz+fbEUPiwtWBtd+DPY=)
                          2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: Utn78ATYCOJD2s8KH2tHbQkxop0M2VDIkapS9+XLIf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
        Validity
            Not Before: Dec  4 23:04:51 2025 GMT
            Not After : Dec 11 23:04:51 2025 GMT
        Subject: CN=69321393-2ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:3c:11:04:32:74:a9:44:88:8b:ac:86:80:
                    33:b0:f5:61:8f:00:91:f3:e0:46:62:4f:5b:1a:ee:
                    cc:95:1e:cd:dd:a4:bc:3d:fe:d1:16:75:83:f7:c8:
                    3d:dd:7a:be:f8:da:8c:9c:48:03:ba:0c:42:1e:ae:
                    a4:1b:30:42:2b:1e:88:b0:44:5e:f9:0b:67:b7:cf:
                    72:ed:48:67:a7:d7:50:6f:19:93:49:ea:2f:46:79:
                    55:b1:60:e8:86:49:f3:cc:db:71:81:3b:b2:6d:4a:
                    41:cd:b3:63:72:b5:f3:86:7f:d0:0b:f2:62:5a:94:
                    6b:b0:4f:82:09:b9:dc:2c:64:b7:b3:da:28:79:24:
                    ff:e3:fd:89:f0:d7:d0:d8:da:ab:6d:30:70:e8:0e:
                    d0:5b:b0:d2:10:76:ab:41:b5:0f:c2:60:a4:10:76:
                    67:6a:04:19:0a:92:c8:1d:db:e6:54:65:7a:d6:88:
                    67:f7:25:f7:db:87:6d:70:a7:12:b6:46:22:52:02:
                    69:f8:88:41:c3:58:54:ff:c0:f5:dc:2a:d6:a9:d3:
                    29:97:5f:d7:41:6d:e8:21:5a:cb:15:e9:61:88:b7:
                    15:d9:48:46:84:70:38:97:1d:0e:1a:fb:c4:b3:e3:
                    f8:1c:bb:68:07:aa:b1:bf:e1:e6:9c:9d:0c:96:ce:
                    6d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:ED:58:50:DE:BF:28:F2:19:8A:89:9E:93:15:FF:4C:88:72:8D:D3
            X509v3 Authority Key Identifier:
                keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:8c:44:69:f8:2d:f1:1a:cf:c6:62:72:3e:51:4f:86:f8:04:
         75:e9:64:2e:2a:40:36:ae:c6:30:25:fa:15:5a:77:55:11:97:
         e6:5b:1b:3d:df:30:98:ef:7d:d8:23:67:47:1a:b4:3d:02:73:
         0d:b9:fd:56:08:32:0b:c8:f9:6a:39:c7:c0:e6:e9:4b:28:bb:
         51:3d:44:74:d7:8a:21:61:fa:9e:86:58:9b:a5:13:a2:e1:15:
         54:e2:22:f8:58:47:98:06:40:31:4a:74:d5:7c:a4:27:56:e6:
         1d:ba:64:d0:5e:bd:e3:4d:c0:fb:73:56:a0:73:68:ab:62:9f:
         df:15:6d:3b:91:c1:3a:92:68:8e:14:ff:90:aa:34:71:97:fa:
         9e:84:f7:a8:bb:49:c0:6d:97:fb:86:a9:bc:59:52:71:0e:33:
         b4:da:e3:ad:a5:2d:ea:1f:e1:5d:64:e7:e1:13:5c:bf:b1:63:
         9c:5f:2a:3a:cd:00:23:4c:09:70:83:4f:17:c0:5c:37:8b:5e:
         0d:92:a7:11:62:fc:9c:c7:1e:c2:3e:06:2c:f2:04:a0:ed:da:
         17:c0:9e:b3:67:58:19:b7:6b:01:d8:91:96:80:c3:3e:50:c2:
         aa:45:09:08:bb:5a:ee:67:ca:bf:e8:3c:e2:16:81:0a:82:30:
         53:ef:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:13 2025 by rpki-client