This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
File:                     OWpdnmemeQypf7kxMEtE57CoIc8.mft (raw, json)
Hash identifier:          K+yZwz/9aW3SsCVAb84K52ztetYs0b4IShfmAqKxNtI=
Subject key identifier:   D1:07:B0:DD:F1:CD:6C:19:2D:F3:98:55:F3:03:0E:7F:02:FF:DB:91
Authority key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
Certificate issuer:       /CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Certificate serial:       093F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
Manifest number:          0934
Signing time:             Sat 06 Dec 2025 19:24:25 +0000
Manifest this update:     Sat 06 Dec 2025 19:24:24 +0000
Manifest next update:     Sat 13 Dec 2025 19:24:24 +0000
Files and hashes:         1: OWpdnmemeQypf7kxMEtE57CoIc8.crl (hash: ZQLFM0OrZdbvxyd/QKQFfDW5FxRWLxATMjuPZ1TLdBU=)
                          2: 442D6434B14411EAB852C134C4F9AE02.roa (hash: dVnV0yH7vHgJph4GIsitDhFnvlBBTZGa61SDpLL66Po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl
                          rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367 (0x93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915664E, serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
        Validity
            Not Before: Dec  6 19:24:24 2025 GMT
            Not After : Dec 13 19:24:24 2025 GMT
        Subject: CN=693482e9-6a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:6d:15:95:da:89:ec:93:eb:e4:e3:9d:5a:
                    91:15:57:5d:3b:3a:9c:39:19:cf:b1:72:af:e9:08:
                    69:f5:21:b7:b1:07:95:41:51:10:55:8b:a3:c0:89:
                    fa:7c:41:d8:16:1b:2d:db:c1:74:ff:a1:77:5d:1b:
                    0d:b4:e1:13:ee:df:ce:ce:ed:e5:f2:58:4b:1f:b1:
                    c2:95:78:c3:63:13:6c:e5:b5:a9:d6:4d:1a:78:98:
                    ee:3a:fe:2b:76:22:69:49:a2:70:82:3d:7f:34:e2:
                    bb:2f:23:0b:fd:79:0a:5e:c6:02:bd:f7:12:e4:7e:
                    17:49:87:84:6e:d1:69:73:0f:f8:ad:5e:10:a7:d1:
                    fe:94:99:78:33:57:44:3d:db:ae:35:b3:6f:d8:62:
                    1e:09:f3:40:47:d1:cd:b8:6a:5c:5b:27:65:a1:f8:
                    a2:ec:77:a6:c8:87:b5:ec:29:6e:12:60:8e:63:c7:
                    99:3a:b8:61:be:38:7a:b2:fe:a4:01:15:d3:3f:40:
                    8a:98:49:9c:aa:28:af:04:4e:13:7a:0b:51:95:b4:
                    4e:00:3e:81:9b:36:3b:25:61:fd:4f:9e:4a:dd:3b:
                    55:92:9c:26:3f:e2:7c:60:82:c2:86:00:f7:5c:f6:
                    52:10:af:5a:b7:86:33:8c:8c:ce:00:49:ff:31:79:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:07:B0:DD:F1:CD:6C:19:2D:F3:98:55:F3:03:0E:7F:02:FF:DB:91
            X509v3 Authority Key Identifier:
                keyid:39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:55:91:58:5f:e7:8b:ac:38:a0:f8:e5:05:ac:8b:87:c0:22:
         06:15:5a:d5:13:bd:ef:20:a3:8a:6f:c2:f7:80:c0:c2:fd:5c:
         12:e0:ac:ba:d1:bf:ce:ac:93:90:5e:c6:9a:e2:2c:11:59:92:
         b4:2f:aa:de:ca:95:d5:52:ac:49:2c:1b:86:59:7d:3d:5f:e0:
         4c:04:21:8e:0a:31:54:2e:92:12:2f:47:c4:50:45:b9:e7:97:
         89:08:1e:f9:1f:de:80:27:d4:4a:79:0d:7c:f5:f8:4c:c5:34:
         9f:fe:0e:55:87:0c:1c:cb:fb:af:43:98:af:04:0d:ef:a3:b5:
         9d:ae:de:83:43:62:29:7e:45:92:8b:5e:b2:62:20:56:5c:09:
         67:ae:f1:c8:b0:b9:a4:8e:cc:1f:93:b2:50:95:96:73:c0:87:
         a3:fc:90:17:53:79:e9:f3:10:39:dd:88:99:a3:46:8b:97:41:
         e6:f9:05:c5:0e:1a:ae:0a:50:54:9a:86:ce:9c:69:7a:7a:b2:
         9e:56:14:14:85:36:f5:66:71:07:db:83:e1:8c:50:76:56:29:
         f8:1f:8b:4f:2f:27:be:99:00:dc:f3:cb:34:76:a2:ab:a7:de:
         22:49:dd:ab:c4:76:79:34:3a:c5:55:d4:cb:e4:6e:ce:e1:ac:
         68:c4:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:31:26 2025 by rpki-client