This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
File:                     mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json)
Hash identifier:          Fw90VibHe9+O8eaFeZnHkmdYDkANJN83/H2xpN+8zqk=
Subject key identifier:   37:FB:38:24:92:EC:DA:AD:7B:5B:CF:2B:57:C0:B1:B1:F3:70:4D:4F
Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
Certificate issuer:       /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426
Certificate serial:       07C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
Manifest number:          07B4
Signing time:             Sat 06 Dec 2025 20:28:37 +0000
Manifest this update:     Sat 06 Dec 2025 20:28:36 +0000
Manifest next update:     Sat 13 Dec 2025 20:28:36 +0000
Files and hashes:         1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: fDPSQ/t0VNC+BdPSOY6CZpMb5Wo/IQdYze664JTKhlw=)
                          2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: VuRfNVBZwbR+ucX5LeWc2BXr4+CtK5OzMpCV0KJbLkg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1984 (0x7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426
        Validity
            Not Before: Dec  6 20:28:36 2025 GMT
            Not After : Dec 13 20:28:36 2025 GMT
        Subject: CN=693491f5-951d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:9e:18:50:1c:d1:5f:30:4b:b1:64:ca:a2:
                    62:33:ef:d8:8a:a3:c4:41:0a:b6:0b:1f:0d:c9:d7:
                    e2:c6:1c:de:fa:56:2b:e7:1c:94:8a:9b:d1:04:51:
                    69:31:66:27:cf:14:27:03:0f:75:8d:de:28:b4:f6:
                    69:c3:7f:6d:3e:fe:b6:fa:8c:a0:c9:dc:46:1c:7c:
                    7f:0d:b2:ce:9a:b1:31:f5:a6:e1:80:70:4c:34:0a:
                    2e:84:03:33:d2:be:31:90:8f:8d:fe:85:d1:96:db:
                    b4:a7:43:7d:c1:cc:ef:b2:29:6b:e2:20:5e:e8:82:
                    99:11:20:6d:83:05:63:bb:e8:c5:ef:30:ff:b6:0e:
                    21:aa:be:00:07:8e:f0:ca:0d:cc:3d:e7:36:09:87:
                    dd:9c:eb:10:50:cd:f0:d1:da:e6:8d:f2:71:f1:e3:
                    5b:ff:25:02:f3:fe:ac:29:c4:ae:1f:48:bc:72:ab:
                    c3:a7:51:1e:f9:a1:55:c6:dd:4f:11:e2:7b:74:f9:
                    81:d1:f0:39:27:be:fd:d9:a8:2c:f6:e2:62:17:68:
                    cc:5a:84:64:35:ba:31:0e:08:37:66:33:34:8a:8d:
                    ca:ff:ff:a7:19:1e:f6:23:ce:44:03:8f:5d:ce:41:
                    17:fa:7b:29:3e:be:15:b3:4c:5b:d9:47:f2:15:6e:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FB:38:24:92:EC:DA:AD:7B:5B:CF:2B:57:C0:B1:B1:F3:70:4D:4F
            X509v3 Authority Key Identifier:
                keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:88:ad:53:1e:88:3c:7a:82:dc:95:6a:13:35:7f:87:82:56:
         89:25:22:c2:8d:c4:b4:66:1d:ab:e4:f1:85:fb:4a:36:e9:ad:
         7a:e0:d9:cb:c1:47:7f:9a:c6:6f:0d:1d:c4:16:ea:1c:0f:71:
         b9:77:96:f7:e9:af:6f:e8:ac:ef:79:0c:82:8d:5c:c6:bb:d3:
         1d:2f:be:e2:29:94:44:c2:32:0b:4b:20:6b:32:6f:b5:5c:f2:
         ba:50:e1:30:3f:c5:b1:4d:0b:bd:e1:fb:70:52:41:40:35:5d:
         7b:56:0f:14:21:08:4a:be:f5:ec:d9:8e:74:bf:01:59:e4:37:
         24:79:af:7a:72:5e:70:80:1b:ca:c7:0d:39:ff:31:71:65:f1:
         8d:65:8d:48:0c:fd:23:50:b0:80:17:07:92:1c:e4:4e:2d:86:
         c6:95:fc:a7:8b:1a:a6:5a:25:ed:01:0a:55:f4:a3:8e:63:15:
         25:24:3a:e8:22:47:fa:e7:60:55:f4:0f:c9:8d:35:23:a1:55:
         de:86:30:62:d4:29:29:d6:b9:ef:9a:0a:d7:f2:7b:77:9a:e7:
         33:8b:17:f3:f5:73:ba:d7:67:e2:27:c2:b2:08:7a:ce:31:76:
         1e:8f:08:17:b2:c1:9b:1e:c1:44:e7:5c:03:f0:51:6e:66:af:
         45:d9:a7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:55 2025 by rpki-client