This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
File:                     cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft (raw, json)
Hash identifier:          uUnrxOe994yKpnpwU3JL+zc8SVIEKm3EfkMxFuf1DBo=
Subject key identifier:   89:07:87:27:90:9F:86:FC:0E:BF:60:19:06:EC:82:02:5C:A6:38:84
Authority key identifier: 70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01
Certificate issuer:       /CN=A91764E1/serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
Manifest number:          0153
Signing time:             Fri 05 Dec 2025 02:18:58 +0000
Manifest this update:     Fri 05 Dec 2025 02:18:57 +0000
Manifest next update:     Fri 12 Dec 2025 02:18:57 +0000
Files and hashes:         1: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl (hash: PR2ayQotkz7vF15LdN5UbISoySuMZSHddiR1gw2CUzQ=)
                          2: 0C708FB4C67E11EE87B34958C4F9AE02.roa (hash: Emtdf6B32dUyriQRU+z92VLtRvSD7HNe+9gqK+EmXtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl
                          rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764E1, serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801
        Validity
            Not Before: Dec  5 02:18:57 2025 GMT
            Not After : Dec 12 02:18:57 2025 GMT
        Subject: CN=69324111-588b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:16:83:e0:e0:9c:72:5a:28:c7:a4:37:31:
                    7e:d7:83:05:f2:2d:7d:9e:e7:57:cf:47:47:83:55:
                    ac:0a:c8:6e:78:ee:53:10:c8:6d:1f:7e:8d:d1:8d:
                    f1:de:0a:6d:55:81:e8:07:b1:fc:64:12:df:6c:d7:
                    64:d4:fb:6b:60:af:78:24:7f:b1:11:e6:89:93:f4:
                    6f:e5:2d:97:25:e2:46:0c:cf:db:d7:78:62:b6:6e:
                    46:43:f4:36:c4:a1:92:a0:59:76:7b:8f:73:9f:80:
                    fc:8e:01:d1:b3:ff:1f:72:19:84:d8:4a:03:15:b7:
                    eb:e7:e6:ac:19:3f:d9:54:dd:32:d0:99:00:dd:17:
                    4f:e5:82:ec:31:4d:fe:57:2f:80:8a:b7:7e:f7:b1:
                    c0:fa:d2:8c:f2:9e:fb:af:5d:2f:3b:ac:f6:61:6c:
                    3f:91:bc:f6:d8:1f:ba:22:98:cc:c2:db:ee:86:9b:
                    e1:28:8c:76:29:de:fd:81:0c:fe:75:86:53:c5:c0:
                    76:0c:84:04:ce:c1:9e:d6:14:c8:3d:c6:96:11:3a:
                    6e:28:f6:be:c9:3f:dd:72:7c:06:33:ab:34:37:6c:
                    f0:6a:e6:38:14:db:b0:e5:51:3c:72:e4:a7:d9:92:
                    62:32:22:4e:44:67:81:15:cb:de:9b:96:ff:e2:f9:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:07:87:27:90:9F:86:FC:0E:BF:60:19:06:EC:82:02:5C:A6:38:84
            X509v3 Authority Key Identifier:
                keyid:70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:1a:25:e5:74:aa:11:d2:f1:8c:c9:06:c5:18:96:0e:5f:7e:
         6c:46:43:52:9a:b5:e0:92:85:23:db:91:fe:25:8a:66:53:0d:
         a3:88:c4:43:a7:be:70:cf:a8:eb:a2:bc:48:11:cd:89:dd:90:
         df:fd:31:04:75:80:58:c9:c4:20:ac:31:78:72:03:56:ca:0e:
         5d:61:88:98:d1:00:76:68:b5:74:6e:d0:eb:2a:a3:25:f0:07:
         ac:36:c3:93:3a:62:76:e5:57:5f:ed:0e:9e:d4:de:f7:32:56:
         52:86:72:fd:98:14:17:3b:e2:d1:d5:56:17:52:4b:2d:c5:2b:
         29:a5:3a:62:55:69:45:47:04:bc:df:9f:c8:9f:05:3b:48:10:
         b1:2e:f6:b1:4a:e3:cb:e0:80:a3:48:cc:07:44:c3:07:ca:56:
         18:a1:00:81:ae:33:ed:d5:87:ac:86:13:b0:c2:e7:50:fe:76:
         d2:00:17:e7:4a:ee:5f:63:3d:22:ca:dd:6c:cf:1b:b6:0e:e1:
         de:2c:d4:b5:4e:4f:0d:f1:ad:90:b8:a2:e1:87:46:88:16:ac:
         e9:7f:1d:2f:1a:53:f6:b9:09:0e:32:a8:7a:79:63:ba:8f:67:
         6f:22:52:e0:d5:9e:41:fa:73:91:90:eb:bb:69:d6:36:76:5e:
         43:ca:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:54 2025 by rpki-client