This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
File:                     omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json)
Hash identifier:          Xwz/4H9ETQF4LJp1kzbwiDXCQ+4QQKcL6O5rWl/4xfY=
Subject key identifier:   CD:F6:60:D4:BC:12:1E:96:BE:54:B4:68:22:77:E4:75:40:5C:B7:B9
Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92
Certificate issuer:       /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
Manifest number:          BB
Signing time:             Fri 05 Dec 2025 04:00:59 +0000
Manifest this update:     Fri 05 Dec 2025 04:00:58 +0000
Manifest next update:     Fri 12 Dec 2025 04:00:58 +0000
Files and hashes:         1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: RK4J9nYkopMqAeTvA0LUC7+KR3//QwDLb6Fx4j/iX4o=)
                          2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: JQfh1u+kukwSEqZawoJIJYKiGmFwuaaFjBW+kzrVtks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl
                          rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
        Validity
            Not Before: Dec  5 04:00:58 2025 GMT
            Not After : Dec 12 04:00:58 2025 GMT
        Subject: CN=693258fb-7412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ca:f1:f3:4d:db:a4:4b:be:02:92:57:2b:bf:
                    36:48:77:67:d3:0b:ea:85:ac:72:bd:d4:47:cf:85:
                    6d:4d:69:b2:f6:07:3d:a6:1f:96:03:f5:2d:81:a3:
                    48:48:90:9a:49:a3:5c:b6:62:16:1a:da:db:cf:69:
                    a6:1f:96:ea:7b:57:84:77:69:b3:df:48:10:e8:8f:
                    bf:16:05:dd:45:90:a1:da:bb:de:37:9c:63:76:4e:
                    ac:5e:c4:8d:59:42:58:52:6c:ad:79:49:fd:77:23:
                    06:f9:9a:03:10:af:0f:9a:64:5d:61:0b:f9:b3:7a:
                    92:41:9a:0a:07:d4:c1:aa:bb:97:23:26:4a:dc:3f:
                    5c:30:32:2e:7f:28:48:a5:d4:c6:88:6d:89:14:85:
                    21:66:55:8f:cd:c1:4d:c7:75:79:c7:c7:13:56:05:
                    8d:db:f8:7e:de:b7:d6:e8:bb:f1:f0:66:6c:7a:7a:
                    6d:10:88:7c:4c:0b:f2:e4:3c:c2:f0:80:0e:04:09:
                    c9:89:2a:0e:f8:0c:d0:5f:1e:c0:c0:b8:d1:2a:aa:
                    14:77:84:63:79:cd:8d:c5:b2:1f:6e:ee:06:3f:7f:
                    13:d6:29:44:72:b1:dc:26:6c:14:ca:3a:d2:fe:30:
                    fc:2a:c4:cc:31:c4:d7:d3:d0:aa:dc:08:fd:6c:a7:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F6:60:D4:BC:12:1E:96:BE:54:B4:68:22:77:E4:75:40:5C:B7:B9
            X509v3 Authority Key Identifier:
                keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6e:19:7c:3c:27:a1:26:79:97:d8:f7:02:39:4c:11:95:0a:
         2f:71:56:e2:40:57:21:0e:91:5c:da:27:b4:09:43:a9:dc:c0:
         3a:55:74:08:fc:26:e2:3d:b8:79:13:32:a9:45:91:e2:68:14:
         14:2b:64:d2:ef:23:64:7a:83:0a:71:57:11:3d:e5:67:94:a5:
         8e:19:e9:e0:20:e1:d4:7e:51:56:12:5f:17:e4:a9:52:71:95:
         f0:ab:60:d4:76:af:b9:81:64:04:2d:f1:8c:49:cd:04:c0:e8:
         69:28:43:fb:c6:45:18:d4:ef:0a:ca:40:73:cd:22:01:51:2d:
         60:9e:30:1b:2c:64:4e:6a:ca:95:01:aa:71:2b:6f:6d:00:7d:
         13:1c:5e:49:9d:9f:fd:53:da:9a:4d:35:cd:a7:4e:ee:e1:08:
         30:44:43:0a:ba:28:8f:b4:c0:a6:54:85:9f:3e:bc:5b:98:c9:
         34:94:5b:1f:4b:aa:93:16:56:ab:00:16:13:c1:37:95:ee:00:
         6e:dc:19:e6:7e:96:9a:db:aa:32:20:e0:ef:f7:aa:10:8d:f3:
         63:5d:ce:79:72:6e:7e:30:e5:ac:e1:37:65:68:38:5d:3d:12:
         cb:7a:20:35:3d:68:db:6d:a8:36:da:96:c6:a7:33:8d:e3:d0:
         4f:23:72:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:41:59 2025 by rpki-client