This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
File:                     UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft (raw, json)
Hash identifier:          ku5ahibWpZoYuyRuwP1A9ILbb/61jB32EXlmJ0rkby4=
Subject key identifier:   35:A0:BB:56:32:D8:52:73:6C:C5:B8:99:7B:C6:2C:28:E0:92:2E:DB
Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Certificate issuer:       /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
Manifest number:          0126
Signing time:             Fri 05 Dec 2025 02:45:59 +0000
Manifest this update:     Fri 05 Dec 2025 02:45:58 +0000
Manifest next update:     Fri 12 Dec 2025 02:45:58 +0000
Files and hashes:         1: UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl (hash: zA8fmuR1UnmNg4Rirf5ZwzoFADJybyL0bv+nVXSgcY0=)
                          2: 18141426114211EFA0FF3956C4F9AE02.roa (hash: Eui373BUJyp7nsyCOnfLERZIVy0mxRMvMhZrx/SFoPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1630, serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
        Validity
            Not Before: Dec  5 02:45:58 2025 GMT
            Not After : Dec 12 02:45:58 2025 GMT
        Subject: CN=69324767-6154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:be:63:4a:a5:b2:f7:7e:7b:97:6d:3c:18:
                    bf:e5:6a:aa:33:5c:27:11:5f:2e:7d:70:f1:1e:82:
                    65:52:58:98:0b:11:3c:95:d4:32:08:2c:15:62:2b:
                    39:67:f1:91:ca:45:51:23:60:db:d8:26:a7:2d:53:
                    79:63:d6:75:4f:db:c1:48:10:7b:da:8e:5b:7b:a7:
                    88:3f:bd:28:54:f2:cd:e7:a4:a8:79:30:1b:2d:56:
                    41:a9:3f:a8:66:4d:e8:c6:b0:f2:ed:d7:75:bc:72:
                    9b:09:9c:0d:76:05:e7:51:92:15:5a:04:c3:44:6a:
                    e9:61:57:5f:a0:1d:4e:b4:ae:06:c7:cf:90:3c:37:
                    f7:ab:10:fb:68:3a:e8:4b:7e:1f:af:d0:c0:2d:de:
                    5d:7a:d7:b9:92:bc:5e:3f:b0:fc:19:72:38:ee:d2:
                    1d:3c:0d:a0:de:77:4d:85:74:da:2f:23:b8:aa:5a:
                    71:e7:d2:ed:97:87:95:ab:5a:20:83:91:cd:e7:b5:
                    26:9f:21:cc:bd:64:45:76:9b:12:0b:64:b4:40:70:
                    1a:fa:df:ef:68:8e:89:0c:5a:83:70:cc:ff:29:c1:
                    5f:3e:96:e0:e3:36:26:56:4e:42:cc:c6:d3:5c:0c:
                    05:ba:80:4d:5c:5b:19:1c:e1:0d:85:70:ef:4f:6c:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A0:BB:56:32:D8:52:73:6C:C5:B8:99:7B:C6:2C:28:E0:92:2E:DB
            X509v3 Authority Key Identifier:
                keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:28:4c:66:97:75:22:41:e7:5b:d4:ad:5b:c5:dd:f7:7a:8a:
         8a:bf:a7:22:67:ad:3c:8c:49:09:19:9b:27:f5:59:d1:04:5e:
         1f:4a:9e:78:ea:fd:68:25:6a:86:63:29:7f:79:50:9a:48:16:
         3d:6e:54:98:6c:2d:95:c7:67:2c:c1:f8:91:75:14:ca:1f:d3:
         70:ef:4d:6b:e2:6f:65:ba:0a:1e:9d:52:f2:39:98:43:2a:dd:
         f2:ac:e6:55:58:ee:a9:fb:b9:d4:93:8c:6f:c7:a3:c5:df:21:
         04:73:39:f8:d6:6e:5f:3a:d2:54:63:46:f7:cc:2d:e2:6b:70:
         93:a9:c0:4b:69:8e:61:2b:ac:6d:7b:91:59:ae:32:0c:45:6e:
         de:1a:dd:4f:d8:90:cd:f8:f8:42:5a:2e:83:e0:c5:7e:55:3a:
         ae:d1:a3:4c:b9:ce:1e:23:04:6d:f3:cd:04:7d:10:bc:ff:35:
         2a:e9:22:92:63:c8:64:ab:a7:b8:0c:65:a0:98:bc:d5:2a:25:
         9d:86:56:95:10:93:dc:22:9e:e7:3c:04:4a:74:96:f6:05:fc:
         30:b8:9e:a7:8c:26:0e:fb:f6:e8:bc:b4:e7:35:5a:0a:3a:ab:
         ad:44:b5:03:ac:da:89:19:51:f3:6e:1c:1f:73:bd:9d:87:27:
         83:a3:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:25:42 2025 by rpki-client