This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
File:                     odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json)
Hash identifier:          SZ7xZsmsBgJvJqkL4B5noMIPlVjEz0m1/qVqaNMswKg=
Subject key identifier:   A8:70:6F:58:E3:61:F4:53:7C:F1:97:10:FB:77:C5:F6:10:A8:6B:87
Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8
Certificate issuer:       /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
Manifest number:          EA
Signing time:             Fri 05 Dec 2025 03:24:30 +0000
Manifest this update:     Fri 05 Dec 2025 03:24:29 +0000
Manifest next update:     Fri 12 Dec 2025 03:24:29 +0000
Files and hashes:         1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: FWdGYu0ITcMYXN0typ2tG2WUwwztHc2+NCOEU03HLA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl
                          rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0DE0, serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
        Validity
            Not Before: Dec  5 03:24:29 2025 GMT
            Not After : Dec 12 03:24:29 2025 GMT
        Subject: CN=6932506e-b4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:09:71:8e:9d:a0:8f:32:e5:f6:c6:42:25:
                    29:ef:d0:a3:22:10:41:a5:0f:de:8c:41:8e:93:32:
                    3f:65:40:66:0b:47:f6:fd:45:cc:d5:f2:bb:db:ab:
                    1f:32:a4:19:b4:54:ef:89:48:2a:74:6a:be:91:78:
                    74:4a:b7:79:0f:51:a0:f8:f3:d0:25:87:87:c9:78:
                    a0:b9:76:37:16:04:7b:66:fe:04:40:3d:fc:97:cd:
                    77:c3:76:c2:a0:6d:04:6b:78:d7:8e:62:ce:16:7b:
                    4a:7a:63:d5:34:ec:9f:b9:de:0b:70:72:01:1e:3e:
                    f5:57:d0:d7:6a:03:53:d9:e0:66:e3:61:0a:7b:a5:
                    af:75:ca:37:87:32:b3:32:d9:17:f9:49:b0:08:05:
                    18:20:d5:e4:72:bd:c6:45:5f:af:09:b1:bc:5b:4a:
                    09:7f:55:49:f2:09:a9:01:3a:b2:a7:0c:dd:59:05:
                    6b:de:0d:d5:24:27:ca:ea:94:9e:5c:46:c1:58:bc:
                    1b:d9:4f:da:c0:4b:71:0c:ed:a3:ba:d0:af:db:eb:
                    c2:4d:29:d4:88:18:4d:bd:95:f5:2b:60:47:5a:1a:
                    ff:5a:82:b2:a8:8e:0d:7d:3a:c4:8e:22:dd:07:c6:
                    79:c6:93:2e:54:c0:5c:81:74:4d:94:ce:4d:16:88:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:70:6F:58:E3:61:F4:53:7C:F1:97:10:FB:77:C5:F6:10:A8:6B:87
            X509v3 Authority Key Identifier:
                keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:87:3e:83:b0:92:bc:7f:92:f8:1b:af:e2:2c:bf:47:53:d5:
         8b:ba:93:6c:90:ec:75:d8:4c:91:81:41:bf:c2:e1:6a:c9:fb:
         b5:84:b4:86:19:27:eb:98:05:db:e4:5e:78:2e:98:12:b3:b1:
         6e:ba:00:d1:67:36:22:67:d9:f6:7c:34:ec:13:93:0e:a2:68:
         7d:cd:e4:2e:e4:01:26:04:22:ac:36:5d:e8:71:85:96:19:51:
         27:72:ab:4b:34:70:94:e1:6f:09:70:64:7d:15:db:da:27:65:
         3f:d4:f9:ae:1b:f0:ba:35:05:e2:52:07:1d:db:b2:58:a4:98:
         eb:51:a5:4c:5e:4c:49:c1:af:0b:51:c2:d7:88:b6:fc:32:a6:
         c9:2f:7e:58:a5:4a:49:ad:de:b1:4f:59:c6:1d:15:ef:20:1b:
         61:bf:c7:20:53:62:8a:9f:54:c6:73:70:f9:c3:77:14:e0:77:
         8e:d6:c9:15:c4:fa:2f:9d:1a:c2:1d:ca:6c:cd:ac:bf:36:aa:
         28:7e:50:8b:2d:90:0e:49:ae:5c:fd:ed:f5:c2:d5:62:b4:33:
         78:4a:11:b5:ee:b8:70:7c:d1:3e:aa:5d:06:8a:03:f8:73:92:
         f0:9a:e5:be:2d:a4:8d:18:78:9e:c7:2f:83:81:cd:16:5a:90:
         36:50:98:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBERTAxMTAvBgNVBAUTKEExRDI1REUzQTU1OUZEQUYzMDQ0OUQ5NDc3RDE3NkVB
Mzc4OTcxRjgwHhcNMjUxMjA1MDMyNDI5WhcNMjUxMjEyMDMyNDI5WjAYMRYwFAYD
VQQDEw02OTMyNTA2ZS1iNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvB4JcY6doI8y5fbGQiUp79CjIhBBpQ/ejEGOkzI/ZUBmC0f2/UXM1fK726sf
MqQZtFTviUgqdGq+kXh0Srd5D1Gg+PPQJYeHyXiguXY3FgR7Zv4EQD38l813w3bC
oG0Ea3jXjmLOFntKemPVNOyfud4LcHIBHj71V9DXagNT2eBm42EKe6Wvdco3hzKz
MtkX+UmwCAUYINXkcr3GRV+vCbG8W0oJf1VJ8gmpATqypwzdWQVr3g3VJCfK6pSe
XEbBWLwb2U/awEtxDO2jutCv2+vCTSnUiBhNvZX1K2BHWhr/WoKyqI4NfTrEjiLd
B8Z5xpMuVMBcgXRNlM5NFog9twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhwb1jj
YfRTfPGXEPt3xfYQqGuHMB8GA1UdIwQYMBaAFKHSXeOlWf2vMESdlHfRduo3iXH4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMERFMC83QTY1RTkzQzZB
ODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9vZEpkNDZWWl9hOHdSSjJVZDlGMjZqZUpj
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29kSmQ0NlZaX2E4d1JKMlVkOUYyNmplSmNmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MERFMC83QTY1RTkzQzZBODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9vZEpkNDZWWl9h
OHdSSjJVZDlGMjZqZUpjZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAxhz6DsJK8f5L4G6/iLL9HU9WLupNskOx12EyRgUG/wuFqyfu1hLSG
GSfrmAXb5F54LpgSs7FuugDRZzYiZ9n2fDTsE5MOomh9zeQu5AEmBCKsNl3ocYWW
GVEncqtLNHCU4W8JcGR9FdvaJ2U/1PmuG/C6NQXiUgcd27JYpJjrUaVMXkxJwa8L
UcLXiLb8MqbJL35YpUpJrd6xT1nGHRXvIBthv8cgU2KKn1TGc3D5w3cU4HeO1skV
xPovnRrCHcpszay/NqooflCLLZAOSa5c/e31wtVitDN4ShG17rhwfNE+ql0GigP4
c5LwmuW+LaSNGHiexy+Dgc0WWpA2UJh8
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:21 2025 by rpki-client