This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File:                     o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier:          +qUgpOKkd1Wr/V8JpdO1R3bfULgF245H8hCf0stDsMM=
Subject key identifier:   CA:BF:B1:63:2D:4C:2F:BE:08:21:06:B3:50:CD:49:F9:81:92:A1:14
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer:       /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial:       0394
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number:          038D
Signing time:             Thu 04 Dec 2025 23:13:36 +0000
Manifest this update:     Thu 04 Dec 2025 23:13:35 +0000
Manifest next update:     Thu 11 Dec 2025 23:13:35 +0000
Files and hashes:         1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: zd+cPQiQiH4N+oouId9ekRmCp3f6tdeokOEyI41JCg0=)
                          2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: DhDV/fmV49KF53LCzY2iPFhFE+P1oeX1k0nYiQfDFpM=)
                          3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: xTkFFGEwoSM0XslM057b0r3pWef291E2LlOQWfzYUXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916 (0x394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
        Validity
            Not Before: Dec  4 23:13:35 2025 GMT
            Not After : Dec 11 23:13:35 2025 GMT
        Subject: CN=6932159f-ef18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:7a:62:b0:4d:48:00:94:16:d3:a3:d0:75:
                    66:82:42:45:c7:48:4c:6f:f0:e0:9b:f2:51:c0:72:
                    3c:f5:46:8b:39:86:e9:9e:3d:07:09:2c:80:51:93:
                    9a:b2:ac:08:23:4f:6f:7a:a3:29:ec:b7:0f:7c:70:
                    8c:69:c6:78:da:2a:15:2b:a6:bd:6c:fb:ef:e3:d1:
                    db:7e:4c:28:3a:75:37:e0:eb:9c:a8:8b:1b:2e:b6:
                    8c:41:c7:6a:ff:b4:46:66:42:90:f3:4a:4b:88:d8:
                    1a:ad:dd:d6:a1:32:0e:d5:28:59:5d:93:14:e9:02:
                    5f:b6:ab:eb:aa:03:db:ca:06:c2:0c:44:3d:8e:7c:
                    e9:6c:d5:30:02:ca:5f:5f:b3:e3:d6:a6:a8:a4:6e:
                    b8:ef:3d:97:55:44:8d:4e:7a:dd:2d:d6:61:7e:fc:
                    6b:ba:28:2e:c9:fa:3b:a2:ec:d9:98:79:c6:0b:98:
                    57:7b:6f:ba:27:95:4c:7a:32:ef:5a:74:8d:4e:b5:
                    32:d6:f0:e5:c0:81:91:32:e4:3f:eb:97:2a:53:26:
                    8e:7e:e9:4e:92:3f:cd:6d:d9:48:cb:c5:d0:6c:8e:
                    12:b1:77:54:c9:d2:02:40:bf:ca:02:b3:99:13:d4:
                    de:ab:cd:2b:69:66:6b:ac:1c:69:25:c3:28:ec:a5:
                    51:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BF:B1:63:2D:4C:2F:BE:08:21:06:B3:50:CD:49:F9:81:92:A1:14
            X509v3 Authority Key Identifier:
                keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:84:a4:6b:c7:a5:c8:9b:3e:23:ff:3d:70:d0:61:d2:01:b1:
         52:14:3c:28:e9:6d:7a:41:81:3e:a4:05:25:81:d8:aa:95:75:
         7e:e6:ab:fc:91:d1:6d:64:cf:ad:bd:89:b5:49:52:91:1f:a0:
         7c:36:b8:7f:93:f7:db:db:84:bc:01:30:a3:25:7b:14:22:76:
         a1:3a:a9:ad:16:74:1a:a8:af:45:27:7f:fd:b3:ff:10:df:b0:
         41:c1:7d:88:b5:9e:99:ba:19:22:eb:c2:7d:b6:95:46:08:ec:
         2a:6c:0f:28:e7:b9:9c:39:0b:39:d9:16:8a:7b:fd:a7:ba:30:
         82:79:c1:ed:ab:11:3d:c3:1b:fc:8f:cb:bb:0a:97:87:94:41:
         2b:52:90:71:d5:8e:af:60:4e:70:e5:a3:ba:94:8d:2c:98:00:
         2c:92:d8:ee:8d:27:aa:8d:d8:19:30:6f:59:e0:fc:cd:00:1f:
         9b:32:72:6f:d1:95:68:e3:9b:9b:3c:8a:5a:3d:59:be:c6:6b:
         6e:d0:c9:a6:ab:d6:dd:50:06:cf:ea:0a:80:e4:45:cb:6c:67:
         54:3c:c1:ee:a9:ee:71:4f:60:22:68:1e:01:12:00:86:a2:c5:
         13:3a:d1:d7:2f:a4:32:c4:b9:f1:d6:01:49:22:15:5c:fb:e8:
         ea:23:f2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:57 2025 by rpki-client