This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft
File:                     oUDUgGrgz2DnP-FYvyQvOag60AU.mft (raw, json)
Hash identifier:          BTjbX2qT13rVptw+Sw9yjuE4Rf+2NedJYD23StSoGmY=
Subject key identifier:   A6:67:28:52:04:66:F7:B9:5D:4D:D0:8F:BE:E5:3A:DE:C8:B1:3A:0E
Authority key identifier: A1:40:D4:80:6A:E0:CF:60:E7:3F:E1:58:BF:24:2F:39:A8:3A:D0:05
Certificate issuer:       /CN=A91E1B78/serialNumber=A140D4806AE0CF60E73FE158BF242F39A83AD005
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft
Manifest number:          7E
Signing time:             Fri 05 Dec 2025 04:41:20 +0000
Manifest this update:     Fri 05 Dec 2025 04:41:20 +0000
Manifest next update:     Fri 12 Dec 2025 04:41:20 +0000
Files and hashes:         1: oUDUgGrgz2DnP-FYvyQvOag60AU.crl (hash: SbQG6u1YHxtQk6NKcZ1s8fjEC3us/lmK2lqMFnaJELo=)
                          2: 47131A44145511F082FDAA7AC4F9AE02.roa (hash: btGSbXlYPwUm6r4aT9dqMB2WqeFs4xBX2s74blUbTR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1B78, serialNumber=A140D4806AE0CF60E73FE158BF242F39A83AD005
        Validity
            Not Before: Dec  5 04:41:20 2025 GMT
            Not After : Dec 12 04:41:20 2025 GMT
        Subject: CN=69326270-2001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:81:09:0b:ce:d1:1f:9f:11:16:94:72:2f:
                    ce:f7:e7:61:bf:f3:ec:89:a4:8b:49:88:1d:b3:88:
                    24:2b:31:b9:0c:bd:fd:24:07:b7:5d:aa:0a:f4:b1:
                    64:34:34:f0:41:22:9c:d7:e7:be:50:f3:79:d0:33:
                    3a:2b:eb:1e:cb:b0:98:0b:d5:c5:29:98:fb:92:72:
                    9d:01:5b:97:2c:b8:11:62:96:81:81:60:21:3f:d5:
                    0f:e9:c3:0c:ed:ae:b3:3c:93:33:64:3d:e5:6d:47:
                    9c:be:1b:de:de:58:ca:e7:82:12:6b:c3:f2:1e:3a:
                    d3:0d:c6:04:e3:b6:8c:f9:fe:04:4f:9d:64:09:89:
                    9e:db:9f:94:57:30:b0:e1:34:d4:8f:65:3a:e2:48:
                    19:61:9a:36:27:aa:f8:67:70:ac:16:25:70:d4:b8:
                    b8:ba:62:fb:b2:9f:ff:bc:18:98:e8:88:cb:b6:ba:
                    56:89:d5:cf:71:44:37:1b:bb:a5:db:84:be:61:88:
                    59:be:95:06:0a:9b:b4:e9:a7:e7:ac:3a:24:9a:fe:
                    be:47:4e:2d:e8:6f:a8:36:66:78:03:81:e0:d6:0d:
                    5b:28:69:17:97:bd:ac:e6:1e:ec:70:61:2e:e6:90:
                    95:6d:74:38:64:16:35:b0:c2:f6:0c:28:15:21:2c:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:67:28:52:04:66:F7:B9:5D:4D:D0:8F:BE:E5:3A:DE:C8:B1:3A:0E
            X509v3 Authority Key Identifier:
                keyid:A1:40:D4:80:6A:E0:CF:60:E7:3F:E1:58:BF:24:2F:39:A8:3A:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b0:68:10:12:f7:66:52:82:18:e7:02:7b:0d:15:1d:50:5d:
         7f:26:16:c6:7e:a3:3a:ad:b9:82:b7:cd:ec:70:4c:34:38:a1:
         f4:fa:0d:8f:46:67:e5:4e:d1:2a:b7:e4:b3:58:61:73:a0:42:
         36:35:14:e8:e8:47:59:ee:e5:f4:c1:65:7e:9c:fd:07:e4:75:
         be:17:f1:72:0e:66:ba:37:7e:2e:d1:87:de:fa:42:5c:92:77:
         bd:00:5b:0a:9f:4d:2d:98:16:a9:63:6b:7f:50:7e:ea:fd:50:
         2e:23:52:96:84:f2:ee:f4:ca:7b:09:d0:d4:2d:51:77:dd:34:
         95:40:8a:86:e2:79:c4:55:67:04:8a:ea:5d:5c:bf:99:af:9b:
         a1:7d:56:f4:07:88:ef:36:40:ed:1b:ab:1e:6e:f5:f3:48:06:
         23:46:c3:bc:bc:a5:77:aa:02:9d:46:7b:88:17:b6:8f:ca:e1:
         5a:14:bc:c9:68:0a:aa:1d:2f:ad:f5:6f:e5:5a:14:44:8f:58:
         e9:05:51:bf:ac:ab:43:8f:52:70:69:f5:1b:7a:68:a2:28:23:
         f7:72:7c:48:f9:12:51:fa:fa:5d:76:0d:fc:c5:85:7e:c9:9e:
         10:4b:9c:ac:12:6d:7c:7a:63:f8:f5:2d:6d:de:39:c6:e3:93:
         bd:b7:c6:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFCNzgxMTAvBgNVBAUTKEExNDBENDgwNkFFMENGNjBFNzNGRTE1OEJGMjQyRjM5
QTgzQUQwMDUwHhcNMjUxMjA1MDQ0MTIwWhcNMjUxMjEyMDQ0MTIwWjAYMRYwFAYD
VQQDEw02OTMyNjI3MC0yMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAraqBCQvO0R+fERaUci/O9+dhv/PsiaSLSYgds4gkKzG5DL39JAe3XaoK9LFk
NDTwQSKc1+e+UPN50DM6K+sey7CYC9XFKZj7knKdAVuXLLgRYpaBgWAhP9UP6cMM
7a6zPJMzZD3lbUecvhve3ljK54ISa8PyHjrTDcYE47aM+f4ET51kCYme25+UVzCw
4TTUj2U64kgZYZo2J6r4Z3CsFiVw1Li4umL7sp//vBiY6IjLtrpWidXPcUQ3G7ul
24S+YYhZvpUGCpu06afnrDokmv6+R04t6G+oNmZ4A4Hg1g1bKGkXl72s5h7scGEu
5pCVbXQ4ZBY1sML2DCgVISwgUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZnKFIE
Zve5XU3Qj77lOt7IsToOMB8GA1UdIwQYMBaAFKFA1IBq4M9g5z/hWL8kLzmoOtAF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI3OC9DOERGNDFBQzE0
NTQxMUYwQjNCN0M2NzlDNEY5QUUwMi9vVURVZ0dyZ3oyRG5QLUZZdnlRdk9hZzYw
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29VRFVnR3JnejJEblAtRll2eVF2T2FnNjBBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUI3OC9DOERGNDFBQzE0NTQxMUYwQjNCN0M2NzlDNEY5QUUwMi9vVURVZ0dyZ3oy
RG5QLUZZdnlRdk9hZzYwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLsGgQEvdmUoIY5wJ7DRUdUF1/JhbGfqM6rbmCt83scEw0OKH0+g2P
RmflTtEqt+SzWGFzoEI2NRTo6EdZ7uX0wWV+nP0H5HW+F/FyDma6N34u0Yfe+kJc
kne9AFsKn00tmBapY2t/UH7q/VAuI1KWhPLu9Mp7CdDULVF33TSVQIqG4nnEVWcE
iupdXL+Zr5uhfVb0B4jvNkDtG6sebvXzSAYjRsO8vKV3qgKdRnuIF7aPyuFaFLzJ
aAqqHS+t9W/lWhREj1jpBVG/rKtDj1JwafUbemiiKCP3cnxI+RJR+vpddg38xYV+
yZ4QS5ysEm18emP49S1t3jnG45O9t8aq
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:54:16 2025 by rpki-client