This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
File:                     oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json)
Hash identifier:          6bEgvD2zxt+R0/93+WWQwWGKwViApL5/BiV7qHI0/Y0=
Subject key identifier:   C4:ED:0A:A3:0A:D1:56:EF:48:1E:73:C6:0A:15:DF:91:7F:41:5A:07
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       03A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
Manifest number:          0351
Signing time:             Thu 04 Dec 2025 23:34:36 +0000
Manifest this update:     Thu 04 Dec 2025 23:34:36 +0000
Manifest next update:     Thu 11 Dec 2025 23:34:36 +0000
Files and hashes:         1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: 894G+XgWiDODW23ftNyLiUg+QCgof+ks0GRc9PVdrTs=)
                          2: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: iyDMS6tOGnY0vV2tRBpkImtDJt2yb1m8IIZ76sEjG28=)
                          3: AF5AD402224711F0B0CDB07DC4F9AE02.roa (hash: Rd9F0rhnVp5Iq5KfDW7kM6BcAp4B6e5cA4C+HDxhcWk=)
                          4: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: 2idrkUiE1glbbdM/t25K//0O3gKsqe5+guvE9Yfyva4=)
                          5: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: emdOoNHeNPd2I/1TXnCpTax46mU70PVq1qcXN4YL9To=)
                          6: DEBDCC60BC4111F0A8ADE55FC4F9AE02.roa (hash: ZOfUt+OdJGvMmJWbCvq/OToGXjq0ZC1a/eXbPl1yA+k=)
                          7: A2352892BC4111F083435F5FC4F9AE02.roa (hash: PoXBvNvM11S30fAsOdLEwE7p0pDVh/CtWMksgnZYa0Y=)
                          8: B111111288B411EF80480527C4F9AE02.roa (hash: qLIDrHWS/i6A8fwW8H8k+xkymy4Akbi61wq5s13V2Ww=)
                          9: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: oa1DI9U4A4Nx6Hk3PHDp1mXpYhzRJyPS5jmqfG2Om0Y=)
                          10: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: dSfere7QhRvtorz+gmreSnCGYZIH1WofndwPCRU2nxo=)
                          11: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: /HSo5jxbj7peidwO9alg4qXB6CLHjHvT7Exk5bMgxFc=)
                          12: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: DFlr8Tn/hG96eJuSS2hv0WiijRfajfy1iDPzEugU79I=)
                          13: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: CJ9YN6FLH2mWQGJEIYwUy4MU0VtOp9beQcxD+Nz5y9o=)
                          14: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: IpxcD4cHmOeodB8ybIfLf30tVWg9Lc/8x7ghIc66rAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Dec  4 23:34:36 2025 GMT
            Not After : Dec 11 23:34:36 2025 GMT
        Subject: CN=69321a8c-c28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:e0:e5:ee:15:b2:14:b4:26:a4:5b:00:c0:
                    28:cc:b1:c4:de:2e:2d:06:8a:38:7d:c0:fe:84:84:
                    dd:a7:ce:9b:66:28:90:e3:a6:76:36:15:99:7c:a2:
                    b6:a8:d1:70:d5:06:97:69:87:cd:34:48:bf:e4:f3:
                    0b:e8:38:77:96:8e:db:83:98:43:22:11:97:60:a1:
                    fc:c4:7a:5a:a5:11:96:46:26:e9:9e:74:0b:64:e9:
                    c2:03:12:97:e3:60:9a:e0:e5:f3:10:a2:bf:5c:90:
                    1b:d0:4a:a5:6c:a5:fd:d9:3f:e4:83:3b:df:01:34:
                    0f:17:cf:a7:e1:01:5c:75:9e:f2:3b:39:e7:10:9d:
                    6b:16:6d:50:c2:a7:88:41:b0:b3:f8:19:2d:dd:59:
                    75:48:84:3f:30:ae:9a:63:9c:59:f1:16:cd:e0:41:
                    84:eb:99:62:83:95:4a:10:6e:d4:46:44:ae:aa:36:
                    44:46:0e:3a:7d:06:38:21:40:00:4f:78:d4:c1:46:
                    9f:f2:8c:c9:ef:08:15:45:1f:f3:2b:3f:94:9b:87:
                    04:6c:4e:12:94:d3:69:25:1c:2a:30:28:92:8a:e4:
                    dc:4c:dd:3f:b6:f6:97:aa:38:d3:2d:e4:8e:8c:e9:
                    d6:4c:71:ef:f5:3d:e4:aa:76:b5:eb:a9:a9:f8:46:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:ED:0A:A3:0A:D1:56:EF:48:1E:73:C6:0A:15:DF:91:7F:41:5A:07
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:b0:8d:86:af:56:6a:ea:c8:b1:5c:69:24:d5:a5:79:7f:
         01:f0:6f:04:78:c8:04:a3:c6:41:f7:ca:26:46:6c:ec:19:a3:
         39:2d:45:33:16:08:40:bb:fe:69:9e:d0:a5:02:46:59:1f:1a:
         dd:89:7d:ac:c4:fc:38:47:e2:0d:93:3b:c8:23:c7:56:86:e6:
         b0:1c:48:7e:50:f5:37:8f:ae:04:66:dc:5a:ff:0c:f8:10:7f:
         9c:5d:bf:3e:75:23:20:cf:2c:44:ea:71:3e:a6:ff:db:89:48:
         b8:39:5e:09:58:ee:14:06:b0:27:ce:ee:38:2e:2b:7e:96:93:
         47:48:9d:23:de:fc:99:8a:bb:ed:be:64:31:21:bb:df:fa:c0:
         7d:40:2a:af:3a:b2:8b:53:2c:f6:55:5b:c2:84:52:51:c3:25:
         1a:90:d2:fb:8e:3c:19:ce:a7:59:b8:bf:72:b1:f2:da:61:25:
         d9:d2:eb:8d:70:a5:43:67:1e:b2:03:ab:05:c2:5c:b3:63:a8:
         2e:0e:bf:52:ed:04:79:b3:69:25:c2:8a:0f:b0:cf:93:8d:5c:
         74:d5:a4:1a:82:39:d6:ea:f1:d6:0f:5d:eb:11:8e:c6:a9:65:
         61:11:ad:b6:e0:fd:8d:5a:63:d3:e4:b2:9c:f8:14:d2:f1:4c:
         01:21:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:28 2025 by rpki-client