This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File:                     OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier:          TILPKpLPhujv0elpTx0vgQgmsExQRAkR2bjKxWkdyZY=
Subject key identifier:   2E:97:A1:7F:B4:B5:21:DA:5E:AA:73:0E:B4:78:08:CF:73:61:5E:F2
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer:       /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial:       1AEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number:          1AB1
Signing time:             Sat 06 Dec 2025 15:58:23 +0000
Manifest this update:     Sat 06 Dec 2025 15:58:22 +0000
Manifest next update:     Sat 13 Dec 2025 15:58:22 +0000
Files and hashes:         1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: 9o7j5lKExhW6iNcwZpD95EN6f6TIClMjLrZcw+Dollk=)
                          2: 6C897E54597B11EDB603273AC4F9AE02.roa (hash: mlfmqDTHF8r4WiB66Nr0P3hrVzV24v6mqRzRLKrnHpE=)
                          3: 6E44CE88597B11EDB603273AC4F9AE02.roa (hash: dKPGvO7USSf0Gvl/Kq6maRursYdlv2phLnH5EYaGXWM=)
                          4: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: 3KQPIvcXhoeigK5nYecGIeVlvEMUeYlMi6hOC8mFEdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
                          rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6890 (0x1aea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
        Validity
            Not Before: Dec  6 15:58:22 2025 GMT
            Not After : Dec 13 15:58:22 2025 GMT
        Subject: CN=6934529f-f82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:73:88:97:df:16:7b:ac:92:e3:28:fc:70:c8:
                    d2:6e:e5:26:0c:c6:61:fe:5d:7c:b2:71:c9:45:2a:
                    64:58:d6:20:e4:e3:75:c8:85:f5:e5:2b:11:84:e7:
                    46:83:51:53:8b:1d:81:52:61:61:e1:a9:7d:f8:e8:
                    68:df:6d:f0:89:98:e0:8e:5d:0a:e3:95:48:b3:32:
                    a9:fb:29:f5:68:ff:ab:5b:54:10:53:b7:81:4b:5a:
                    3f:32:06:26:5c:5b:25:ce:ed:d7:3c:19:83:19:4e:
                    d6:38:3e:e8:5f:fb:81:86:98:71:1c:04:b5:26:0b:
                    88:1a:62:54:75:80:0f:61:ba:22:8f:13:ec:db:75:
                    3f:07:37:ec:9b:ab:5d:4a:d4:c5:75:d8:f6:be:8e:
                    db:2c:42:be:79:d2:7e:f4:45:04:0b:0d:93:b3:50:
                    51:77:c6:24:44:f6:e4:e7:22:0c:2b:61:10:8b:d9:
                    81:5a:e1:90:e4:51:66:2b:47:37:77:f2:df:0b:74:
                    f7:6d:2b:04:83:96:ec:a5:bb:c4:79:9c:6f:1d:b2:
                    cc:f0:f4:1e:14:c6:f8:4c:ef:90:bf:4d:8c:bf:b4:
                    b6:a3:e0:ab:f3:9b:bf:63:f3:0d:5c:41:70:24:9e:
                    ac:63:84:e9:fd:1f:82:2d:66:c8:2c:31:81:c9:16:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:97:A1:7F:B4:B5:21:DA:5E:AA:73:0E:B4:78:08:CF:73:61:5E:F2
            X509v3 Authority Key Identifier:
                keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5b:54:99:cc:a8:02:fd:cd:b3:ad:c4:b2:bb:7c:53:2d:9a:
         bd:bd:b5:85:b1:e7:49:16:48:04:c1:a4:aa:04:ac:03:0c:e4:
         7a:1c:d9:92:03:76:28:be:a0:92:16:bb:68:54:04:67:f0:d2:
         8a:ef:7e:01:01:0c:5c:46:96:27:dd:41:99:a6:ef:ca:3e:fc:
         07:ce:fc:3a:99:ad:6f:6c:a8:04:30:6d:ce:06:21:80:66:5c:
         d3:fd:52:be:bc:3d:5c:19:40:0f:a6:92:b8:c9:87:c9:74:96:
         16:07:5f:97:91:5e:f7:6b:f8:0a:6a:56:33:ce:a1:28:83:3d:
         36:f4:9a:a6:8f:56:c2:2a:8a:d8:5e:c6:36:eb:4b:4f:70:3f:
         30:86:12:37:0f:0c:84:ad:02:bd:55:bf:4f:e8:be:19:62:6b:
         82:57:82:ab:7b:2b:08:17:17:93:4c:23:d5:2d:d0:c0:25:b4:
         d0:fd:34:66:1f:0b:97:b6:cf:4e:60:2e:6b:66:ff:f4:c8:b7:
         5e:7f:5d:e2:24:04:87:f0:66:dc:c4:db:05:db:53:41:05:f0:
         e4:08:fc:80:a7:bf:59:27:54:c5:f7:7b:6e:c2:84:25:5c:75:
         3e:b3:48:b4:4c:6c:1d:ea:d4:d5:f5:10:fa:01:50:d5:e1:61:
         64:f2:b8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:48:50 2025 by rpki-client