This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
File:                     OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json)
Hash identifier:          R+aO9tiqqq9E1XLv811uUSO/YjX14E/4eBY6D8U4Lw4=
Subject key identifier:   99:74:74:CB:E8:3B:D9:47:55:03:93:70:AE:0B:9F:9D:F3:03:D9:38
Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
Certificate issuer:       /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
Manifest number:          0883
Signing time:             Sat 24 Jan 2026 19:59:50 +0000
Manifest this update:     Sat 24 Jan 2026 19:59:50 +0000
Manifest next update:     Sat 31 Jan 2026 19:59:50 +0000
Files and hashes:         1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: GXkei1u16MGuXBxooTD1NYncrX3FV/0wqaH01L/ZsCo=)
                          2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: OwVRnVKX5TIRRxRa7tYPZCkquxRI/+jnc5rYmXmYkKM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
                          rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
        Validity
            Not Before: Jan 24 19:59:50 2026 GMT
            Not After : Jan 31 19:59:50 2026 GMT
        Subject: CN=697524b6-c574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:9b:e8:ba:c9:aa:81:6f:38:45:2d:9d:70:
                    5c:eb:4a:f6:76:e1:5e:82:8d:bc:25:15:e9:d7:67:
                    7a:07:03:68:78:06:46:43:b9:c9:c8:e3:0a:23:16:
                    ff:f5:ba:2f:56:a8:fa:6d:5f:96:3d:7b:38:6d:3b:
                    11:ad:00:f3:84:9c:33:71:64:82:d4:56:43:d9:49:
                    54:14:d9:5d:e7:96:ef:ad:a4:8f:89:c0:b0:05:24:
                    32:b2:a4:05:38:9a:96:df:fa:06:7f:10:a1:22:25:
                    3c:33:a7:1a:bf:35:1d:ad:99:61:70:a6:91:7d:50:
                    5e:0b:38:bc:ca:31:f2:d9:f8:40:a8:b3:9b:ba:3e:
                    c5:e5:76:4d:88:43:8a:c6:71:73:0d:c4:42:65:20:
                    93:f8:48:68:a2:68:5c:90:99:1c:87:ee:f4:e7:cf:
                    77:86:7f:a9:7f:18:af:2e:6b:8a:98:b1:6a:01:3f:
                    da:80:a4:7f:ef:e5:8b:3a:bc:a4:2c:34:e5:97:a8:
                    71:e0:80:63:25:c6:bd:b5:a9:8a:ea:95:69:b1:24:
                    17:77:5e:36:0c:b6:00:92:9d:60:0f:f6:86:d6:8c:
                    78:eb:e0:5a:83:06:c4:a0:7b:a9:e1:e6:e6:ba:0e:
                    ae:5e:3d:e6:ce:56:3c:22:32:7f:18:44:98:8f:ae:
                    ce:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:74:74:CB:E8:3B:D9:47:55:03:93:70:AE:0B:9F:9D:F3:03:D9:38
            X509v3 Authority Key Identifier:
                keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:29:b1:55:52:4c:86:19:b8:32:82:6c:73:6c:4d:c6:9f:14:
         cf:79:e8:fa:93:5c:d9:b3:e2:6b:1e:9b:ca:2c:9c:af:a1:b4:
         03:f2:c3:de:ed:28:ff:cc:c5:db:dd:73:cd:06:50:7b:74:eb:
         ab:cf:3e:3b:d3:06:f7:4c:14:eb:25:2f:3f:23:1d:49:c2:38:
         6d:f7:52:fe:46:26:05:1a:35:20:01:43:2d:08:26:ed:9b:86:
         86:25:aa:44:54:32:e7:a7:1f:e3:d9:90:75:2b:f5:aa:fe:fe:
         fc:3d:a9:f2:a4:14:19:8f:df:4a:9c:1c:d2:01:aa:11:19:79:
         93:1b:fb:fc:e9:99:25:f8:52:d1:57:ed:d2:84:b5:d3:cd:84:
         7d:f5:09:fc:ee:f0:72:fb:5f:ac:e0:d1:c4:2e:88:5b:8f:17:
         47:c4:4f:0d:ab:a9:4e:91:4c:d5:dc:d3:13:42:89:cb:9a:50:
         fa:36:1d:47:57:66:64:e9:cb:ca:da:20:38:18:06:9c:3e:28:
         ee:28:1a:14:61:94:99:3d:c4:9d:7f:27:d3:e4:f3:31:e4:77:
         83:3a:3c:37:33:b4:97:99:06:79:ba:9d:f7:d9:ce:f7:50:08:
         1f:29:16:93:f8:26:43:b1:22:cf:66:fd:79:41:92:fa:7c:8d:
         14:f7:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:19 2026 by rpki-client