This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
File:                     _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json)
Hash identifier:          2blHQ4lz4wv+/fB52o9jtt5XFklQRKD2i2z//5aFaeI=
Subject key identifier:   46:A4:D2:67:D6:C6:F6:AA:45:61:41:4A:23:4D:39:29:B7:3D:7C:95
Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
Certificate issuer:       /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
Manifest number:          0175
Signing time:             Sun 25 Jan 2026 03:06:59 +0000
Manifest this update:     Sun 25 Jan 2026 03:06:58 +0000
Manifest next update:     Sun 01 Feb 2026 03:06:58 +0000
Files and hashes:         1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: XgBBVp6WZthhJesC3V9mUk+vo7XElSarwPTPjPm/xIM=)
                          2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: hpe6vUCTlJU5v5Hb9V2/vN5eXEjUh3RIbUmeU5JZjjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
                          rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
        Validity
            Not Before: Jan 25 03:06:58 2026 GMT
            Not After : Feb  1 03:06:58 2026 GMT
        Subject: CN=697588d2-d6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:62:18:4d:9d:54:27:f2:b6:0e:ec:47:f6:
                    e2:8d:1c:e9:4b:75:94:3a:bf:92:12:e3:48:e2:c1:
                    66:4c:91:f5:80:72:e1:eb:58:63:ee:35:d1:74:37:
                    74:74:f4:92:90:a7:02:8b:30:0e:cc:0e:42:10:83:
                    68:7a:af:73:67:c3:42:dd:fa:e3:50:61:09:cf:bd:
                    54:70:57:42:86:d3:08:13:65:aa:99:75:d8:a8:17:
                    0b:be:3a:f0:4e:3e:d7:30:76:94:5e:6c:77:fa:c6:
                    8d:f7:33:5b:72:84:07:20:9a:c5:b4:4b:ec:3c:35:
                    9c:ae:4a:de:36:10:6e:59:0a:9b:cb:d5:81:5f:0e:
                    d1:be:89:eb:5a:d8:b0:b5:bb:ab:5b:dd:19:67:07:
                    43:62:fd:c1:e7:50:e9:49:5f:fd:3e:46:1f:e8:ff:
                    82:c9:d3:e2:a7:d9:5f:23:40:cb:e7:81:7c:b9:2f:
                    f7:b5:a0:df:a8:55:28:81:9b:fd:66:c0:2e:24:88:
                    b0:3e:71:d8:b4:b4:4a:8d:35:03:99:28:7c:1f:05:
                    9b:ea:31:ca:01:d6:67:75:65:a2:c4:81:09:e5:cf:
                    48:5a:15:37:9e:b7:bc:e5:e5:c1:77:17:cf:12:7a:
                    55:fb:c0:f2:64:fc:70:7a:8d:98:10:11:8a:99:8b:
                    61:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A4:D2:67:D6:C6:F6:AA:45:61:41:4A:23:4D:39:29:B7:3D:7C:95
            X509v3 Authority Key Identifier:
                keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:61:02:79:c1:e7:e0:72:9a:db:2f:20:7f:a6:db:d1:9e:ac:
         27:92:e3:0f:2f:09:c6:a2:ac:0e:99:56:c3:ec:63:99:e0:2a:
         64:cc:67:03:8e:5f:6e:7f:97:f8:6e:7e:14:f9:ed:e3:8e:cf:
         54:52:bd:a9:3b:94:62:36:be:80:29:a2:bd:8d:40:40:33:c1:
         ae:39:85:30:24:04:34:fc:14:bd:c9:52:ae:5a:fb:16:ab:a0:
         c1:f9:c8:57:ff:41:5f:3a:77:03:5e:28:98:00:93:cd:47:26:
         e2:7b:f2:11:8a:2b:c3:9d:7b:a5:92:0b:ec:0a:e1:21:f8:2a:
         23:5c:b2:ea:85:64:33:f9:3f:76:06:2a:25:8e:1d:98:cb:8c:
         f7:2b:b4:3b:77:8a:08:00:39:e0:55:30:bb:c4:0d:5f:77:ad:
         60:2a:ef:3a:b2:54:c6:ab:5b:f8:c9:70:02:3a:8b:07:48:36:
         2e:42:04:ea:8c:e7:cf:f1:69:49:41:f3:d2:3d:35:09:aa:7c:
         78:23:17:a5:be:40:97:44:22:20:5f:cc:72:42:69:dc:f3:7e:
         e0:fb:d4:23:d3:9b:3c:64:06:89:76:3e:e0:45:e7:eb:ab:ce:
         a1:94:ae:67:af:75:3f:60:16:2f:f9:d2:42:27:ae:7a:ca:45:
         c3:d8:96:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:53 2026 by rpki-client