This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
File:                     owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json)
Hash identifier:          nZEffNDQ3//JwDRBL5N7zJb4JK6sJFc+Sfuxa1MkcdE=
Subject key identifier:   2A:30:D5:34:B0:07:84:2D:D8:E0:36:1E:76:CF:90:CD:2A:E0:E8:4D
Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
Certificate issuer:       /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1
Certificate serial:       0CE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
Manifest number:          0CDF
Signing time:             Sat 24 Jan 2026 17:47:30 +0000
Manifest this update:     Sat 24 Jan 2026 17:47:30 +0000
Manifest next update:     Sat 31 Jan 2026 17:47:30 +0000
Files and hashes:         1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: Akrg0EwxtG3Jh8ULq7oEyjNSeHlZhxP9n8Dzn53BT2Q=)
                          2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
                          rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3305 (0xce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1
        Validity
            Not Before: Jan 24 17:47:30 2026 GMT
            Not After : Jan 31 17:47:30 2026 GMT
        Subject: CN=697505b2-aa57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:f4:a2:01:84:26:37:3c:19:04:13:f6:d2:
                    a0:f9:8b:3f:d1:f5:2d:f1:e7:c6:25:52:0f:bb:2e:
                    42:14:5f:16:ad:ae:76:96:66:5d:9c:e5:81:a8:b6:
                    18:fa:ce:be:81:03:2a:47:a0:44:5d:6a:fb:18:d7:
                    2d:fa:57:a7:28:00:0c:54:dc:8a:d8:6a:15:00:d4:
                    74:56:97:7e:e3:42:0e:be:40:33:18:5e:20:3b:9c:
                    24:64:7a:f1:80:08:19:d8:ad:2a:69:c9:88:c8:4d:
                    12:59:8e:ac:52:4c:a9:81:44:37:00:6d:ac:9b:64:
                    04:37:35:66:30:c1:61:1b:da:ec:83:a9:9c:b4:81:
                    a6:89:42:66:c3:5b:9e:8f:4a:96:0b:40:73:9e:30:
                    5f:70:e7:d4:c5:25:4f:d5:da:11:92:e3:c4:e9:31:
                    5b:06:76:09:31:c7:29:01:87:ab:31:9e:6b:6b:b2:
                    ff:53:40:95:fc:2e:5d:1f:6c:fd:9e:96:72:43:b3:
                    fc:6c:6c:c9:a7:77:6f:09:b7:1a:de:69:99:8d:34:
                    d5:71:3f:04:eb:65:81:d6:6d:6d:a5:98:87:5e:a7:
                    9c:38:19:3c:5b:25:cc:6f:ac:ba:04:71:ba:ac:e8:
                    7b:b3:a2:24:19:6b:73:69:e5:81:9d:67:56:aa:2e:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:30:D5:34:B0:07:84:2D:D8:E0:36:1E:76:CF:90:CD:2A:E0:E8:4D
            X509v3 Authority Key Identifier:
                keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:06:32:49:b0:76:c7:37:24:f7:29:95:7e:8c:36:c9:49:
         d8:04:12:af:c3:fb:ff:99:ef:f0:74:97:f0:c8:88:2d:ee:43:
         c1:a3:ae:19:b7:b1:88:e0:03:08:9a:05:ef:24:0d:ab:49:5d:
         17:c3:93:38:ed:ec:dd:76:14:c7:7f:72:79:c2:04:ec:02:c7:
         58:d2:3d:57:66:c0:71:1a:f3:1d:37:4b:79:f2:c6:a0:f1:47:
         e2:0c:71:63:2c:a2:5e:90:84:92:f6:1a:c9:69:21:2b:b1:55:
         ab:59:f6:20:14:93:0b:45:e2:1e:4d:28:96:1c:be:63:36:5d:
         49:97:6b:e0:14:ce:67:b0:86:5d:d3:9e:57:f2:47:40:ac:90:
         2f:ff:3c:b6:d1:6e:7c:8d:93:79:79:a8:86:60:3e:9a:93:f2:
         d7:70:a4:35:49:26:4f:5d:a0:39:35:29:95:a0:35:d9:cd:f2:
         a8:a2:ca:74:6e:1b:23:b2:df:78:bf:41:72:0c:ef:78:a0:1e:
         8e:38:dd:4d:53:ff:2d:97:d0:0d:e4:5a:16:f8:c6:17:03:9a:
         20:72:c8:c9:06:bf:ef:6e:72:24:5e:65:2e:56:ce:c0:0c:1f:
         f5:d7:ad:15:12:80:df:e5:4c:49:54:1c:81:b4:f1:20:a6:27:
         54:19:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:00 2026 by rpki-client