This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
File:                     oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json)
Hash identifier:          /ctkPhBXZrglGBkFcDjbQ5puccqGFysECFszcpo/woE=
Subject key identifier:   99:5E:DF:36:48:41:F4:54:4B:A5:54:E7:26:08:CA:75:3F:FB:16:D7
Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
Certificate issuer:       /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Certificate serial:       09CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
Manifest number:          09C3
Signing time:             Sat 24 Jan 2026 19:24:33 +0000
Manifest this update:     Sat 24 Jan 2026 19:24:32 +0000
Manifest next update:     Sat 31 Jan 2026 19:24:32 +0000
Files and hashes:         1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: YmqmLzR2r/FNL5iXwwBm5r/AaFXmHGeh4iAvziBZxG4=)
                          2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: MVtlwW2sU7CkBdehjteFY61IQnaVOAPQQ+etloBMPo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl
                          rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2508 (0x9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
        Validity
            Not Before: Jan 24 19:24:32 2026 GMT
            Not After : Jan 31 19:24:32 2026 GMT
        Subject: CN=69751c71-6429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:a4:31:44:62:a7:37:8c:ae:86:53:29:3b:
                    87:5e:3a:c3:18:96:24:f9:11:68:b0:21:3f:86:49:
                    bd:f3:ad:79:83:93:f3:ad:95:ce:3a:19:bd:65:bf:
                    46:f5:dc:8a:6d:53:62:19:31:b5:01:35:e2:20:9d:
                    88:a9:c9:2f:36:21:1e:3f:64:63:80:e6:88:29:47:
                    f6:ca:2f:a4:7c:7c:bb:f0:80:3d:cf:21:d3:46:9a:
                    a2:f8:87:9a:bd:01:91:83:df:d2:37:2f:6b:a9:6b:
                    a9:9f:36:00:ae:ca:9b:39:9f:4b:d7:40:3a:74:e1:
                    de:66:15:c3:33:e8:b0:c5:2e:76:56:25:4b:5d:cf:
                    1a:05:46:02:49:6c:14:5d:da:ff:80:b6:2a:49:db:
                    ad:50:bc:61:dd:e9:bf:fa:58:bb:01:27:e1:4e:bf:
                    74:ac:ee:1b:ec:44:c5:44:6c:35:50:b4:31:da:9b:
                    a9:50:fb:f5:e4:bb:9e:e0:38:2d:7f:ac:f2:a3:ea:
                    b9:2d:75:45:dd:93:71:5e:a8:c0:2a:3f:d6:cc:ee:
                    40:36:cd:7d:73:48:51:7e:c2:92:e9:1b:a2:19:a2:
                    5b:d9:80:51:70:47:0e:82:fb:c3:6c:a2:26:97:69:
                    15:c8:ee:1a:93:4d:03:14:89:a1:a9:de:18:c8:eb:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5E:DF:36:48:41:F4:54:4B:A5:54:E7:26:08:CA:75:3F:FB:16:D7
            X509v3 Authority Key Identifier:
                keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e4:e2:22:11:cc:85:38:4d:e2:03:5a:d6:a2:3d:55:9e:ef:
         81:cf:25:96:26:2a:89:81:98:c6:c8:09:5a:f5:b2:70:f0:c0:
         49:d9:4a:7c:e7:d9:0a:d5:80:d0:ca:fa:20:05:2d:d6:13:f5:
         3d:0d:b9:0d:ad:18:0a:d9:d9:fd:ad:1c:e8:35:b5:c2:b9:52:
         de:af:24:8c:e9:2e:b9:fa:d2:a7:9f:9c:4c:70:6a:f4:38:6e:
         6c:e0:40:79:00:68:5a:da:35:2a:37:26:b2:ad:66:f7:87:0f:
         15:73:94:15:89:e9:8d:b6:ce:96:08:80:19:bf:e4:2e:32:8a:
         60:36:2b:09:8b:fb:ff:5d:84:21:38:35:ce:30:6e:67:4d:b8:
         5a:ed:49:a7:e8:db:45:fe:7c:08:e6:2d:bf:6c:d7:8e:8e:a8:
         0a:3f:75:9b:6d:24:c5:d9:90:1c:90:d5:ea:9a:18:d6:11:e4:
         b7:78:1b:d6:da:0e:a8:70:6d:4c:55:6c:9f:67:ea:b8:7a:6e:
         53:da:4a:0a:c5:2f:06:a7:6e:a3:71:04:4e:4e:b6:6b:60:fe:
         1f:61:07:c2:d3:98:70:b2:4a:17:24:ce:0d:32:68:20:47:0a:
         10:61:70:ac:1a:0d:e0:6f:3d:bb:cf:93:d7:3a:2f:d2:db:83:
         6a:dc:24:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:26 2026 by rpki-client