This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
File:                     OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json)
Hash identifier:          1JaILybdBu/dR8WrdnA0xtIaVTWrR7roNsPi1+iYh/4=
Subject key identifier:   7D:15:8C:67:40:4B:C0:ED:5D:C0:51:D1:85:C5:D1:8F:E3:42:02:3A
Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
Certificate issuer:       /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Certificate serial:       0D2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
Manifest number:          0CFF
Signing time:             Sat 24 Jan 2026 17:48:55 +0000
Manifest this update:     Sat 24 Jan 2026 17:48:55 +0000
Manifest next update:     Sat 31 Jan 2026 17:48:55 +0000
Files and hashes:         1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: D1GS7lbwDSpBQ+mMgd1XLpmJNmdplMhDbLxdQxNvy4w=)
                          2: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: whIj4TZ+yyw/VbL0wLVNZHdMGGpE4Mabv0G6g01cTLE=)
                          3: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 6avRjwNItYCzxG+yq5MB2LMVNEbgrnYskEIlXomTLWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
                          rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3374 (0xd2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
        Validity
            Not Before: Jan 24 17:48:55 2026 GMT
            Not After : Jan 31 17:48:55 2026 GMT
        Subject: CN=69750607-cc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:a6:54:8f:b0:02:26:cf:e2:2d:0e:34:54:
                    df:7c:fe:96:d2:f8:a8:ec:cc:54:c5:4a:53:78:22:
                    d5:81:76:de:e0:da:28:71:f5:53:2c:38:45:70:3a:
                    a2:68:ed:e6:14:cc:d4:57:8c:20:54:c3:45:c8:30:
                    b4:d8:45:67:e1:2d:b9:5c:b3:61:cc:13:a0:a0:53:
                    f5:f6:00:89:9e:56:cc:e4:b7:ac:3d:7f:e4:cf:85:
                    ce:0e:34:7c:06:bb:e1:39:35:fe:92:ab:f8:14:d8:
                    ee:7d:f0:05:20:36:ad:f9:53:ba:64:69:ff:a4:21:
                    c4:6d:a9:c5:01:a3:d1:96:fc:ea:4d:7f:cd:0a:ce:
                    99:f3:a9:7f:a3:6b:06:d2:06:e9:c0:4c:5b:64:3f:
                    5e:3d:8b:31:aa:64:39:a3:00:9e:cf:34:e6:17:80:
                    08:79:ab:3c:bb:93:6e:b8:98:27:f9:1e:86:d6:22:
                    17:5f:4d:d0:ed:db:92:3f:84:55:18:22:ed:24:d7:
                    3d:c8:58:ed:17:2b:c5:71:2f:a6:96:d1:2a:0f:ba:
                    71:a5:42:31:ca:3a:4f:3a:b0:d2:ab:a4:95:33:8a:
                    15:2d:ce:af:c8:58:54:f8:3c:fc:e2:32:5a:e4:cb:
                    da:9f:82:bf:25:01:5e:01:42:03:c8:65:d2:ac:57:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:8C:67:40:4B:C0:ED:5D:C0:51:D1:85:C5:D1:8F:E3:42:02:3A
            X509v3 Authority Key Identifier:
                keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:3c:1f:e1:0c:0f:89:a7:87:a3:26:59:ea:51:f3:1e:7e:5f:
         75:4f:17:92:27:b3:68:b4:4a:6d:c9:b5:8d:fe:55:7c:bd:62:
         1c:46:c5:38:54:45:93:e7:0d:12:1c:3a:df:be:bf:75:e7:23:
         fc:bb:59:d5:58:81:07:fe:98:72:08:81:5f:c4:4c:2d:b6:66:
         09:21:27:b1:80:93:6c:c2:9c:19:76:e6:1c:a8:8d:11:bc:a8:
         78:7a:a3:cc:82:e4:03:93:e2:31:76:39:38:8c:d1:c1:ee:55:
         ee:d1:8a:33:c7:d1:70:a1:a7:7c:3b:3b:0f:bd:87:a9:db:c8:
         a5:b4:41:a7:b1:f0:31:23:3b:e0:7b:ae:92:f7:b9:22:ee:c5:
         58:ea:82:6a:b1:3d:90:21:46:9b:e7:ac:38:75:7e:71:3b:62:
         43:bc:84:ff:40:b2:04:1a:b0:48:7b:9d:a1:fe:37:94:45:81:
         17:99:34:46:24:8f:2d:e6:ba:c0:b2:90:38:fb:b4:10:9f:54:
         46:b9:d3:9f:4c:09:0b:bb:5e:4b:9a:f1:ae:94:06:bc:4c:d3:
         7d:fd:e0:96:f0:70:07:b5:f5:19:c8:27:48:6a:6d:c8:20:a2:
         1e:66:45:43:e5:9d:39:fb:de:47:d5:1b:33:bc:cf:cb:8f:09:
         06:24:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:54 2026 by rpki-client