This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
File:                     ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json)
Hash identifier:          EeESXgUCgDV4mFi1as1/eaPXYmIJyCa4EOYM03UNwWI=
Subject key identifier:   92:BF:1A:6E:41:EF:2D:6F:5F:ED:65:90:7E:8D:CE:AD:C7:0F:FE:DC
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Certificate issuer:       /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial:       035C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
Manifest number:          032D
Signing time:             Sun 25 Jan 2026 00:20:49 +0000
Manifest this update:     Sun 25 Jan 2026 00:20:49 +0000
Manifest next update:     Sun 01 Feb 2026 00:20:49 +0000
Files and hashes:         1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: Lz60Hmes5B/jN4xPNxkc+EXjrLw4ALo7XEp6t+r69pg=)
                          2: D84149CCEBAB11F090F576B05F6F56BC.roa (hash: h2VRAobnA0mg8UYqDlWy8Y+TSm17jE0upU+uVL6pvtg=)
                          3: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: O2oQyvWguzaYeNsrwBX/2BLJPDmDLHzJTdTHMhL++UY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
                          rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Validity
            Not Before: Jan 25 00:20:49 2026 GMT
            Not After : Feb  1 00:20:49 2026 GMT
        Subject: CN=697561e1-fb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:12:42:48:99:7d:17:61:ed:f6:d5:6e:9e:
                    47:46:5b:3c:4f:cb:a1:54:9f:3e:7f:67:4c:5c:7f:
                    27:46:95:e5:96:22:94:24:bd:85:eb:de:7c:99:ab:
                    37:e5:55:ec:d7:63:ce:3d:72:54:94:ca:8f:56:8c:
                    a9:d5:9f:ab:e6:45:37:be:4c:d1:84:ea:bf:29:6b:
                    e5:fd:69:e2:1b:e6:c3:39:20:06:48:e7:05:8b:20:
                    fb:31:be:3e:ae:2b:57:8e:6c:53:f5:9e:f7:6e:d0:
                    28:f8:3d:5b:45:1d:9a:73:f6:a0:d4:85:eb:87:22:
                    96:81:8d:b4:e8:1c:cf:11:c4:66:6d:eb:89:50:c4:
                    aa:5f:82:ca:71:c5:30:92:3a:8d:fc:61:e0:55:3c:
                    6c:fa:32:46:bc:65:a6:48:49:ea:29:13:ab:be:e6:
                    4a:f5:1b:4c:9e:f4:c4:fa:b6:ac:5b:6d:d4:d9:77:
                    6d:cb:8b:8a:71:29:85:c1:43:18:66:ef:7d:74:fa:
                    e4:3a:0e:26:d7:e0:cf:80:be:a0:e3:15:97:92:79:
                    20:84:ce:2b:ce:09:39:22:c4:18:ae:1f:06:0b:2b:
                    18:2a:8c:ac:d0:94:23:fa:72:dd:4a:d8:c8:75:54:
                    37:c9:ee:b7:b7:71:6d:ed:ca:38:1f:7c:42:ff:d1:
                    7f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BF:1A:6E:41:EF:2D:6F:5F:ED:65:90:7E:8D:CE:AD:C7:0F:FE:DC
            X509v3 Authority Key Identifier:
                keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d6:38:5a:0a:52:88:e6:0d:9d:5e:8a:82:67:b9:5f:7f:bf:
         6b:da:71:be:99:b2:85:43:1e:e5:b7:f4:45:f0:cd:f8:a3:72:
         3c:46:4f:68:a2:b2:ad:c6:17:27:94:66:78:9e:07:9c:27:ff:
         b0:48:45:61:a5:bd:d5:a8:d4:d9:5d:9c:28:87:1e:9d:4c:62:
         88:cb:b0:e0:eb:7c:f0:88:62:d0:46:0e:0c:45:5a:a7:d7:dd:
         58:7f:0c:0e:bc:d8:03:5d:fb:94:4a:c5:e1:02:be:77:6d:d3:
         8b:f7:91:38:cc:ff:48:e2:c4:74:9f:33:d0:1b:bd:99:e8:91:
         a3:fa:69:ff:da:42:11:5d:eb:62:2f:f1:ae:d6:92:fe:25:44:
         88:ad:ec:00:de:9d:bc:b4:3c:be:fd:5f:2c:97:69:60:f1:63:
         31:d7:4b:54:3b:11:b2:7c:b9:3b:41:e2:1e:1a:9f:5d:3d:ee:
         85:58:e5:82:dd:1c:6f:d7:b3:9f:f7:23:61:12:94:8d:f3:e9:
         94:34:82:f7:50:15:74:8c:50:0d:53:98:da:23:3d:d6:42:5f:
         5d:1e:7b:8f:2c:46:52:d3:0a:83:43:10:3f:11:af:2c:6e:91:
         11:51:d1:ab:40:5e:2f:e8:9f:a1:76:c6:f5:a9:ca:39:1c:1b:
         5d:d0:69:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0NzMzMkI4MUE5
RTgwRUREMzUwHhcNMjYwMTI1MDAyMDQ5WhcNMjYwMjAxMDAyMDQ5WjAYMRYwFAYD
VQQDDA02OTc1NjFlMS1mYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2BQSQkiZfRdh7fbVbp5HRls8T8uhVJ8+f2dMXH8nRpXlliKUJL2F6958mas3
5VXs12POPXJUlMqPVoyp1Z+r5kU3vkzRhOq/KWvl/WniG+bDOSAGSOcFiyD7Mb4+
ritXjmxT9Z73btAo+D1bRR2ac/ag1IXrhyKWgY206BzPEcRmbeuJUMSqX4LKccUw
kjqN/GHgVTxs+jJGvGWmSEnqKROrvuZK9RtMnvTE+rasW23U2Xdty4uKcSmFwUMY
Zu99dPrkOg4m1+DPgL6g4xWXknkghM4rzgk5IsQYrh8GCysYKoys0JQj+nLdStjI
dVQ3ye63t3Ft7co4H3xC/9F/hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJK/Gm5B
7y1vX+1lkH6Nzq3HD/7cMB8GA1UdIwQYMBaAFBA/qL3/+58FVwcsRzMrganoDt01
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ2OS8wRTE3N0Q1QTA1
OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253VlhCeXhITXl1QnFlZ08z
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VELW92Zl83bndWWEJ5eEhNeXVCcWVnTzNUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253
VlhCeXhITXl1QnFlZ08zVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCm1jhaClKI5g2dXoqCZ7lff79r2nG+mbKFQx7lt/RF8M34o3I8Rk9o
orKtxhcnlGZ4ngecJ/+wSEVhpb3VqNTZXZwohx6dTGKIy7Dg63zwiGLQRg4MRVqn
191YfwwOvNgDXfuUSsXhAr53bdOL95E4zP9I4sR0nzPQG72Z6JGj+mn/2kIRXeti
L/Gu1pL+JUSIrewA3p28tDy+/V8sl2lg8WMx10tUOxGyfLk7QeIeGp9dPe6FWOWC
3Rxv17Of9yNhEpSN8+mUNIL3UBV0jFANU5jaIz3WQl9dHnuPLEZS0wqDQxA/Ea8s
bpERUdGrQF4v6J+hdsb1qco5HBtd0GnH
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:39:53 2026 by rpki-client