This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
File:                     opgFnwZTffjAi4klX3lZQaMcGAA.mft (raw, json)
Hash identifier:          TOCfXTULvdHmPRrZNf+ZYKIntsIWnmy1AH4SoD0ynDI=
Subject key identifier:   D2:AF:29:FA:07:9C:3A:9D:5E:8F:D7:72:73:BF:EE:91:84:00:3E:31
Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00
Certificate issuer:       /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
Manifest number:          B6
Signing time:             Fri 23 Jan 2026 05:10:16 +0000
Manifest this update:     Fri 23 Jan 2026 05:10:16 +0000
Manifest next update:     Fri 30 Jan 2026 05:10:16 +0000
Files and hashes:         1: opgFnwZTffjAi4klX3lZQaMcGAA.crl (hash: qfhYNh8Br5CVoR4KmbYtKuXweajWV/fd0p80tl50TTs=)
                          2: 903E0F1652BD11F0A9261F57C4F9AE02.roa (hash: wehugKaizIxEhZtf3yJWa3v9WBxQforOS0s0qf27ViE=)
                          3: E8716FD4EA3511EF89116C52C4F9AE02.roa (hash: /ib2O66BEz/+EIpjbYLfsm9ZEc6Tr2GDRN2PvAJwp9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl
                          rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800
        Validity
            Not Before: Jan 23 05:10:16 2026 GMT
            Not After : Jan 30 05:10:16 2026 GMT
        Subject: CN=697302b8-a133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:3c:3f:94:cc:db:24:fd:0d:a2:f8:53:81:
                    31:af:50:d1:61:56:78:92:b4:69:2d:de:c3:8a:e3:
                    64:7a:cb:eb:a1:ef:5c:cf:28:e7:c2:ef:31:8e:07:
                    22:96:37:8a:9d:3d:5b:24:e2:96:14:aa:98:07:37:
                    b9:a5:a8:ac:a8:8d:09:60:2f:91:9f:7e:3a:60:56:
                    0f:ca:3e:4f:bc:7d:46:3a:7b:b4:33:f6:c8:d0:95:
                    bc:89:74:e4:55:9b:b8:aa:e4:0f:fc:6a:aa:0c:99:
                    0e:b5:63:48:22:36:ee:cd:f1:55:b3:98:3b:ae:b2:
                    28:1c:22:e8:d1:c8:91:76:a7:bb:32:6a:da:15:86:
                    f6:a9:ce:b5:70:0b:b1:c4:3b:53:fc:22:64:f5:bf:
                    8a:c1:32:02:0e:23:0f:90:9f:95:81:14:ce:3e:f0:
                    d7:f5:29:69:da:2c:84:e8:4b:66:21:1c:28:66:fb:
                    6d:9e:46:b6:ff:c7:ed:79:db:69:76:f6:57:b7:dd:
                    96:69:30:d6:2a:c9:30:b5:5a:18:02:af:0e:00:e5:
                    b5:d2:9b:7a:9a:f7:ff:f7:c1:58:96:31:dd:23:00:
                    17:14:ad:1c:da:29:57:29:e9:62:c1:31:1c:e3:a5:
                    27:f0:79:0c:ad:bf:4c:d8:e2:8e:9a:94:e8:2b:3b:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AF:29:FA:07:9C:3A:9D:5E:8F:D7:72:73:BF:EE:91:84:00:3E:31
            X509v3 Authority Key Identifier:
                keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b9:1b:49:5c:5e:48:9f:eb:05:73:38:5d:40:2b:4a:63:95:
         d8:06:17:c6:6d:18:6b:9c:2e:b6:be:97:f4:24:41:ea:76:44:
         29:65:d7:eb:fd:9f:a8:56:d0:f9:44:d6:3e:dc:44:75:c2:08:
         a2:f6:89:8e:7c:1e:1c:e2:e5:8d:26:cb:31:06:ec:a1:af:1b:
         05:cd:97:24:f2:25:c9:6c:a3:51:0c:96:26:cc:21:ad:8d:0b:
         89:cf:23:c4:00:5a:1c:02:40:73:1b:b6:ce:be:a2:d2:ef:7d:
         e5:84:9d:76:1d:4a:96:e5:a9:7c:37:e9:08:1c:52:77:9d:9b:
         d0:fe:16:4d:8e:75:b5:aa:9f:a5:20:88:74:d8:81:c6:fa:27:
         ad:ea:e8:d5:fd:15:71:7e:7b:dc:7e:7c:83:43:8d:35:55:07:
         c9:80:8e:c6:db:66:bd:fc:bd:b1:03:7d:1f:06:66:e5:c8:56:
         ad:94:bc:23:be:1d:c1:db:5b:c4:0a:20:d9:34:1d:c4:71:24:
         9d:4c:5c:c4:51:4b:02:89:85:e6:cc:fd:01:74:ee:de:fd:2e:
         bf:a2:62:c3:81:80:10:dd:00:19:21:59:86:de:f1:f4:bf:88:
         b3:57:3e:3f:cb:72:0d:d8:8a:d3:59:17:e7:c1:15:6d:ae:46:
         6b:ae:1a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:09 2026 by rpki-client