This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
File:                     ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json)
Hash identifier:          ro8+jIaLRv8V/J32cooKsLqCPMBWzyo0sf7fJwbEVT0=
Subject key identifier:   AE:84:F2:33:EB:38:E3:F7:A6:D3:7B:53:1B:D6:69:56:9D:28:C6:69
Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
Certificate issuer:       /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Certificate serial:       0C45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
Manifest number:          0C2E
Signing time:             Sat 24 Jan 2026 18:21:33 +0000
Manifest this update:     Sat 24 Jan 2026 18:21:32 +0000
Manifest next update:     Sat 31 Jan 2026 18:21:32 +0000
Files and hashes:         1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: PQjAB2pXMWU/ZtKfpZ0amSikttWjZtpW6PooboucSb8=)
                          2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: OwW86qMJFwbNjXHq+OTRD7Vzx3peXb6YxQieVHGeMos=)
                          3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: DWCg5lL0mEzrArVCwICSW9aYx94oeCmf91vXy2qE580=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
                          rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3141 (0xc45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
        Validity
            Not Before: Jan 24 18:21:32 2026 GMT
            Not After : Jan 31 18:21:32 2026 GMT
        Subject: CN=69750dad-5e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:c3:35:ee:c3:43:08:77:da:2f:67:43:8b:
                    57:34:0d:0d:51:5a:23:d4:ec:cc:43:89:d7:b0:26:
                    51:b7:b4:94:f9:92:30:c0:fd:10:4c:25:a4:c4:3d:
                    69:a2:f8:48:aa:fd:8a:f8:29:77:26:67:a5:ba:e1:
                    3a:da:91:d3:83:ec:25:46:14:1c:27:14:16:42:92:
                    1e:c9:f3:3a:71:81:32:44:fa:32:e3:fe:a8:48:ea:
                    6f:b7:9d:69:9d:92:8c:69:04:26:09:40:24:9e:3e:
                    24:0f:2a:e1:a3:8e:6d:83:ae:8a:a0:4f:56:c8:43:
                    f1:9f:2f:f7:f4:9e:3c:71:7b:53:34:97:8f:e6:9c:
                    ba:cd:b3:47:ad:da:29:9e:de:6b:78:42:12:55:18:
                    81:5f:be:64:be:0b:17:69:4a:99:5b:e9:7f:dd:b0:
                    83:ff:51:a4:9c:e8:5e:c0:64:5a:28:70:d1:2b:70:
                    2a:c6:32:d8:10:d0:30:e0:31:f5:a6:65:3c:d1:2c:
                    18:3a:20:39:42:71:9e:da:fd:a3:f7:a4:f4:91:f4:
                    57:18:ff:ea:1e:2e:19:a3:d8:a8:55:4c:9e:d3:bb:
                    c1:bb:c4:9a:c6:55:2d:dc:a0:82:58:9f:c8:44:02:
                    d9:88:a9:67:ba:e8:e8:de:de:a0:09:9e:27:79:a9:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:84:F2:33:EB:38:E3:F7:A6:D3:7B:53:1B:D6:69:56:9D:28:C6:69
            X509v3 Authority Key Identifier:
                keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:dd:26:b9:bb:62:97:9d:d0:75:29:f9:0b:75:2c:78:4a:03:
         8c:1c:e7:8d:5c:b9:2a:91:43:58:c6:37:f7:96:f0:29:16:a9:
         09:8e:9e:16:7b:43:dc:20:08:fe:b7:dd:87:ad:46:81:7a:7f:
         eb:bb:b2:d2:25:a1:55:bb:2e:d3:cf:7b:85:f2:63:94:47:4e:
         37:11:bf:ce:b5:80:80:f6:b3:a7:39:76:1f:40:94:57:b9:2d:
         a6:4c:2a:e1:d1:1a:55:9e:5b:fe:42:8f:3f:98:b2:51:43:b2:
         b7:0f:38:33:86:13:17:85:3d:b0:7e:eb:f0:f3:4f:18:66:14:
         d0:db:3b:1e:ce:ee:f6:f4:de:27:87:19:3d:65:f0:ae:57:41:
         23:42:84:a0:18:64:93:df:3b:21:1e:05:75:1f:18:57:7e:9d:
         23:9f:88:03:48:73:bd:30:21:51:42:43:e6:26:b1:2e:0c:9c:
         82:c1:c7:a9:80:b1:8d:d3:fc:37:3a:36:ad:f3:19:86:2e:cb:
         f5:a2:72:60:98:02:35:bc:ae:65:c9:15:40:c9:62:26:92:d7:
         f6:de:6b:fb:f8:b4:e9:c4:bc:6c:d0:c9:18:ff:a7:3b:87:b9:
         5d:b1:e7:bf:af:3e:13:03:c7:c0:0b:0d:c8:24:95:ff:ed:66:
         0a:4a:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:49 2026 by rpki-client