This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
File:                     ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft (raw, json)
Hash identifier:          inoty/pUs+CE0NPeKp17VL+71xmlILruhM80fWiCEQE=
Subject key identifier:   52:2D:60:CC:D5:14:EA:3C:A0:AA:73:F2:83:AA:62:95:8D:82:04:2C
Authority key identifier: 39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93
Certificate issuer:       /CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693
Certificate serial:       07DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
Manifest number:          07D2
Signing time:             Sat 24 Jan 2026 20:39:17 +0000
Manifest this update:     Sat 24 Jan 2026 20:39:17 +0000
Manifest next update:     Sat 31 Jan 2026 20:39:17 +0000
Files and hashes:         1: ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl (hash: Heiev5G42UM247VKZUOCqVNWbK3BFRUYtglA43v3OIA=)
                          2: 94CB63BC241E11EB985FC048C4F9AE02.roa (hash: QadRAteDkMr+/Vf11v/PSiWZ5qLyjgZNySKVRInle2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl
                          rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CCC5, serialNumber=3911E1EFB02B036F835BF658E136601A67421693
        Validity
            Not Before: Jan 24 20:39:17 2026 GMT
            Not After : Jan 31 20:39:17 2026 GMT
        Subject: CN=69752df5-5334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7c:12:02:4f:a1:e2:21:78:6c:13:96:55:0a:
                    13:6e:98:59:8e:f4:92:49:3a:13:6e:24:c1:39:79:
                    6f:7f:a5:78:d6:1e:a7:03:1c:e6:e1:5d:c3:d2:1b:
                    15:4d:f0:c8:2f:c9:05:cf:6f:49:12:ef:fa:bc:39:
                    5c:96:a1:f9:12:1e:af:c6:56:2b:07:75:04:5a:2a:
                    35:48:eb:f6:d7:0c:b8:7e:ba:55:a8:40:81:bb:d2:
                    ee:4e:48:e0:d5:d8:99:3f:22:3a:14:b8:e2:db:fc:
                    df:14:91:7b:51:ea:a1:41:5f:1a:39:ac:0e:f5:99:
                    a4:f4:42:dd:89:71:e5:a0:92:9b:99:77:35:fe:d5:
                    3e:a5:ce:0a:a3:a0:7f:b1:ba:e1:8d:b6:93:aa:41:
                    3c:24:98:11:d5:87:fc:6c:38:f6:54:e1:be:f6:d3:
                    a3:32:43:c5:25:e9:70:4e:70:cf:96:f4:fd:d3:63:
                    48:3a:65:9d:40:0b:4f:1b:dd:63:01:45:93:e5:b8:
                    23:b7:ea:74:72:96:e1:9e:42:14:e8:20:32:28:37:
                    dc:4d:bb:de:71:77:e3:98:47:01:83:8d:92:ae:02:
                    a9:c3:17:d8:90:57:d0:33:60:d3:c5:50:23:05:72:
                    a5:a8:99:a9:49:95:69:9e:dc:07:43:0a:93:d1:c9:
                    7a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2D:60:CC:D5:14:EA:3C:A0:AA:73:F2:83:AA:62:95:8D:82:04:2C
            X509v3 Authority Key Identifier:
                keyid:39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c5:8e:61:c6:41:d2:76:7f:dc:27:46:fd:33:eb:94:f6:a6:
         1b:60:a7:45:78:12:05:01:ba:b8:85:16:88:d8:3f:b8:b6:30:
         45:ba:49:07:dd:2f:d5:d6:4e:c3:72:3c:d6:1b:de:9e:dc:51:
         c8:0e:6e:96:e8:34:43:d6:e6:67:93:0b:fd:a1:30:b7:2c:74:
         33:93:4d:e3:ae:71:91:41:e1:21:d6:e6:1d:d1:8f:98:50:56:
         c4:92:b5:a7:ea:b2:58:42:9f:38:3a:ce:0a:1a:e8:c4:0b:91:
         c4:ce:10:69:b6:b7:35:45:1a:60:9f:14:b8:1c:6f:24:47:cf:
         47:04:fa:16:46:de:69:a1:21:b9:3f:d4:f4:ff:f0:ea:94:e0:
         f9:a4:b4:fa:d5:e9:34:cf:67:d6:d4:50:21:16:f2:e3:08:28:
         2b:3d:49:3a:33:5f:f8:a1:dd:32:f0:aa:4c:e1:b3:70:77:0a:
         13:a2:fb:17:c1:00:94:2b:d7:04:b1:ef:2c:c3:e5:61:18:39:
         51:24:9a:08:23:23:9c:f2:46:bc:1f:8c:1d:24:4d:97:89:15:
         c8:62:c1:29:8a:8a:8e:59:a3:3f:ec:a3:e1:65:06:65:73:a7:
         b8:78:1d:d5:30:92:8d:81:f2:d0:70:1c:15:36:bb:3c:d7:1d:
         fa:10:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:31 2026 by rpki-client