This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft
File:                     1OMXbLn0iT50xOgF-n-12QpKewo.mft (raw, json)
Hash identifier:          p+mzSvDjfGi2zqFFNagY58G1Avy7wH37AC8T+9vT1yo=
Subject key identifier:   52:2B:C1:9C:E8:9D:4A:21:5C:E7:07:2B:07:4C:60:3D:BD:AD:35:DF
Authority key identifier: D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A
Certificate issuer:       /CN=A9154AFB/serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A
Certificate serial:       17BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft
Manifest number:          17A7
Signing time:             Sat 24 Jan 2026 16:20:18 +0000
Manifest this update:     Sat 24 Jan 2026 16:20:18 +0000
Manifest next update:     Sat 31 Jan 2026 16:20:18 +0000
Files and hashes:         1: 1OMXbLn0iT50xOgF-n-12QpKewo.crl (hash: RiKzxQuTyuNboIzGH8oyBC+F4kKMHzREHyaE05mSgRQ=)
                          2: 81368CD6594B11EE924DCC64C4F9AE02.roa (hash: XhkwHyloR+2rDxWbay2n/StJn5+0QtLglAfKwVMv/5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.crl
                          rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6076 (0x17bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154AFB, serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A
        Validity
            Not Before: Jan 24 16:20:18 2026 GMT
            Not After : Jan 31 16:20:18 2026 GMT
        Subject: CN=6974f142-df2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:cb:cf:58:3c:5b:80:6c:a3:c7:50:26:f0:
                    bd:53:8e:5d:ab:2f:0a:5b:71:c9:74:25:9a:f8:82:
                    78:6d:67:dc:43:f3:cb:bc:67:39:1a:cf:a4:b9:dd:
                    69:5d:72:dd:d1:5f:a9:72:35:9c:e5:84:90:3e:47:
                    a5:d1:85:78:06:55:01:7c:58:71:12:9c:5d:15:cd:
                    ca:89:0a:1b:5d:d2:da:36:db:87:6f:87:1a:83:09:
                    c9:e8:7d:a5:d8:d6:9b:e2:d5:2f:65:98:13:06:d9:
                    e7:5a:cd:e6:9c:52:d9:16:7e:ff:3e:e8:97:4b:c2:
                    93:33:0a:ae:5f:54:c6:38:48:5b:4d:81:c1:d3:0c:
                    c2:8a:6d:f0:bb:a3:8b:ce:ab:e9:48:e2:5e:c6:af:
                    e8:1c:7c:4b:3b:ca:85:3d:6e:81:92:be:51:e7:ea:
                    0b:eb:45:c3:05:f4:14:2b:a8:ad:92:93:50:e7:fe:
                    13:8c:74:42:b2:0e:f8:0e:c2:e1:be:f0:64:18:a3:
                    a0:8a:27:28:8b:16:74:2a:63:21:66:3f:43:68:4a:
                    2c:7f:71:25:e1:c0:13:59:0d:01:95:72:7c:c4:8f:
                    0b:01:49:15:bb:80:6d:b2:cf:1a:9b:3c:df:40:2b:
                    0a:57:d4:95:da:61:c9:bd:f8:07:be:87:33:a4:53:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2B:C1:9C:E8:9D:4A:21:5C:E7:07:2B:07:4C:60:3D:BD:AD:35:DF
            X509v3 Authority Key Identifier:
                keyid:D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d0:e0:c1:b1:a9:7a:2e:34:e3:ec:9f:f4:5c:27:27:dc:b1:
         fb:61:48:42:4f:21:e2:e2:e2:54:c1:1f:5a:7e:7e:af:e5:08:
         0c:64:02:42:70:02:04:b0:94:ec:1a:20:fa:40:5c:54:07:bb:
         21:a8:af:cf:6c:d4:a7:fb:f1:af:ea:a3:ab:79:17:17:7b:fb:
         f3:bf:2b:c7:f5:32:9e:68:ce:58:35:c8:cc:a0:c5:3d:88:2d:
         5f:41:d0:78:64:7e:98:11:98:e3:b7:20:b4:d7:f4:d0:e0:f3:
         e7:bf:c8:5c:e0:47:b1:3b:fb:fc:62:98:ee:20:5b:5c:b4:3a:
         ae:3b:99:5e:05:fe:f0:ec:81:dc:60:97:92:af:4d:24:db:c9:
         c5:24:9a:51:52:a1:e6:a5:7b:5d:d5:1a:1f:82:15:15:a5:56:
         fe:98:e9:37:15:e9:31:96:e5:8d:87:20:50:b4:44:39:fe:3c:
         a4:c4:bc:a6:9e:57:39:8c:26:23:9c:57:b9:a0:f9:19:59:0e:
         42:b9:77:da:db:38:fc:90:2a:70:30:d7:10:15:78:5e:73:69:
         7d:2e:0e:73:ba:40:a5:1b:f2:29:28:f8:d4:be:67:a5:e2:02:
         7b:0a:d6:7a:40:47:d6:34:45:37:47:1c:4a:f1:3e:58:9c:c7:
         94:14:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:04 2026 by rpki-client