This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft
File:                     oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json)
Hash identifier:          dESIrDYHRxa5Y00iUA8HSgg7KVfTBlKMpSt0vIuzIIU=
Subject key identifier:   55:3E:E1:82:89:75:CA:BB:BC:E1:72:9E:DB:F6:97:A7:33:6D:8C:69
Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86
Certificate issuer:       /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft
Manifest number:          0191
Signing time:             Sun 25 Jan 2026 02:48:18 +0000
Manifest this update:     Sun 25 Jan 2026 02:48:17 +0000
Manifest next update:     Sun 01 Feb 2026 02:48:17 +0000
Files and hashes:         1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: Htqn3vU8VJlKms2STPV7jWpPB2aWUEDKbt3pH2qikFU=)
                          2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: I77zej0g2IdMx6WMXQdInqyMmRTM3TktU3rYTAd3Uxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl
                          rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386
        Validity
            Not Before: Jan 25 02:48:17 2026 GMT
            Not After : Feb  1 02:48:17 2026 GMT
        Subject: CN=69758472-5e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:ff:95:f0:33:4f:7b:dd:45:d6:26:a1:c9:
                    21:6f:f2:af:dd:04:73:db:8a:03:c3:8c:24:d0:e4:
                    2e:9a:78:e9:19:bb:16:6b:64:80:cb:15:ce:b1:6b:
                    37:4b:cc:6c:e4:ce:01:1f:36:50:92:a0:1b:cf:cb:
                    53:53:37:fa:3c:6c:e1:18:3a:88:51:5d:f1:9b:f5:
                    dc:4f:6d:ad:e6:78:79:f7:21:9d:61:08:c7:aa:8b:
                    1b:9a:fc:29:ae:a6:b1:a3:51:53:91:d5:4d:87:96:
                    91:9e:bd:dc:d0:41:53:7f:6f:28:d0:7b:48:05:ee:
                    38:5f:1d:c3:60:7e:5c:33:12:7c:0f:85:bc:67:11:
                    f1:a9:15:3b:5c:26:9c:87:70:0f:e5:1e:cc:cb:a7:
                    e2:c3:49:8a:ea:47:d6:38:77:62:28:26:10:11:8d:
                    56:bf:60:2d:69:83:90:2c:80:eb:8b:15:75:1e:d3:
                    fb:62:6b:7a:82:3d:fa:3d:b0:78:4a:ed:e8:3d:e4:
                    0b:49:1c:84:9f:ce:64:ef:d8:d6:94:6b:dd:42:f6:
                    d9:d2:15:4b:63:ac:8a:e5:df:da:b3:77:93:0d:40:
                    00:ec:93:c6:78:f7:c4:a4:35:ca:44:22:22:cd:33:
                    b5:19:e0:07:37:09:50:22:1f:1d:7a:14:8b:dc:d7:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3E:E1:82:89:75:CA:BB:BC:E1:72:9E:DB:F6:97:A7:33:6D:8C:69
            X509v3 Authority Key Identifier:
                keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:84:a3:98:01:5a:24:65:f2:ac:29:11:5b:f1:66:9e:6d:64:
         5d:0c:e6:45:1f:13:11:e4:2a:13:fb:10:c3:e3:b3:32:37:3e:
         90:67:db:b4:6c:cb:89:8b:8f:4e:0f:93:4d:93:65:7f:b1:ee:
         8f:82:6b:07:18:f9:5e:dc:ae:aa:05:04:f0:20:2b:5c:44:2a:
         3d:b9:25:31:c9:c8:f8:b1:e9:ea:9d:61:0a:9f:ab:a6:ed:06:
         39:59:61:a8:e7:ba:ee:84:85:7e:e1:63:b8:ee:6e:5f:02:ad:
         a5:59:42:de:ff:d0:8f:2f:b8:64:75:5d:b6:6f:eb:b4:cf:25:
         a5:93:0a:1a:9f:df:04:80:68:0d:ad:60:ee:d6:8b:17:bd:19:
         3e:fe:69:7b:28:6d:43:37:b4:d7:7d:cc:17:40:35:ee:0f:59:
         cd:51:85:0c:09:80:55:4b:cf:c6:6b:62:9b:50:cd:64:5d:92:
         af:8e:e2:db:fd:f3:cd:1c:3f:34:4e:8a:b0:29:2a:50:a1:2d:
         1b:6e:5d:40:f2:20:6d:9c:f1:10:90:e4:3a:a4:55:35:3f:f2:
         4b:3a:16:b9:5f:66:e0:8d:8a:88:02:13:97:ce:c9:41:50:13:
         9d:4f:36:d3:ab:30:98:50:b2:bc:23:dc:1e:bf:59:c8:cf:90:
         ea:65:3c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:02 2026 by rpki-client