This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
File:                     OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json)
Hash identifier:          CSdxfbZQ1Clgml+lQiWU/2B1hPg57/dIb6UnbBcVpQI=
Subject key identifier:   AB:08:F8:EE:15:5B:54:5A:D2:BF:05:2A:5C:70:89:D5:5A:90:4F:FD
Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Certificate issuer:       /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
Manifest number:          01FA
Signing time:             Sun 25 Jan 2026 01:48:14 +0000
Manifest this update:     Sun 25 Jan 2026 01:48:14 +0000
Manifest next update:     Sun 01 Feb 2026 01:48:14 +0000
Files and hashes:         1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: Xtjr/DfDxY+bAT4YHILVr4vOe8TCnPpdbUhDMA3VZec=)
                          2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: ex5ur3WLVmySdJlK4OpXRFFofMyw8LoQvz2jf4rLqkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
                          rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
        Validity
            Not Before: Jan 25 01:48:14 2026 GMT
            Not After : Feb  1 01:48:14 2026 GMT
        Subject: CN=6975765e-646d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:88:c8:c8:35:0f:78:54:63:d5:ca:36:7e:
                    6d:c7:4a:48:f8:0a:01:67:a4:c3:60:a6:29:20:40:
                    e0:cf:e5:6d:93:a8:76:06:2d:d2:53:43:88:0d:f9:
                    15:a5:39:f3:23:1e:35:e7:8b:33:f4:a1:14:b3:08:
                    ae:ad:d4:a4:a5:bb:14:5c:ef:a7:19:8d:61:bd:2f:
                    35:43:b0:2e:df:30:c1:a2:ba:15:12:79:b1:43:5a:
                    16:d7:5d:df:2e:06:c4:42:ea:d1:5a:d6:e9:a9:7a:
                    6c:6c:56:1c:52:3a:6c:c3:8d:16:58:9f:cf:e0:fe:
                    e6:b2:d6:e5:a1:14:57:b7:e8:6b:5a:88:45:17:03:
                    a4:19:f8:a7:49:fe:bc:d4:33:85:dc:f0:68:a1:ef:
                    9e:36:6d:0a:4d:ef:92:be:0a:3f:3f:05:e3:82:5e:
                    1d:8e:8d:f6:57:63:13:ee:c5:70:db:5b:a2:04:a3:
                    e5:00:d8:75:64:68:1a:ec:39:a4:c1:60:a7:6a:ce:
                    34:2b:52:b8:57:dd:02:82:ae:38:8b:6f:e0:74:cb:
                    9b:c3:04:6c:91:e2:e1:d2:b0:f0:c8:b1:dc:99:60:
                    e5:b4:48:22:39:e8:01:76:82:5c:c8:ce:69:ea:d6:
                    9c:71:c4:e0:f4:1e:8f:ed:43:95:c8:1a:f4:12:b1:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:08:F8:EE:15:5B:54:5A:D2:BF:05:2A:5C:70:89:D5:5A:90:4F:FD
            X509v3 Authority Key Identifier:
                keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8f:9a:ff:e6:ba:b2:32:b1:15:c5:e4:06:79:28:71:4e:89:
         ec:2d:24:b6:2d:be:d0:61:eb:e7:83:ad:89:ad:6b:a1:6c:95:
         18:3b:6f:11:ce:a9:02:73:19:6b:3a:43:4c:56:99:ce:5e:f8:
         b9:29:af:49:b4:a7:9b:0f:3b:f7:06:a3:23:04:a8:21:fb:72:
         c2:a1:43:40:dd:59:27:98:c8:85:e7:02:cd:fb:14:f1:51:7f:
         48:fd:ab:b6:d1:95:b7:b6:e8:d9:e1:89:2e:41:1d:9e:39:dc:
         d7:35:44:5e:9e:f5:2c:b3:2e:48:46:40:f0:1c:5a:c8:1d:0b:
         12:79:9f:97:85:03:a3:69:a6:a6:58:75:95:a1:73:ed:1a:38:
         bf:e4:92:8c:1a:3d:fc:c6:2e:60:85:b4:ee:53:16:18:2f:40:
         85:06:bc:fe:a6:aa:9e:74:ca:77:b0:b3:b4:44:2c:ac:16:ac:
         51:4f:2f:ed:2f:b3:ff:49:04:3b:73:9f:72:4f:9a:03:c6:3b:
         52:bb:e5:94:6e:e5:91:91:99:2d:a9:34:ea:56:ab:dc:c5:62:
         63:f2:02:e9:8e:e6:2d:77:f3:d2:83:e2:c5:af:8d:ed:11:28:
         18:2a:b2:35:15:b5:a4:ce:04:b1:d3:c8:06:ff:e0:b0:09:9e:
         f0:59:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:55 2026 by rpki-client