This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
File:                     OpcfQv-wayoGyXkv1PCFE20UK-o.mft (raw, json)
Hash identifier:          TkAUowi5LwIGgZGqz8wayA2t1uiNRZYL7Kd0pNkAqi4=
Subject key identifier:   B2:C8:89:D5:F7:82:E1:08:7F:A0:10:DF:17:A4:54:A0:93:96:D2:43
Authority key identifier: 3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA
Certificate issuer:       /CN=A9160AEE/serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
Manifest number:          38
Signing time:             Fri 23 Jan 2026 06:30:55 +0000
Manifest this update:     Fri 23 Jan 2026 06:30:54 +0000
Manifest next update:     Fri 30 Jan 2026 06:30:54 +0000
Files and hashes:         1: OpcfQv-wayoGyXkv1PCFE20UK-o.crl (hash: UButqJXX9vxOg61FLqfc+Vuj3WSUzaggwJ0HLVR/0oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl
                          rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160AEE, serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA
        Validity
            Not Before: Jan 23 06:30:54 2026 GMT
            Not After : Jan 30 06:30:54 2026 GMT
        Subject: CN=6973159f-2111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:f9:16:d9:01:69:8b:58:5e:81:b5:4e:89:
                    bd:29:94:77:10:24:cf:00:88:22:c9:b1:cf:38:06:
                    bf:dd:50:65:a2:ec:b0:1c:03:02:81:aa:e9:6a:69:
                    2f:51:ad:1b:bb:29:d9:cd:02:7f:01:71:07:e9:d9:
                    28:93:eb:39:ad:82:29:8f:18:c9:3f:3a:9d:f4:66:
                    83:07:8d:44:ce:cb:b0:a4:43:31:bb:00:ed:fc:2e:
                    e6:c2:e6:b2:81:72:09:b7:aa:37:16:e5:f7:1d:fc:
                    e4:5d:82:0d:10:f0:dd:47:27:05:67:5f:1e:6d:a2:
                    71:5c:da:c7:38:6a:12:07:0b:cc:22:e3:a7:af:c1:
                    40:5f:68:92:cf:c1:43:9d:88:b7:ba:5f:75:f8:b3:
                    3b:41:a3:5c:8d:06:25:08:28:2a:d9:4d:2e:48:47:
                    ec:95:10:21:34:33:c3:3c:f2:66:f4:b0:51:78:98:
                    bc:e5:69:42:10:2e:fb:e4:ea:b0:5b:9f:d2:3b:ad:
                    cb:4f:79:0d:a7:c9:0c:29:72:aa:31:13:38:f1:e4:
                    ef:69:77:49:ac:52:aa:0d:82:9a:42:dd:b1:5f:2a:
                    37:b6:94:f4:cd:28:70:21:f0:c5:ea:1c:3c:48:b5:
                    73:b1:06:5d:fd:5d:4c:d2:67:3c:68:b0:88:8d:ac:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C8:89:D5:F7:82:E1:08:7F:A0:10:DF:17:A4:54:A0:93:96:D2:43
            X509v3 Authority Key Identifier:
                keyid:3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:84:63:c7:03:47:e8:96:d0:7e:dc:2c:6e:f4:be:19:77:93:
         87:1e:bc:65:a1:96:f5:d7:f0:18:1d:8f:b6:8f:df:d6:b1:2e:
         02:cc:24:e1:cc:1d:75:39:12:09:c0:05:21:ec:65:25:d0:2a:
         00:ce:a8:bb:81:21:c5:91:82:ea:f4:d8:03:fd:6b:1e:0c:87:
         8a:80:61:d9:6e:29:a6:78:84:c6:27:0b:de:d8:71:41:29:05:
         db:6d:38:df:cd:aa:63:39:e8:c2:05:15:f7:b5:56:c6:48:3f:
         b4:f3:bd:f6:8e:71:3c:60:67:f3:64:3e:43:6e:b8:d6:13:a9:
         3c:71:fc:e7:7c:c2:8c:8f:0f:45:ac:1f:b0:9c:6d:8c:54:03:
         80:7b:73:43:66:f9:7a:b5:ab:48:77:74:68:f4:e7:07:64:61:
         87:47:c0:9a:41:34:79:77:48:38:e0:24:c9:6d:d9:40:8b:23:
         1e:80:1c:e7:33:9c:5a:63:d0:f3:45:18:c0:8f:b5:d1:5d:18:
         69:d8:1e:c4:8c:11:dc:ba:10:43:bc:ea:31:a3:30:54:c3:58:
         2b:03:c0:d7:90:e3:5e:ca:e7:32:f9:88:01:51:22:d5:a3:c7:
         f9:53:66:8d:06:9c:96:b7:41:42:ea:d8:b9:a9:8d:49:d1:80:
         39:ea:43:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:24 2026 by rpki-client