This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
File:                     OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json)
Hash identifier:          1VblAzlxaWAxHj4oZfe2S3eCs6dWNpsrU/Vw/SzcAt8=
Subject key identifier:   C9:0B:38:E0:5F:96:F5:86:EB:68:07:AF:01:26:9D:65:C5:86:B9:78
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Certificate issuer:       /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial:       026B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
Manifest number:          025C
Signing time:             Sun 25 Jan 2026 01:02:03 +0000
Manifest this update:     Sun 25 Jan 2026 01:02:03 +0000
Manifest next update:     Sun 01 Feb 2026 01:02:03 +0000
Files and hashes:         1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: yAb3+9UrDLDS1a6lkJ5q1yvKH3DBN5/eD/l+Y6OzgqI=)
                          2: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: 9a1saGzvGV5svACVPCkxUcwM3m5jx8fjMnSuv7DH99Y=)
                          3: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: CJrIx5aHYIK7PTUnvPIDN3ZhlTyysmkEvh4lawv2i0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
                          rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
        Validity
            Not Before: Jan 25 01:02:03 2026 GMT
            Not After : Feb  1 01:02:03 2026 GMT
        Subject: CN=69756b8b-f130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5a:b8:b3:c1:67:f9:d7:ca:51:98:f4:3f:31:
                    59:9a:1b:a5:61:34:11:8c:c8:db:e3:b0:df:56:a4:
                    45:93:28:71:c5:3d:80:e9:1a:a9:80:e7:c2:f0:45:
                    45:15:d7:2e:a1:3b:54:de:b1:af:26:c9:11:f5:e2:
                    bb:a8:fa:cc:8a:c4:0d:9c:a7:4e:f4:f7:29:8b:7b:
                    8f:c7:5f:12:77:2b:23:6b:57:94:8c:ae:90:61:e7:
                    29:16:3a:85:0a:40:d6:02:01:70:a9:ae:f5:4e:c0:
                    2b:5c:a8:84:dc:df:35:9e:ae:54:4d:54:c8:50:11:
                    2d:a6:c2:ac:66:8c:86:e6:af:17:ce:28:b0:fb:c9:
                    9a:fe:29:ce:3f:3a:13:43:c0:83:7c:c1:e2:1a:0a:
                    51:8c:2d:03:94:e7:f2:00:fd:ce:70:3e:77:a4:43:
                    77:ec:a2:1b:9b:14:c6:5c:50:7f:21:d6:77:41:27:
                    29:df:8e:eb:1f:0b:70:ca:75:eb:fb:32:e3:ea:53:
                    79:4a:e0:a3:12:c0:67:6e:1b:cf:99:0d:6a:e2:c4:
                    b8:0e:4b:ec:9d:d7:e8:1d:3b:7c:f0:18:36:e3:d7:
                    00:30:0b:ff:c0:35:f0:15:f3:56:cb:81:52:42:d4:
                    68:fe:c0:80:8f:7e:8d:b9:58:4d:3c:e2:04:81:2d:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0B:38:E0:5F:96:F5:86:EB:68:07:AF:01:26:9D:65:C5:86:B9:78
            X509v3 Authority Key Identifier:
                keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:50:91:7d:1a:56:6e:46:7b:e7:a9:34:97:d1:1e:77:8b:
         49:f0:a9:6d:c2:59:b8:e5:75:02:ec:54:3b:15:aa:fb:5b:33:
         a4:1e:ad:dd:c9:d0:65:40:e8:65:71:47:8f:8c:b0:a4:27:bf:
         f4:d8:a7:fb:2a:ab:ee:e2:de:8e:8e:ff:b2:68:79:23:92:08:
         30:40:bd:f5:37:99:89:c5:5c:ef:5a:8c:c6:82:2c:f6:4f:f1:
         2f:9f:7d:58:68:e1:43:d3:ab:c4:32:26:9b:8a:ef:d0:0b:59:
         ff:a1:fa:c4:15:ea:a0:d4:1b:b0:a2:28:d5:be:81:62:90:49:
         74:93:1a:01:f0:cd:94:7a:a4:35:2a:98:72:ed:1a:cc:4f:fa:
         ce:ee:a0:d3:31:c6:b4:40:c8:37:a1:24:87:39:e4:60:8e:4d:
         61:9f:0e:54:28:2a:d3:83:cc:a7:84:5e:62:8f:13:c1:86:56:
         02:b6:98:84:a6:c4:f2:1e:30:85:3b:39:16:a6:21:a7:6c:3b:
         ad:25:73:36:83:54:d6:4c:62:6d:10:a8:55:cb:4f:b9:f9:16:
         45:d2:f9:80:42:49:05:ed:45:b3:76:eb:8e:49:05:83:ef:40:
         fc:f6:c0:36:7b:cb:8a:ea:f8:96:f6:31:b6:93:45:34:f7:23:
         1f:5c:2a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:10 2026 by rpki-client