This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165283/1EDDB9A0BFBB11F0ACBDC03AC4F9AE02/wOosvpWyRsf2Z-vvaaFLrLM_VOM.mft
File:                     wOosvpWyRsf2Z-vvaaFLrLM_VOM.mft (raw, json)
Hash identifier:          dx8JIe3/XyACwVt9Q0g0VInngsyudwYMsJhxPCrYdRI=
Subject key identifier:   32:C1:5B:55:75:43:43:8E:93:46:A4:1A:C4:44:89:C6:2F:C9:9E:98
Authority key identifier: C0:EA:2C:BE:95:B2:46:C7:F6:67:EB:EF:69:A1:4B:AC:B3:3F:54:E3
Certificate issuer:       /CN=A9165283/serialNumber=C0EA2CBE95B246C7F667EBEF69A14BACB33F54E3
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOosvpWyRsf2Z-vvaaFLrLM_VOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165283/1EDDB9A0BFBB11F0ACBDC03AC4F9AE02/wOosvpWyRsf2Z-vvaaFLrLM_VOM.mft
Manifest number:          2A
Signing time:             Sun 25 Jan 2026 06:44:24 +0000
Manifest this update:     Sun 25 Jan 2026 06:44:23 +0000
Manifest next update:     Sun 01 Feb 2026 06:44:23 +0000
Files and hashes:         1: wOosvpWyRsf2Z-vvaaFLrLM_VOM.crl (hash: qh+dJ6d49KTHnfuFTZ6E5utcupSHR6scUg+IItxFAjk=)
                          2: 8738BCECCC8711F0BFB7CA60C4F9AE02.roa (hash: CHkc1Tv2fsRtLEOQuHMw135q1+U1mriRxTeGQiqhNAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165283/1EDDB9A0BFBB11F0ACBDC03AC4F9AE02/wOosvpWyRsf2Z-vvaaFLrLM_VOM.crl
                          rsync://rpki.apnic.net/member_repository/A9165283/1EDDB9A0BFBB11F0ACBDC03AC4F9AE02/wOosvpWyRsf2Z-vvaaFLrLM_VOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOosvpWyRsf2Z-vvaaFLrLM_VOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165283, serialNumber=C0EA2CBE95B246C7F667EBEF69A14BACB33F54E3
        Validity
            Not Before: Jan 25 06:44:23 2026 GMT
            Not After : Feb  1 06:44:23 2026 GMT
        Subject: CN=6975bbc7-97fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0a:76:9d:30:e0:26:9f:43:72:e5:29:cb:61:
                    43:ec:93:4e:53:4d:11:14:8b:dd:d6:d9:b2:c1:a1:
                    33:46:fd:1b:01:1a:5d:54:a9:9d:ee:bb:1a:de:29:
                    69:76:9f:db:6b:17:2d:03:f5:05:21:b8:a6:62:f4:
                    cd:00:3a:fd:f2:61:7f:4e:e9:be:e7:84:3e:a0:3f:
                    7a:1a:c2:64:1d:8f:7c:a4:4e:0b:69:19:7a:ab:b2:
                    bd:05:2a:34:04:5b:d7:86:6e:28:29:ff:ce:eb:18:
                    50:e3:60:23:ab:f4:7a:d7:46:8c:27:56:73:d7:55:
                    25:24:c0:fa:0b:13:a4:cc:37:af:3d:db:c5:fb:dd:
                    a7:b3:89:65:ed:8b:c7:bd:f8:75:6b:97:e3:70:ee:
                    82:d9:01:8b:37:fe:d6:f5:59:2c:91:8f:1e:05:3f:
                    0f:71:89:c9:15:b6:7c:bd:bd:db:9c:38:36:af:8e:
                    23:8d:a7:21:72:0f:30:24:98:34:86:c8:6e:33:d7:
                    17:70:d1:88:fb:38:8f:45:74:65:29:2b:83:88:9a:
                    93:fc:14:9c:02:7a:62:38:2a:89:a5:ed:48:6d:1d:
                    5b:00:7a:80:29:d5:57:ac:f7:34:a4:8f:a8:37:dd:
                    6e:3f:3c:47:5f:c8:c8:99:71:51:2d:a4:1d:9e:c1:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C1:5B:55:75:43:43:8E:93:46:A4:1A:C4:44:89:C6:2F:C9:9E:98
            X509v3 Authority Key Identifier:
                keyid:C0:EA:2C:BE:95:B2:46:C7:F6:67:EB:EF:69:A1:4B:AC:B3:3F:54:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165283/1EDDB9A0BFBB11F0ACBDC03AC4F9AE02/wOosvpWyRsf2Z-vvaaFLrLM_VOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOosvpWyRsf2Z-vvaaFLrLM_VOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165283/1EDDB9A0BFBB11F0ACBDC03AC4F9AE02/wOosvpWyRsf2Z-vvaaFLrLM_VOM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:17:ec:2c:a9:25:e0:56:b4:74:87:e4:20:42:85:24:8a:b9:
         3f:f6:cc:d0:49:38:43:40:9a:a1:a4:b3:90:f3:53:dc:68:e0:
         38:4e:fc:ec:a5:ec:fa:a7:15:59:0a:74:b5:91:b5:14:d4:71:
         f0:7e:27:39:f7:7c:fc:c7:0c:6b:db:d2:e4:f8:cb:6f:99:d2:
         9a:87:6f:07:7c:2f:c4:e9:4d:67:57:cc:ac:7b:a9:2c:bc:b9:
         41:37:c7:90:53:2f:fc:88:7e:fe:80:b1:8d:d0:ea:fa:fe:82:
         9d:eb:ae:e4:a9:5b:6e:00:58:4e:06:14:2b:2d:bb:92:6d:e7:
         01:be:84:3e:26:12:ae:95:1a:3b:a0:d4:5b:1a:c7:bf:b6:e4:
         fb:09:79:3e:83:12:26:d4:53:b8:03:b5:39:86:9a:8e:3b:ce:
         49:9e:1e:ed:52:89:9c:0d:8c:21:01:5d:d3:55:14:d2:36:70:
         e2:55:ed:37:36:7b:72:2e:fc:5c:b6:e2:52:bc:a8:90:20:4f:
         d4:0a:1c:ee:18:ce:45:61:74:04:d6:9e:02:da:18:b7:b3:de:
         0f:72:f8:66:14:b0:59:5a:fd:d9:be:3d:5f:78:73:2f:86:87:
         45:ff:ed:d0:bb:3a:3a:ad:d8:d9:af:e0:54:45:9f:a2:cd:b5:
         8c:56:bf:c7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NTI4MzExMC8GA1UEBRMoQzBFQTJDQkU5NUIyNDZDN0Y2NjdFQkVGNjlBMTRCQUNC
MzNGNTRFMzAeFw0yNjAxMjUwNjQ0MjNaFw0yNjAyMDEwNjQ0MjNaMBgxFjAUBgNV
BAMMDTY5NzViYmM3LTk3ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUCnadMOAmn0Ny5SnLYUPsk05TTREUi93W2bLBoTNG/RsBGl1UqZ3uuxreKWl2
n9trFy0D9QUhuKZi9M0AOv3yYX9O6b7nhD6gP3oawmQdj3ykTgtpGXqrsr0FKjQE
W9eGbigp/87rGFDjYCOr9HrXRownVnPXVSUkwPoLE6TMN68928X73aeziWXti8e9
+HVrl+Nw7oLZAYs3/tb1WSyRjx4FPw9xickVtny9vducODavjiONpyFyDzAkmDSG
yG4z1xdw0Yj7OI9FdGUpK4OImpP8FJwCemI4Koml7UhtHVsAeoAp1Ves9zSkj6g3
3W4/PEdfyMiZcVEtpB2ewaadAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMsFbVXVD
Q46TRqQaxESJxi/JnpgwHwYDVR0jBBgwFoAUwOosvpWyRsf2Z+vvaaFLrLM/VOMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MjgzLzFFRERCOUEwQkZC
QjExRjBBQ0JEQzAzQUM0RjlBRTAyL3dPb3N2cFd5UnNmMlotdnZhYUZMckxNX1ZP
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd09vc3ZwV3lSc2YyWi12dmFhRkxyTE1fVk9NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
MjgzLzFFRERCOUEwQkZCQjExRjBBQ0JEQzAzQUM0RjlBRTAyL3dPb3N2cFd5UnNm
MlotdnZhYUZMckxNX1ZPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAC0X7CypJeBWtHSH5CBChSSKuT/2zNBJOENAmqGks5DzU9xo4DhO/Oyl
7PqnFVkKdLWRtRTUcfB+Jzn3fPzHDGvb0uT4y2+Z0pqHbwd8L8TpTWdXzKx7qSy8
uUE3x5BTL/yIfv6AsY3Q6vr+gp3rruSpW24AWE4GFCstu5Jt5wG+hD4mEq6VGjug
1Fsax7+25PsJeT6DEibUU7gDtTmGmo47zkmeHu1SiZwNjCEBXdNVFNI2cOJV7Tc2
e3Iu/Fy24lK8qJAgT9QKHO4YzkVhdATWngLaGLez3g9y+GYUsFla/dm+PV94cy+G
h0X/7dC7Ojqt2Nmv4FRFn6LNtYxWv8c=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:41 2026 by rpki-client