This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
File:                     oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json)
Hash identifier:          8arpSQNwH7xD6/j6KiyjpVq6NLqScpOhyP4V3wiwBgI=
Subject key identifier:   79:F6:8B:32:85:6D:D1:69:95:1B:CA:C8:20:D8:B7:22:5A:A4:E6:B8
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Certificate issuer:       /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial:       0A50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
Manifest number:          0A3E
Signing time:             Sat 24 Jan 2026 19:12:39 +0000
Manifest this update:     Sat 24 Jan 2026 19:12:38 +0000
Manifest next update:     Sat 31 Jan 2026 19:12:38 +0000
Files and hashes:         1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: l0JtFP6h8byKaQmxGa2pNnOT83bk5kq1ntPpWGlZNEg=)
                          2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: Cf8bqRacvTWl+UzpH6e1kxekXSzzSxIQ9wSazOTj5Ck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
                          rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2640 (0xa50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
        Validity
            Not Before: Jan 24 19:12:38 2026 GMT
            Not After : Jan 31 19:12:38 2026 GMT
        Subject: CN=697519a6-7125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:c2:f9:18:e7:18:32:6b:9c:29:f0:38:75:
                    12:bd:5f:f2:76:86:0d:4f:96:9b:76:ff:91:37:a3:
                    db:94:11:32:0f:aa:ed:8b:51:33:c6:29:9d:e9:fb:
                    cc:d5:dd:0e:e6:92:c5:74:1f:ac:76:27:0e:7d:21:
                    c9:8b:53:06:46:4b:42:59:99:c6:c7:5a:43:1c:69:
                    3c:71:c3:39:b3:ac:b9:a1:37:b1:71:94:f9:df:b7:
                    0d:3a:7a:fd:e7:81:55:b1:b5:c0:31:38:8a:83:8e:
                    13:f0:37:52:1a:18:2a:3b:7c:ba:5c:a4:e0:2e:ad:
                    c8:02:e0:94:ec:cc:c4:13:9e:b6:2b:e8:e9:77:63:
                    2c:32:3b:e2:17:32:3e:5c:b6:a0:90:f7:a7:2b:9c:
                    72:ba:4f:72:53:2c:b8:9d:26:7e:5c:43:f2:c7:42:
                    90:27:4c:73:65:44:05:f3:fa:7a:42:28:e2:40:7b:
                    64:75:c0:1f:cc:d4:e9:c4:18:c9:88:75:78:8f:b4:
                    24:3e:69:06:df:15:4e:49:70:34:c4:a5:10:8e:28:
                    ec:8e:7a:f8:39:0d:3b:35:12:4f:b6:f9:c8:86:45:
                    d6:ee:2c:a1:c5:0c:1d:2d:72:1c:a8:88:cb:4b:3e:
                    d6:c3:4c:81:c8:15:26:2b:e0:25:62:d9:2e:e6:45:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F6:8B:32:85:6D:D1:69:95:1B:CA:C8:20:D8:B7:22:5A:A4:E6:B8
            X509v3 Authority Key Identifier:
                keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:71:4d:25:39:c0:48:09:5d:c6:8f:0c:55:c3:b1:73:79:17:
         8f:c7:9c:c0:56:a4:13:72:a0:cc:6b:1e:c5:c2:ec:b5:c7:26:
         46:d9:d7:dd:12:5c:16:04:ad:78:35:18:30:c4:97:44:cb:be:
         04:b9:bf:54:f4:a0:28:59:85:6b:39:83:ab:2e:b1:f5:52:c1:
         35:e9:4a:a0:62:87:85:df:5c:0e:6a:71:68:35:c5:da:18:19:
         72:d1:b6:51:cd:9b:f7:87:cc:18:bb:7e:d4:88:e4:6f:a6:86:
         0a:14:08:55:d2:d5:9d:57:84:26:15:70:03:8f:82:7a:6c:52:
         2e:58:09:44:aa:c5:cf:de:3c:23:93:1c:27:3e:6a:cb:04:03:
         83:c5:b4:f3:56:25:84:ea:5f:09:f6:8c:3f:6f:10:c6:0f:a6:
         de:5f:19:4f:f3:69:95:e9:43:98:13:b6:de:61:b3:15:cf:2b:
         31:78:69:79:94:ac:8e:9b:f3:b8:33:5c:78:b1:3b:79:89:6d:
         7b:bb:11:9c:0c:ab:c9:8b:db:44:d5:d0:e0:39:b5:88:50:21:
         3a:46:85:f1:50:43:80:39:83:cb:14:f0:49:67:38:89:eb:bb:
         85:19:f3:7b:6c:0e:f2:b7:04:56:ff:cc:46:0c:18:15:a4:af:
         f0:6c:dc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:39:43 2026 by rpki-client