This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
File:                     o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json)
Hash identifier:          mjseb42arTWgFDDQIqQOGBVISUSmTp9skuHtp1nu3iw=
Subject key identifier:   17:54:1E:BC:6F:CF:D6:69:E3:2A:B8:6A:B0:77:DC:02:97:0B:C4:B5
Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65
Certificate issuer:       /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
Manifest number:          0151
Signing time:             Sun 25 Jan 2026 03:31:50 +0000
Manifest this update:     Sun 25 Jan 2026 03:31:50 +0000
Manifest next update:     Sun 01 Feb 2026 03:31:50 +0000
Files and hashes:         1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: 3xUCF8AhYxMc/90WACiQ29g8syhLObHhF5a+uBmiJMw=)
                          2: 4A9AD51270F811F0BA070F34C4F9AE02.roa (hash: GfIBo0sJeXzYPko1KN4K0PA1n9E0Kyw46Z51n+s1ljE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl
                          rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C10F, serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
        Validity
            Not Before: Jan 25 03:31:50 2026 GMT
            Not After : Feb  1 03:31:50 2026 GMT
        Subject: CN=69758ea6-7a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:22:fe:33:65:73:86:b7:cd:3c:38:8b:66:
                    1e:2f:1b:3a:5e:5c:42:71:c5:b2:e6:1c:0c:77:60:
                    ad:fe:d3:34:b4:9d:3b:3c:50:56:12:49:b7:ac:18:
                    53:56:be:da:1f:de:86:48:96:34:ca:c9:a8:3c:69:
                    4a:69:b1:fd:99:c0:a7:25:7c:01:1e:0e:0a:df:4c:
                    5c:54:e9:7c:12:a9:20:ab:f2:c3:e1:33:3c:33:7c:
                    b9:e6:94:28:8a:10:16:b1:30:cc:c2:dc:db:1a:ad:
                    98:a6:a4:d1:e6:12:ce:37:b3:d8:b3:26:50:9b:01:
                    a4:d1:65:ec:c1:b1:34:62:e6:e9:ac:9a:e7:21:61:
                    01:a6:0c:5a:b8:ae:c7:ab:3d:88:f9:90:82:54:3a:
                    41:63:62:58:2c:01:9c:ae:94:95:7c:6f:35:ff:a4:
                    3b:38:22:d4:95:8d:9d:67:c0:29:ab:47:40:76:ca:
                    54:97:c9:6a:4d:6d:63:9a:ea:8f:88:64:df:e4:a4:
                    cc:80:f6:a9:0b:0d:f6:38:6f:98:9c:8e:c1:7b:e9:
                    95:5a:0b:2e:3f:56:e5:95:fc:76:69:b4:e6:c3:79:
                    30:e6:ed:8d:16:c4:90:f3:89:31:ad:36:1b:31:4e:
                    0a:f8:aa:bb:40:71:db:60:cf:a1:38:ca:9d:00:0e:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:54:1E:BC:6F:CF:D6:69:E3:2A:B8:6A:B0:77:DC:02:97:0B:C4:B5
            X509v3 Authority Key Identifier:
                keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:17:b2:33:a5:4a:9c:78:ed:78:49:a4:15:66:01:80:0e:1f:
         90:54:87:e2:09:a7:fd:f2:2e:74:06:e3:18:a4:29:66:df:30:
         1a:0d:a0:d2:a2:16:fc:6f:f9:a7:ba:3d:df:86:98:d9:d6:7a:
         f0:0e:f4:4f:76:90:b7:04:b7:02:1d:2c:80:c3:65:af:71:62:
         4d:22:74:c0:e8:69:f8:25:5c:dc:a0:c5:9e:38:5e:24:9f:dd:
         12:ac:e3:a5:2e:57:9d:76:29:41:54:13:36:15:39:4d:56:d2:
         47:a8:4f:de:80:03:27:75:48:39:50:96:b9:32:bf:39:ee:1e:
         a9:66:20:84:97:04:e8:20:90:f8:80:41:e1:fe:cd:1f:2d:14:
         b5:e6:76:ce:77:e2:f9:58:f6:a5:64:b0:9f:75:25:1c:c0:b1:
         42:19:6d:70:16:e8:ce:0a:e9:3f:06:ea:c7:47:1b:c6:43:7a:
         c0:c1:6f:f8:f8:1d:07:1a:5e:45:2d:79:ae:77:57:73:b7:b2:
         4b:97:67:a3:a3:80:73:7e:c2:e3:ac:de:4b:ce:9d:69:c7:8c:
         2d:74:91:19:ad:fc:aa:b3:92:bd:07:4b:c4:64:ef:98:9b:33:
         76:99:4d:f0:7d:7a:02:f8:a1:10:bf:b9:5d:b5:bd:ac:42:91:
         46:eb:97:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:39:06 2026 by rpki-client