This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
File:                     rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json)
Hash identifier:          vKq29M8W+KrhdYR/Roul8v6IjzMod5Ayy/4MHzJyH7M=
Subject key identifier:   54:41:91:6D:2B:4E:1E:FE:C6:BE:10:BD:03:C1:7B:C9:AE:FA:FF:B7
Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
Certificate issuer:       /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Certificate serial:       03B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
Manifest number:          03AC
Signing time:             Sat 24 Jan 2026 23:54:10 +0000
Manifest this update:     Sat 24 Jan 2026 23:54:09 +0000
Manifest next update:     Sat 31 Jan 2026 23:54:09 +0000
Files and hashes:         1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: XH1OJCG9UVuarh3YJx23o5H8aPREILun3R9LeWk8QvI=)
                          2: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: SFUw1crOwEdM2KZGmzmI0Y/ekMkiUyOErHqNpQ3ZimY=)
                          3: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: hW5FiSV5239AbImQE/mYJwi40OATdFzGCdVUMZFhemo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
                          rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949 (0x3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
        Validity
            Not Before: Jan 24 23:54:09 2026 GMT
            Not After : Jan 31 23:54:09 2026 GMT
        Subject: CN=69755ba2-c5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5b:98:1d:e2:c7:f4:d8:96:17:6d:a1:57:bf:
                    1d:60:6d:e0:1c:be:70:f0:23:66:a8:b3:63:29:a8:
                    76:43:40:bd:50:93:fc:d1:90:08:e7:e1:8b:b1:c4:
                    8c:17:11:36:59:24:25:54:35:d9:e8:b5:63:65:53:
                    7a:79:92:b3:0b:e7:68:d5:cc:1b:0a:4d:f2:20:db:
                    79:c6:d7:42:79:0e:78:13:d1:01:61:fd:65:6d:94:
                    af:48:41:b3:ce:17:0d:aa:a5:92:c9:a9:4d:a7:69:
                    f0:ef:61:e6:cc:50:1a:bd:0b:d8:0e:9e:cb:75:88:
                    47:f3:6c:ee:d5:57:56:f7:90:5a:19:7c:e1:7b:bd:
                    2a:64:e7:1d:94:42:f6:c1:fe:e4:c2:fa:e3:6f:aa:
                    da:8c:65:32:c4:46:0e:20:96:12:66:81:54:57:5d:
                    e7:f4:54:4f:bd:7e:b3:1b:7a:0b:44:54:ea:be:25:
                    37:10:62:91:2c:2e:a0:39:78:bb:c9:01:bd:63:90:
                    8b:21:dd:df:de:c9:c4:79:a7:92:7e:a2:2c:13:a5:
                    d1:bc:17:48:a9:b3:ff:19:28:fb:11:e3:53:4c:32:
                    11:8a:57:78:66:e1:4c:66:cb:4d:62:40:3f:b1:73:
                    84:e3:78:6d:b9:53:54:fc:d9:90:69:6c:44:13:67:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:41:91:6D:2B:4E:1E:FE:C6:BE:10:BD:03:C1:7B:C9:AE:FA:FF:B7
            X509v3 Authority Key Identifier:
                keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f8:01:17:88:46:f0:bf:f8:b0:c1:18:00:be:4e:c9:3c:dd:
         e7:67:39:17:42:7e:c4:36:cf:d6:37:a2:a4:b4:cc:b4:c7:c2:
         7d:4a:88:4c:86:05:ee:2e:d9:1d:69:8d:f2:03:99:eb:38:ac:
         27:ec:ca:50:7e:39:f3:11:fa:c0:a0:d7:04:13:3e:4b:be:60:
         47:15:d7:e0:23:9d:9c:39:e0:1d:0c:12:b6:3a:57:c9:e5:9e:
         66:74:fb:83:97:a8:e0:16:61:67:6a:55:7b:6e:49:79:1c:80:
         d7:2a:be:2e:0f:5f:4f:2f:6f:b6:11:16:16:4b:52:61:af:f1:
         77:43:ae:d7:2f:58:99:fc:04:fa:e0:6d:50:be:70:71:2e:f5:
         da:6d:51:4c:92:95:bc:bb:7f:7f:c2:a2:c7:a1:23:1f:59:ce:
         22:53:fc:37:ff:25:a6:0b:f7:6a:ef:dd:6b:09:09:66:90:ec:
         be:54:0d:e8:69:a2:97:a3:9b:e6:9d:c8:10:1a:a8:92:b7:c6:
         9e:2d:93:dc:54:fb:d8:7e:d7:45:e4:ad:8b:56:28:cb:92:0d:
         e2:62:cf:6b:ed:2f:f4:ec:e7:21:07:fc:2a:30:6b:7d:53:5c:
         01:b4:e1:50:f3:36:ce:2d:b9:d6:e1:e5:4d:d1:86:ad:c6:0b:
         fb:08:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:29:46 2026 by rpki-client