This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File:                     Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier:          yFe6sJD6kqTXnrW859kfVX/AseAGoNO1Efs9ewrC54w=
Subject key identifier:   67:9D:59:C8:D8:35:45:14:CD:FE:B8:65:7E:C2:EE:5F:77:3A:18:8A
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer:       /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number:          E0
Signing time:             Sun 25 Jan 2026 04:45:42 +0000
Manifest this update:     Sun 25 Jan 2026 04:45:41 +0000
Manifest next update:     Sun 01 Feb 2026 04:45:41 +0000
Files and hashes:         1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: TG39fj9mkrVIHystQQS1BIBPmkknltmjV6nbo9DowAA=)
                          2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: aniyMN410sjj0MEX+PDPaHXzJQYHXYAopGV6HCn0kcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
                          rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
        Validity
            Not Before: Jan 25 04:45:41 2026 GMT
            Not After : Feb  1 04:45:41 2026 GMT
        Subject: CN=69759ff6-8af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:81:a1:56:01:84:dd:58:98:b8:67:8b:a4:
                    05:b0:8a:33:9e:57:e3:a1:e4:1b:bb:ce:21:9e:58:
                    0d:4e:a6:8b:e5:eb:9d:c1:20:84:3d:64:d7:16:d2:
                    e8:9e:1f:b9:38:bb:f9:fb:84:74:f7:fd:db:a6:64:
                    bf:5a:3f:39:b7:d3:73:a5:f9:0e:05:82:61:96:5d:
                    bb:71:3b:60:e4:4c:7d:dd:fe:44:fa:0d:43:ce:c3:
                    70:3f:93:9d:86:fb:39:7e:42:07:7f:dd:4e:33:c0:
                    d3:4c:6c:a2:27:0e:b8:89:38:9c:c5:0b:72:ed:e7:
                    09:46:eb:0d:a0:c2:cd:41:6d:e2:7f:3d:fc:27:30:
                    b3:aa:d3:7f:a2:ad:b7:af:e7:f7:7b:71:0b:e3:ac:
                    29:3c:13:58:85:5e:22:61:6b:23:ef:a9:56:b2:79:
                    02:38:23:49:cd:d8:35:1d:64:a7:ef:4e:89:a5:a4:
                    36:ca:ed:9b:66:a3:0a:5c:c2:68:df:e5:27:e4:11:
                    16:26:e1:12:25:d1:eb:ef:80:f3:a1:a5:d7:f8:c9:
                    0d:65:b7:3b:32:7f:62:87:5b:14:7d:f9:d4:4e:2d:
                    7d:c9:19:71:aa:2c:61:dd:3e:41:1f:08:51:eb:d4:
                    f4:b5:2e:74:34:27:4f:1f:96:38:1f:50:4d:3c:5d:
                    57:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9D:59:C8:D8:35:45:14:CD:FE:B8:65:7E:C2:EE:5F:77:3A:18:8A
            X509v3 Authority Key Identifier:
                keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:66:93:ac:4a:f8:15:97:ea:4d:1d:fd:24:6b:ff:91:ad:3c:
         ac:8a:56:fc:64:89:6d:51:a5:8f:f7:92:88:32:91:be:1a:74:
         a6:e0:89:13:97:5c:be:c2:66:4e:ef:38:0f:a1:8d:f9:3a:af:
         32:0f:be:f8:df:ce:08:f4:4c:9a:24:1a:89:cc:a8:72:1d:4d:
         85:13:31:ac:d8:31:f1:3e:f9:fc:97:20:ad:39:20:4b:be:d3:
         28:fd:12:f7:63:da:05:68:18:37:7d:58:02:da:ed:a9:77:e0:
         a5:3a:76:a8:94:31:a9:8d:24:a1:4a:df:94:76:fb:e3:ed:6d:
         c2:36:48:e9:06:3f:ad:e5:bf:4c:a9:5c:f7:1d:38:60:e4:3a:
         fb:31:d9:be:56:8a:66:19:e5:4f:63:ac:9b:f2:78:ae:42:8d:
         d9:c4:06:ab:63:5b:f7:8d:bf:81:74:b2:3e:6a:6f:01:87:77:
         3d:fc:a8:1a:a1:9f:f3:b4:89:56:de:2d:90:40:63:52:a8:bd:
         3b:5b:30:12:df:6d:21:31:fe:88:69:0d:30:db:bc:70:3e:f6:
         bd:b2:02:4f:01:0c:a5:87:8a:23:e6:32:76:53:c0:99:20:d8:
         54:d3:ea:b4:15:a7:1f:79:55:ad:ff:55:10:4c:9a:ed:19:fb:
         8d:21:ad:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFCRjAxMTAvBgNVBAUTKDIxQ0ZDRTgxRDg3NUQ1Q0Y4RjU5NkFEQkZDQzM2MDE5
NjFDNDQxRTcwHhcNMjYwMTI1MDQ0NTQxWhcNMjYwMjAxMDQ0NTQxWjAYMRYwFAYD
VQQDDA02OTc1OWZmNi04YWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuHWBoVYBhN1YmLhni6QFsIoznlfjoeQbu84hnlgNTqaL5eudwSCEPWTXFtLo
nh+5OLv5+4R09/3bpmS/Wj85t9NzpfkOBYJhll27cTtg5Ex93f5E+g1DzsNwP5Od
hvs5fkIHf91OM8DTTGyiJw64iTicxQty7ecJRusNoMLNQW3ifz38JzCzqtN/oq23
r+f3e3EL46wpPBNYhV4iYWsj76lWsnkCOCNJzdg1HWSn706JpaQ2yu2bZqMKXMJo
3+Un5BEWJuESJdHr74DzoaXX+MkNZbc7Mn9ih1sUffnUTi19yRlxqixh3T5BHwhR
69T0tS50NCdPH5Y4H1BNPF1XhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGedWcjY
NUUUzf64ZX7C7l93OhiKMB8GA1UdIwQYMBaAFCHPzoHYddXPj1lq2/zDYBlhxEHn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC85RjU5MUU4RUE0
MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFjLVBXV3JiX01OZ0dXSEVR
ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFlYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MUJGMC85RjU5MUU4RUE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFj
LVBXV3JiX01OZ0dXSEVRZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcZpOsSvgVl+pNHf0ka/+RrTysilb8ZIltUaWP95KIMpG+GnSm4IkT
l1y+wmZO7zgPoY35Oq8yD774384I9EyaJBqJzKhyHU2FEzGs2DHxPvn8lyCtOSBL
vtMo/RL3Y9oFaBg3fVgC2u2pd+ClOnaolDGpjSShSt+Udvvj7W3CNkjpBj+t5b9M
qVz3HThg5Dr7Mdm+VopmGeVPY6yb8niuQo3ZxAarY1v3jb+BdLI+am8Bh3c9/Kga
oZ/ztIlW3i2QQGNSqL07WzAS320hMf6IaQ0w27xwPva9sgJPAQylh4oj5jJ2U8CZ
INhU0+q0FacfeVWt/1UQTJrtGfuNIa34
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:15:28 2026 by rpki-client