This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
File:                     oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json)
Hash identifier:          VX3sWH12/bS2ZlgU+v/++QidiLFzHgs4ag3i2wb+aWQ=
Subject key identifier:   99:46:1D:8B:63:46:68:B3:68:BC:A5:87:30:43:3C:56:41:CC:FB:66
Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Certificate issuer:       /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
Manifest number:          01AE
Signing time:             Sun 25 Jan 2026 02:32:53 +0000
Manifest this update:     Sun 25 Jan 2026 02:32:52 +0000
Manifest next update:     Sun 01 Feb 2026 02:32:52 +0000
Files and hashes:         1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: wQX002xYFkuvqKA7Az0ArnCsydPMKt0G1LUGwVpNGQM=)
                          2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: T+njLY2SFAOPX3VSAe1EY/xCteiDMwgUqIpmnoo6/ro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
                          rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
        Validity
            Not Before: Jan 25 02:32:52 2026 GMT
            Not After : Feb  1 02:32:52 2026 GMT
        Subject: CN=697580d4-3c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:d0:0e:33:9c:a8:89:6d:c3:b1:a4:5b:a2:
                    81:7e:0a:f8:c3:5e:2e:23:01:84:c2:75:31:a7:97:
                    e6:a9:40:2b:31:f7:40:ed:b0:28:4f:d5:a6:f6:50:
                    22:1d:4f:7a:74:00:99:81:1d:86:25:50:eb:c1:c9:
                    22:34:e4:4c:fa:83:a2:11:be:54:10:04:e3:57:e7:
                    84:a3:1c:8e:5c:e8:f1:65:a7:01:88:08:70:4d:3a:
                    ae:f3:0c:fa:ee:24:7a:7a:6e:b7:5a:61:e1:b1:42:
                    bb:ab:ab:56:56:d0:77:ea:06:98:4a:3d:bc:97:96:
                    0d:fd:b3:39:69:c8:2b:1a:0a:b3:14:c3:b8:aa:6a:
                    d1:38:c7:3c:e2:19:89:a4:b6:b2:5a:6f:66:75:77:
                    71:f3:49:b1:63:82:89:c8:ef:bd:17:39:2b:65:f2:
                    79:3c:c4:f6:12:39:20:1b:c3:e8:b5:f7:5a:cf:25:
                    a8:b1:b0:c8:5b:28:30:0f:63:99:4e:a4:2c:4c:ae:
                    38:8c:f3:d8:d4:df:05:6c:eb:61:f5:cd:77:e1:bb:
                    7a:ca:81:94:41:1b:c2:99:bf:e5:3b:31:a2:16:56:
                    d4:31:f5:3b:6a:ae:b0:eb:77:d5:36:73:de:c9:33:
                    b8:95:05:3a:af:ba:07:b4:97:5f:19:7c:ed:b4:1e:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:46:1D:8B:63:46:68:B3:68:BC:A5:87:30:43:3C:56:41:CC:FB:66
            X509v3 Authority Key Identifier:
                keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:9d:5d:1c:60:8f:dd:e6:67:28:fd:9f:a5:08:79:62:3b:
         c7:3e:a7:5e:21:6e:7d:73:d8:9b:90:8e:54:8c:17:aa:23:2f:
         53:e3:bf:ac:b1:9d:77:e4:e1:dd:b3:12:fd:10:96:be:6d:7d:
         52:07:26:06:7f:e8:57:3d:97:35:ce:1b:7f:a5:27:aa:4f:f7:
         7f:ed:aa:a4:54:41:c5:fa:eb:48:db:cb:fa:a1:e2:ac:96:bd:
         3d:3e:66:65:05:e7:d5:3e:0a:54:10:53:9f:ce:0f:c5:4e:b4:
         11:f8:d9:83:2b:cb:ce:19:c8:85:a3:7a:39:74:53:94:32:cf:
         ae:02:e7:71:5d:b9:77:f9:80:a0:5f:b6:06:8c:00:ff:bb:5a:
         6a:5f:21:41:c7:a3:8a:8f:01:ee:01:4a:ee:25:e7:98:e4:4b:
         8a:f0:9c:89:6a:30:1e:74:37:f5:a3:bb:f3:05:22:9f:00:e7:
         57:4f:6d:58:b4:ce:79:e3:98:ec:95:98:f5:44:2f:0b:a0:f8:
         31:17:23:66:4d:c7:8b:b1:5b:c2:eb:28:d9:2a:3e:51:0f:c5:
         2f:ff:71:eb:0b:00:2c:8e:6a:3e:f5:29:bd:e7:2e:fc:f4:83:
         2d:a8:09:85:50:a7:81:f6:31:1f:73:ff:49:d7:b8:6a:41:1a:
         43:1b:93:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYwNEIxMTAvBgNVBAUTKEExNEJEQUEzMTU3NkE2MzY3QTBCNUMzQUNBQjkxQzRF
OUYzMTE4RUYwHhcNMjYwMTI1MDIzMjUyWhcNMjYwMjAxMDIzMjUyWjAYMRYwFAYD
VQQDDA02OTc1ODBkNC0zYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqmLQDjOcqIltw7GkW6KBfgr4w14uIwGEwnUxp5fmqUArMfdA7bAoT9Wm9lAi
HU96dACZgR2GJVDrwckiNORM+oOiEb5UEATjV+eEoxyOXOjxZacBiAhwTTqu8wz6
7iR6em63WmHhsUK7q6tWVtB36gaYSj28l5YN/bM5acgrGgqzFMO4qmrROMc84hmJ
pLayWm9mdXdx80mxY4KJyO+9FzkrZfJ5PMT2EjkgG8PotfdazyWosbDIWygwD2OZ
TqQsTK44jPPY1N8FbOth9c134bt6yoGUQRvCmb/lOzGiFlbUMfU7aq6w63fVNnPe
yTO4lQU6r7oHtJdfGXzttB5G5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlGHYtj
RmizaLylhzBDPFZBzPtmMB8GA1UdIwQYMBaAFKFL2qMVdqY2egtcOsq5HE6fMRjv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjA0Qi80MUMwMTM1QzZE
QUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBqWjZDMXc2eXJrY1RwOHhH
TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29VdmFveFYycGpaNkMxdzZ5cmtjVHA4eEdPOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjA0Qi80MUMwMTM1QzZEQUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBq
WjZDMXc2eXJrY1RwOHhHTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBE5Z1dHGCP3eZnKP2fpQh5YjvHPqdeIW59c9ibkI5UjBeqIy9T47+s
sZ135OHdsxL9EJa+bX1SByYGf+hXPZc1zht/pSeqT/d/7aqkVEHF+utI28v6oeKs
lr09PmZlBefVPgpUEFOfzg/FTrQR+NmDK8vOGciFo3o5dFOUMs+uAudxXbl3+YCg
X7YGjAD/u1pqXyFBx6OKjwHuAUruJeeY5EuK8JyJajAedDf1o7vzBSKfAOdXT21Y
tM5545jslZj1RC8LoPgxFyNmTceLsVvC6yjZKj5RD8Uv/3HrCwAsjmo+9Sm95y78
9IMtqAmFUKeB9jEfc/9J17hqQRpDG5Pb
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:35:38 2026 by rpki-client