This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File:                     OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier:          030r1JENIGPf8QcAdNy9U0iw82m01nsY4sNKxYg37CA=
Subject key identifier:   52:DD:3B:9D:EB:DD:4E:9C:C7:17:B6:F5:25:9F:74:ED:80:C3:8D:D6
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer:       /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number:          014B
Signing time:             Sun 25 Jan 2026 01:41:44 +0000
Manifest this update:     Sun 25 Jan 2026 01:41:44 +0000
Manifest next update:     Sun 01 Feb 2026 01:41:44 +0000
Files and hashes:         1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: UzfpwMt5++EEsO+6Z6CyRHR3ETmA9izQMinSkNsQwo4=)
                          2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: nFQQw/dyghkb1sXKy9uupZRqxzdAPtcnxFOFgRiXGi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
        Validity
            Not Before: Jan 25 01:41:44 2026 GMT
            Not After : Feb  1 01:41:44 2026 GMT
        Subject: CN=697574d8-889f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:bc:df:1d:7b:44:d8:72:a9:bd:2b:6a:f2:
                    f3:1c:1d:1d:1b:eb:e3:96:fa:81:f1:c4:82:14:48:
                    c0:ba:a8:f4:da:3f:1e:c8:07:32:e7:4d:8b:0d:ae:
                    e8:ed:43:e2:3a:4f:0c:e8:74:69:13:c2:c4:60:b2:
                    ef:f7:b3:f8:17:2e:af:f7:1c:b1:4e:eb:e5:2c:23:
                    f0:c0:c7:37:92:74:e3:fa:1f:a1:5c:18:ca:83:5e:
                    94:db:cb:e8:06:cc:ff:3d:fc:5a:58:26:9f:60:d4:
                    a3:72:f7:64:0e:45:bd:5d:04:2c:e3:54:14:11:77:
                    f3:8a:02:b5:32:62:43:38:7b:81:1b:ef:99:48:28:
                    bd:0d:97:56:9d:ac:05:7c:62:75:0d:d1:32:6b:ec:
                    f1:bb:9e:aa:a8:fb:7b:09:d1:28:37:0e:04:71:e7:
                    b7:fe:14:93:50:23:47:ee:23:55:45:e6:ea:f5:9f:
                    73:88:1f:85:fc:af:70:48:66:b9:fa:e4:f5:45:07:
                    a1:71:0f:23:b2:f2:2c:f9:1f:74:5e:2a:da:50:1c:
                    20:53:cd:14:5b:74:f4:fa:04:69:03:e1:e9:85:38:
                    ae:5e:07:5b:10:1a:73:65:eb:1f:8a:16:05:1a:fd:
                    eb:82:31:10:5f:00:8a:6b:bb:cc:54:b6:08:43:fe:
                    07:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DD:3B:9D:EB:DD:4E:9C:C7:17:B6:F5:25:9F:74:ED:80:C3:8D:D6
            X509v3 Authority Key Identifier:
                keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ff:53:fd:e0:81:a8:f0:07:87:07:31:e8:2a:54:d2:76:76:
         ac:23:bc:e8:7e:f3:b7:97:54:e7:35:2f:99:f6:59:33:f5:11:
         c3:01:36:f8:bb:c6:5b:cd:e7:7e:c0:8a:77:f5:d0:24:6f:e5:
         c4:bf:c0:30:e9:f9:f7:22:fd:92:87:12:9f:e7:b7:69:9d:14:
         31:55:bb:e2:88:a3:4d:f9:62:c4:97:75:04:20:ef:ec:c8:f1:
         41:9a:9e:f1:8c:44:fe:cb:8e:d4:be:e4:3e:1b:f5:57:6d:0b:
         59:ae:9d:8a:25:16:c2:03:f1:a1:ca:b1:72:2c:0b:b3:bb:90:
         00:07:c9:6b:55:59:bd:f7:73:53:df:6b:1b:af:96:04:2b:ae:
         2d:f3:b3:04:03:50:4a:b8:f6:f2:9d:f5:c4:95:ba:d3:5f:1c:
         e3:fc:2d:2b:5e:f4:25:e5:41:29:f1:0c:4d:57:58:6c:5f:cb:
         c5:b0:a3:34:d1:d4:9d:8e:49:36:43:10:c8:6f:94:65:4e:c5:
         82:6d:96:e6:2c:c8:7d:50:68:d4:46:95:8f:0f:f3:a4:19:a2:
         46:a8:c9:fe:54:94:83:10:36:db:e7:1c:1e:de:a8:c0:92:3d:
         b6:de:d4:d5:0d:22:41:3a:6d:02:bb:4b:8f:82:d1:3d:46:b3:
         81:d1:43:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1MjAxMTAvBgNVBAUTKDM4MENENkJDQzlFMUMxMUZFQzRFRTI3REE4OTM4MjRE
QURCNTIxMkEwHhcNMjYwMTI1MDE0MTQ0WhcNMjYwMjAxMDE0MTQ0WjAYMRYwFAYD
VQQDDA02OTc1NzRkOC04ODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZC83x17RNhyqb0ravLzHB0dG+vjlvqB8cSCFEjAuqj02j8eyAcy502LDa7o
7UPiOk8M6HRpE8LEYLLv97P4Fy6v9xyxTuvlLCPwwMc3knTj+h+hXBjKg16U28vo
Bsz/PfxaWCafYNSjcvdkDkW9XQQs41QUEXfzigK1MmJDOHuBG++ZSCi9DZdWnawF
fGJ1DdEya+zxu56qqPt7CdEoNw4Ecee3/hSTUCNH7iNVRebq9Z9ziB+F/K9wSGa5
+uT1RQehcQ8jsvIs+R90XiraUBwgU80UW3T0+gRpA+HphTiuXgdbEBpzZesfihYF
Gv3rgjEQXwCKa7vMVLYIQ/4HzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLdO53r
3U6cxxe29SWfdO2Aw43WMB8GA1UdIwQYMBaAFDgM1rzJ4cEf7E7ifaiTgk2ttSEq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC84RjkwOTFENDMy
QjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdSX3NUdUo5cUpPQ1RhMjFJ
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09Beld2TW5od1Jfc1R1SjlxSk9DVGEyMUlTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjUyMC84RjkwOTFENDMyQjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdS
X3NUdUo5cUpPQ1RhMjFJU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCo/1P94IGo8AeHBzHoKlTSdnasI7zofvO3l1TnNS+Z9lkz9RHDATb4
u8Zbzed+wIp39dAkb+XEv8Aw6fn3Iv2ShxKf57dpnRQxVbviiKNN+WLEl3UEIO/s
yPFBmp7xjET+y47UvuQ+G/VXbQtZrp2KJRbCA/GhyrFyLAuzu5AAB8lrVVm993NT
32sbr5YEK64t87MEA1BKuPbynfXElbrTXxzj/C0rXvQl5UEp8QxNV1hsX8vFsKM0
0dSdjkk2QxDIb5RlTsWCbZbmLMh9UGjURpWPD/OkGaJGqMn+VJSDEDbb5xwe3qjA
kj223tTVDSJBOm0Cu0uPgtE9RrOB0UM0
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:04:53 2026 by rpki-client