This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
File:                     rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json)
Hash identifier:          M6a6GQCN1Iv39pmls9MUC7Q9MIeQyMRUNsLJHlUC49c=
Subject key identifier:   76:15:E3:09:27:3E:B7:B3:E9:D3:F7:C2:4E:35:70:3B:F8:A6:36:35
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Certificate issuer:       /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
Manifest number:          0169
Signing time:             Sun 25 Jan 2026 03:14:58 +0000
Manifest this update:     Sun 25 Jan 2026 03:14:58 +0000
Manifest next update:     Sun 01 Feb 2026 03:14:58 +0000
Files and hashes:         1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: IuCxMBRLhpuIdGozWmhEJ8oky+mGmutCdGEL/x2GF9c=)
                          2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: roB5hg8LbgyHBq3NzG2BxN4ORRxykj532WnJpDlGnj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
        Validity
            Not Before: Jan 25 03:14:58 2026 GMT
            Not After : Feb  1 03:14:58 2026 GMT
        Subject: CN=69758ab2-a200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:08:e3:2a:84:8a:82:9b:9b:b8:1a:b2:4a:
                    2c:e9:1e:26:ad:f7:e2:1a:5a:bb:87:5a:3b:ad:e3:
                    af:d2:b2:90:7a:24:2d:e2:94:8a:1d:75:e4:12:e7:
                    5b:50:61:c0:00:94:71:a0:e4:0b:9c:9e:1d:9c:be:
                    7b:6a:a7:ff:99:fa:57:4d:26:b3:74:fc:1d:5c:a3:
                    fc:d8:6d:4f:50:15:f5:7c:41:d9:d5:99:96:49:d4:
                    35:f3:23:0e:0a:15:5c:48:c2:ca:80:8b:df:8a:13:
                    8c:13:6f:6a:34:be:bc:d4:0c:c2:71:15:03:30:3a:
                    c2:a8:88:0c:ed:7b:ec:dd:20:38:77:42:73:d9:28:
                    36:a1:06:af:a6:f8:3c:41:fb:b7:ac:f5:d3:a5:a4:
                    8a:65:59:6b:1a:c6:b2:2d:20:48:53:7f:2e:19:b5:
                    19:a7:d8:6e:88:1f:c4:38:ff:d6:f8:39:15:31:e7:
                    7c:25:b1:61:70:74:ee:aa:bc:d8:19:6c:49:6e:2f:
                    0a:52:9c:2d:b2:15:23:34:eb:02:fc:11:1d:cd:4b:
                    4f:2f:37:37:d7:90:fe:f2:fa:63:a0:60:d1:03:e4:
                    96:52:b4:8e:00:e6:bf:3b:bc:af:0d:6f:3e:ab:db:
                    8a:fd:30:e7:1d:79:b2:4c:9b:95:dc:62:af:e8:a7:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:15:E3:09:27:3E:B7:B3:E9:D3:F7:C2:4E:35:70:3B:F8:A6:36:35
            X509v3 Authority Key Identifier:
                keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:15:20:2f:22:9f:49:14:93:39:4c:02:33:25:79:d9:ee:31:
         fa:c6:73:f3:70:fd:66:0e:4f:ac:d8:ac:6b:e5:ce:7f:8c:aa:
         0c:e3:34:8a:ff:54:0d:2e:51:ae:90:cd:55:9b:b0:a6:af:1f:
         23:9b:9e:9e:f2:d5:d7:6f:68:21:84:76:7d:9a:51:b3:2e:05:
         12:e2:62:43:e6:d4:0e:91:29:e7:da:19:27:7c:c9:58:34:89:
         b2:82:33:b0:29:97:18:ec:94:db:00:06:dd:a9:f3:71:37:86:
         e0:ce:e2:88:18:c5:0a:35:eb:8b:23:1b:88:a7:31:96:f9:64:
         97:68:d7:68:33:a5:c2:50:c6:64:d5:70:a7:c0:95:ab:39:05:
         62:cc:c4:cf:33:a4:4a:e8:b3:f6:b9:ce:dd:d7:f9:ea:9c:7f:
         8e:80:a4:73:cc:26:28:62:39:32:2a:ec:04:44:31:03:f2:4f:
         60:99:af:9f:d1:cb:3a:13:72:b5:cc:aa:7d:56:19:d9:49:3f:
         4e:84:25:4f:a2:67:99:5d:86:36:f0:33:14:b8:5f:55:50:50:
         77:5c:69:a6:1a:a7:85:c9:e2:6b:6f:b2:f9:f4:3a:82:54:f5:
         3c:ea:71:e5:ce:5b:d1:8c:60:51:2d:2d:14:c9:8f:a3:9b:ad:
         11:6d:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:49:11 2026 by rpki-client