This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File:                     oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier:          ZzMIWMb5A1oy5DuAnhig/CEhI26k+oRpIH95mTvuh/g=
Subject key identifier:   9D:E4:67:99:DF:DC:52:3D:7B:4A:45:B3:0B:96:61:D3:89:67:0A:E8
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer:       /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial:       07DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number:          07C9
Signing time:             Sat 24 Jan 2026 20:42:21 +0000
Manifest this update:     Sat 24 Jan 2026 20:42:21 +0000
Manifest next update:     Sat 31 Jan 2026 20:42:21 +0000
Files and hashes:         1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: RxMgH97tpzv7NDkV+9KaP9A/wekGkygGnoGe/B5/+sc=)
                          2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: Cg9ICYE9I7QHfG+L0DGU6D2Wt92m7BQcheqj3kGMwFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
                          rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013 (0x7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
        Validity
            Not Before: Jan 24 20:42:21 2026 GMT
            Not After : Jan 31 20:42:21 2026 GMT
        Subject: CN=69752ead-ea64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:85:26:9a:a7:35:da:14:11:5a:6a:5e:09:
                    f0:41:5d:4a:d4:74:67:db:0b:d7:06:82:73:ba:83:
                    cc:f1:dc:6b:56:3a:43:32:40:32:8f:53:db:31:91:
                    1a:13:c0:cd:a6:a3:aa:88:66:ff:c9:cf:dd:4d:da:
                    08:61:b3:ed:d2:f6:47:95:61:6e:1e:22:10:fe:b0:
                    c0:c9:a6:c3:50:ed:37:92:58:ba:b1:1f:81:21:47:
                    c7:a7:9c:6b:85:25:8c:ff:38:c5:71:bd:71:fa:13:
                    88:c1:bf:59:2c:df:14:92:2e:98:c2:86:22:e7:d9:
                    90:db:5c:22:06:f7:bf:1c:d3:8f:1d:32:12:cd:30:
                    d1:15:a2:46:8d:87:82:e8:11:d4:c5:20:70:f5:8c:
                    a0:19:80:ca:82:61:f6:74:f8:e9:40:8a:34:47:35:
                    b3:cc:81:32:7a:9f:e0:ea:75:25:d1:0d:6c:b3:93:
                    b5:3d:7c:73:93:30:e0:e8:af:32:d2:25:9d:76:2a:
                    90:80:aa:33:ea:ef:36:b0:9f:35:b5:c6:ae:fb:48:
                    ef:47:ce:55:fb:98:5d:e1:7d:17:26:fa:0a:59:a7:
                    f1:7b:91:46:53:1a:da:cc:96:ff:57:d2:c1:cb:f0:
                    63:be:14:78:3c:c5:f4:60:5f:52:fa:c9:69:fe:55:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E4:67:99:DF:DC:52:3D:7B:4A:45:B3:0B:96:61:D3:89:67:0A:E8
            X509v3 Authority Key Identifier:
                keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:6e:ac:47:ab:ec:b3:31:7b:2e:aa:21:f5:86:d9:2a:b5:
         33:88:11:60:bb:be:92:6b:2a:ee:c9:de:86:b8:42:0d:9d:40:
         b2:6c:cd:86:63:94:26:50:36:f0:cf:86:15:4c:57:c7:35:d9:
         3c:09:f1:25:a9:3d:d6:2a:6a:5c:99:04:52:04:63:7f:c1:86:
         31:dd:cc:9e:29:3c:b3:6a:6a:86:3a:d6:b0:56:f9:05:e4:28:
         6f:8e:35:37:52:d0:0e:b0:5c:9d:65:82:6b:5e:e4:8d:78:2f:
         11:10:5b:a7:16:b9:cd:54:9e:69:cc:5b:bd:aa:16:c3:6c:3d:
         b7:29:27:32:60:11:5b:fb:ee:37:98:1a:9d:f3:db:9a:e5:e8:
         51:63:bf:e7:00:1a:b0:1e:c9:b8:23:84:48:08:fe:80:ac:35:
         bc:26:f3:4d:ca:bd:35:29:2a:ff:f3:9f:0c:ed:5a:f2:a7:ca:
         d8:b7:9f:22:d6:29:04:77:36:b1:6b:5f:f3:0b:de:ff:4d:60:
         2e:9c:78:1d:0b:64:87:f5:ed:c1:90:30:cf:ee:d8:5b:96:dc:
         8e:94:62:74:83:20:7e:07:17:25:cf:c1:f8:89:3f:7b:a5:b5:
         93:45:74:83:59:2e:c4:d9:33:08:07:64:f5:c4:d9:66:c8:93:
         02:02:91:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:14 2026 by rpki-client