This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File:                     o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier:          zVJtTrsC4gcYWB8wRecXev78Erwk/o4Cm8y8p5rgug8=
Subject key identifier:   02:32:28:6B:B5:AD:D3:BE:DC:D3:9C:5B:DE:EA:3E:94:DE:11:9E:21
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer:       /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number:          1E
Signing time:             Sun 25 Jan 2026 06:53:57 +0000
Manifest this update:     Sun 25 Jan 2026 06:53:57 +0000
Manifest next update:     Sun 01 Feb 2026 06:53:57 +0000
Files and hashes:         1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: O4JosXcbRobUDexyvETbPm1ozwRujZBUYLSqJLWJYic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
        Validity
            Not Before: Jan 25 06:53:57 2026 GMT
            Not After : Feb  1 06:53:57 2026 GMT
        Subject: CN=6975be05-1ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d7:73:4d:f5:20:39:45:21:f4:a2:b1:33:25:
                    3a:e4:4e:8b:1d:e4:9b:37:0e:b9:64:e3:ab:98:60:
                    2f:85:08:00:d4:a1:d3:55:1b:d6:f7:c2:ac:ad:e7:
                    df:b8:5b:10:66:4a:eb:5a:ad:c3:99:a0:65:11:c7:
                    28:a5:46:e2:37:f0:a8:6d:bd:47:b0:dc:2d:6e:a6:
                    3e:3a:d9:10:67:cb:f5:bd:4b:0c:2a:84:1a:06:52:
                    96:a7:4c:d2:5b:7f:23:6b:d2:b8:94:20:cb:5f:6d:
                    91:a8:c5:7f:6c:32:12:65:68:6d:5c:df:cd:6e:e3:
                    fe:93:05:a7:b8:35:28:a5:5c:2a:51:4e:c0:21:b2:
                    47:55:7f:3d:8d:6a:df:65:5d:93:f2:df:c9:e8:31:
                    59:8a:30:ac:3e:64:12:40:44:7c:d2:7f:b3:71:ec:
                    cc:93:01:03:bb:1d:3e:95:f9:c2:7a:5a:a0:d3:4b:
                    b5:ec:98:f2:b4:10:b3:2e:35:7c:56:38:4f:fe:92:
                    38:73:59:0c:0a:28:6a:5c:55:fb:c1:1c:8b:ed:95:
                    38:d2:07:3d:e2:22:1c:c3:9b:be:f1:bb:ff:82:c3:
                    95:08:2d:2e:d6:e0:d2:50:ab:31:3c:67:05:60:79:
                    a5:55:2c:31:b9:95:95:a8:97:a7:88:e2:63:b1:67:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:32:28:6B:B5:AD:D3:BE:DC:D3:9C:5B:DE:EA:3E:94:DE:11:9E:21
            X509v3 Authority Key Identifier:
                keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:21:0d:18:f1:8c:ad:1e:b9:d4:9d:12:97:cf:dd:1e:41:93:
         d1:13:98:34:65:9f:0c:ed:ef:ca:cb:75:1a:24:f8:f9:84:fb:
         4a:62:2c:f3:61:db:d0:85:9a:a9:05:93:df:9b:d6:73:39:9c:
         24:aa:07:7d:36:5b:aa:a3:d2:d3:3d:7b:9a:b1:12:46:11:dd:
         a7:fe:3c:80:01:42:ea:8e:ec:39:fa:38:1b:47:1f:4f:c6:51:
         cc:7d:f8:2d:69:02:d7:d1:70:30:8a:f1:e6:81:a8:a7:a3:98:
         eb:6f:40:d6:f5:b1:24:a7:4b:21:d6:fc:c8:e2:a8:33:76:67:
         8c:db:f2:86:d8:ce:6a:33:fd:d7:9c:af:e3:8f:29:49:7a:2f:
         34:32:d4:5b:54:7c:b3:2b:52:46:39:01:e3:f3:ac:56:2e:9d:
         e3:58:5c:fb:35:a8:d1:bf:67:86:68:f4:cd:65:26:41:0c:22:
         69:74:fa:40:62:92:a3:b4:bd:ee:9f:ff:8e:e8:9b:38:d8:9b:
         83:a1:bd:9d:37:03:41:4d:25:b3:3e:53:71:ec:4a:fa:4e:a7:
         87:5a:c3:14:66:d1:36:00:9e:d9:1b:8a:ac:86:7c:84:ef:fb:
         c3:31:31:b1:1e:0f:b5:5c:66:00:76:e9:79:34:fd:e8:58:97:
         4d:20:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:52 2026 by rpki-client