This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft
File:                     OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json)
Hash identifier:          u62vsQirqwvoWU+fjKEhBXmmoIXIZcHT8CS4d10LLiI=
Subject key identifier:   C3:5F:97:B6:EE:38:FF:5A:1E:2B:F1:AB:D5:CA:A5:11:E0:16:50:3B
Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08
Certificate issuer:       /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408
Certificate serial:       023A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft
Manifest number:          0236
Signing time:             Sun 25 Jan 2026 01:15:39 +0000
Manifest this update:     Sun 25 Jan 2026 01:15:39 +0000
Manifest next update:     Sun 01 Feb 2026 01:15:39 +0000
Files and hashes:         1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: oYn1VEO01FY49N21z3HQ55JArxQBdxMNRgG76O8nEWA=)
                          2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: Ll4yg/VXe6ptCubyWYXaO265ePb/yR1xqd8fLdCSjr0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl
                          rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408
        Validity
            Not Before: Jan 25 01:15:39 2026 GMT
            Not After : Feb  1 01:15:39 2026 GMT
        Subject: CN=69756ebb-b510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:e5:d8:1e:83:38:21:94:e6:a4:e4:72:e4:
                    b5:c2:1c:80:91:80:6f:dc:30:6a:67:20:5c:54:1f:
                    eb:e1:9c:f4:25:35:ad:86:68:75:3e:72:40:a8:ca:
                    b7:48:f9:21:cc:be:3c:bf:5e:08:7b:c9:b8:0f:56:
                    c9:2a:bb:62:5a:5d:7d:c6:53:f2:62:d0:44:6e:da:
                    d6:6e:7b:23:0d:fa:67:a2:84:77:6c:50:01:39:90:
                    9f:80:ad:1e:0d:15:5c:f6:7c:d5:7e:52:55:6c:af:
                    39:f0:6e:f3:97:55:df:05:c4:6c:1a:f2:a2:93:cc:
                    18:ec:6c:06:f9:5a:59:62:a4:34:10:2a:81:9a:15:
                    e2:d9:e5:6d:b7:21:d5:87:53:57:40:93:1e:dc:c6:
                    e2:e6:58:b1:24:aa:c1:18:88:4a:d3:71:ea:c1:ce:
                    d7:18:a6:3c:0e:73:90:77:1b:86:f6:1a:41:3f:32:
                    03:6d:47:57:53:53:98:46:79:4a:f6:73:7b:e8:33:
                    4d:31:1d:f8:62:4c:f6:ad:f0:e0:b6:a6:45:87:eb:
                    dd:97:18:6a:ec:ef:d7:5e:df:39:c9:06:95:82:da:
                    bd:b6:22:3c:a5:b1:99:7b:00:d0:2e:52:04:f3:9c:
                    56:65:21:b7:83:21:38:f4:a4:28:9c:7e:dc:03:a7:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5F:97:B6:EE:38:FF:5A:1E:2B:F1:AB:D5:CA:A5:11:E0:16:50:3B
            X509v3 Authority Key Identifier:
                keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:95:40:7c:4d:c8:41:d6:d6:66:2a:6a:72:55:ad:4d:75:18:
         35:34:a9:f8:e1:a8:37:a6:7f:3b:b9:92:2f:5b:53:81:f6:7f:
         55:59:bf:0e:a7:f7:13:29:36:4c:d0:a8:07:0a:cb:d8:d3:f2:
         a9:a4:39:99:87:47:cd:25:e4:0f:ed:a9:a1:26:e8:5d:bc:5a:
         f0:05:f1:62:b6:1d:4e:8d:e5:4b:ef:f2:eb:32:38:c0:68:75:
         f0:a8:dd:30:ef:01:5f:05:0b:62:5e:94:43:aa:6a:03:62:80:
         e1:75:a5:f2:90:d2:17:b9:5e:64:c8:a3:ad:5a:1b:d3:59:bc:
         6d:85:a3:b7:03:d7:89:c4:d2:d4:1a:9e:86:f5:0c:38:45:66:
         a1:5f:bf:b8:d4:b4:eb:53:5b:81:5a:10:02:ee:35:2b:4d:7a:
         ef:24:d1:58:ab:3e:44:10:44:67:b3:34:ae:86:ad:99:0c:4e:
         f9:5a:af:ef:ed:e9:fe:f1:3a:bc:80:56:f9:9e:b9:da:43:3a:
         e1:98:05:0d:7e:6e:c0:6f:1e:b7:4b:ed:2d:3f:7d:d0:d0:49:
         28:ce:29:cd:89:d0:23:d1:28:a0:53:4e:f6:65:50:b3:17:d9:
         ca:97:7b:35:0e:26:0e:ba:ea:e6:ca:69:ba:c1:e6:86:96:b6:
         97:8d:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:04 2026 by rpki-client