This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
File:                     os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json)
Hash identifier:          2VGNe5QvipCwnMkBEsalSvEovN4LI1S52IpEYi4bzjs=
Subject key identifier:   75:C7:EA:88:AD:59:F1:E9:90:92:30:19:07:6A:D1:50:A0:16:5B:9A
Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
Certificate issuer:       /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
Manifest number:          01C7
Signing time:             Sun 25 Jan 2026 02:23:26 +0000
Manifest this update:     Sun 25 Jan 2026 02:23:26 +0000
Manifest next update:     Sun 01 Feb 2026 02:23:26 +0000
Files and hashes:         1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: MS4FxsxbLFVl1e4ld92wc2tVoOw6bN62mqcFh94HZEY=)
                          2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: G0w0TQdZeUrlcSkeMZASVFwkhbdyy5+tF+86mftNAhQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
                          rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
        Validity
            Not Before: Jan 25 02:23:26 2026 GMT
            Not After : Feb  1 02:23:26 2026 GMT
        Subject: CN=69757e9e-7b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:b6:83:a5:9e:fc:d8:38:a7:59:4d:34:91:
                    51:a3:d0:45:14:d8:4c:bb:39:a8:ea:11:08:6d:06:
                    21:22:f7:fe:5b:f1:51:99:24:11:ad:6a:ca:eb:a9:
                    5c:0e:88:0d:ed:95:62:e1:4a:b8:ec:3e:9a:47:20:
                    8c:53:fc:11:b8:ee:a9:50:9c:c9:3e:43:0d:70:75:
                    39:ac:e2:19:91:27:55:c6:cc:29:f8:23:79:f6:ff:
                    3f:49:c6:d9:40:93:3d:42:a9:11:4f:55:0f:51:e0:
                    9d:51:21:66:90:a1:10:df:09:98:1d:52:66:0b:62:
                    e1:c9:90:93:b2:a3:12:bc:80:07:9a:a6:ce:76:13:
                    b5:fc:7a:07:60:7b:de:37:81:8a:f6:15:7a:66:96:
                    83:24:ae:d8:56:ba:c7:a8:73:7d:73:83:5d:97:36:
                    e2:e9:69:90:91:2a:ca:21:85:21:39:dd:cd:a5:fa:
                    63:c8:b8:02:88:4f:44:b8:81:1b:55:ed:62:31:75:
                    46:4f:f0:53:d1:77:8c:4b:ac:4e:2e:25:ed:3c:5c:
                    8d:be:18:69:4d:76:f8:31:5e:b6:e1:43:13:5a:f2:
                    3d:88:0f:f2:f2:c8:ae:36:72:3c:32:20:d4:78:5b:
                    39:a4:8a:f7:d0:f6:b4:1b:44:8c:71:dc:33:93:cd:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C7:EA:88:AD:59:F1:E9:90:92:30:19:07:6A:D1:50:A0:16:5B:9A
            X509v3 Authority Key Identifier:
                keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:cc:61:d6:4c:5f:31:65:47:14:93:9c:d8:1f:f9:87:12:80:
         f5:a2:70:97:16:ed:b8:71:a0:6d:a3:9e:2f:9c:4f:3e:70:f2:
         6f:1f:9d:d9:a1:16:f5:55:ca:b3:32:52:7b:d3:80:72:0f:39:
         c6:3a:1f:82:c9:5f:03:0c:66:76:32:f2:96:a7:fc:90:31:df:
         d7:87:7b:dc:a3:be:86:ba:bd:a0:71:9f:b7:1e:6d:dc:fa:c7:
         06:31:c6:d9:19:44:e7:ce:66:3f:69:81:c9:e9:e2:aa:31:5a:
         d4:ab:8a:c0:a1:21:15:64:40:3a:0f:62:f4:e0:c1:d5:a6:31:
         cd:c5:91:1d:60:a5:73:ac:cf:d2:f4:85:c7:d7:8b:5d:ab:51:
         cd:c9:e1:cd:98:ed:94:cf:26:a9:1c:23:2f:c5:c7:33:b2:5e:
         1e:88:f3:ee:6c:96:4e:69:79:5a:21:b1:d3:40:00:57:7d:8f:
         19:57:18:40:71:77:8f:68:fe:28:59:31:67:57:77:71:13:8e:
         05:e5:75:d2:cf:2c:76:b3:56:ce:e6:10:14:97:70:dd:a4:33:
         9b:06:b3:7b:3b:85:6b:97:eb:5f:fa:07:6c:98:d1:ac:d2:bc:
         ca:b4:42:4f:24:53:08:b8:76:55:fc:f4:ad:78:e5:b3:52:f8:
         a3:62:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:30 2026 by rpki-client