This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
File:                     Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json)
Hash identifier:          6UItv/5zSkiwrm2KgRvDFGbI0hWmdHaun9bvgTWaLCM=
Subject key identifier:   75:61:D6:2F:FF:94:7D:B0:F1:E3:65:68:82:77:76:0A:0C:66:AF:6D
Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61
Certificate issuer:       /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
Certificate serial:       36DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
Manifest number:          3604
Signing time:             Sat 24 Jan 2026 14:23:42 +0000
Manifest this update:     Sat 24 Jan 2026 14:23:41 +0000
Manifest next update:     Sat 31 Jan 2026 14:23:41 +0000
Files and hashes:         1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: pu/3ZUlibJicy1acEpZqkPaZ3W9ghSTJ1XlvdVwe6OQ=)
                          2: 310B48D2F71411F0953B4C3F6E6F56BC.roa (hash: DaQcClCNHbVe7W5KuNM417SG/d2qMrLgiNp2eJ6GkD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl
                          rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14046 (0x36de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
        Validity
            Not Before: Jan 24 14:23:41 2026 GMT
            Not After : Jan 31 14:23:41 2026 GMT
        Subject: CN=6974d5ee-aaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a5:5a:69:19:94:73:fa:28:b0:f9:b8:a7:52:
                    8b:6e:3a:62:2d:08:31:9b:0c:4c:a7:40:3e:94:9c:
                    3b:bf:a5:34:aa:da:89:f7:0a:82:85:b8:8e:4c:e6:
                    19:bb:5e:fc:c7:e4:4b:53:53:67:66:51:df:18:33:
                    03:d1:4b:1d:f8:7a:4c:df:1f:c7:37:a2:21:7a:77:
                    f8:1e:14:29:1d:ff:cc:aa:08:70:b1:03:9f:c6:e9:
                    70:fc:48:82:16:e4:a4:7a:2a:62:8c:da:c6:f9:4d:
                    14:2f:b0:59:1f:ec:b5:aa:11:bc:05:e7:eb:ff:76:
                    e6:76:51:6c:32:56:6d:44:82:d0:dc:d5:56:ff:c0:
                    c5:9d:40:4d:88:78:f6:c3:2d:6c:12:b3:23:be:62:
                    ea:cc:b2:04:55:26:0f:6f:58:82:33:a5:4f:db:7e:
                    bf:5d:c4:1e:a0:4f:0a:0d:21:20:64:ba:79:12:b4:
                    47:ef:8e:8a:fd:fe:22:cd:07:70:d8:e0:1f:be:0f:
                    73:e7:2c:ea:e6:ef:3c:e7:26:a3:1e:84:e3:db:73:
                    3b:9d:c0:ab:63:e6:f9:00:d8:d1:57:04:ae:45:b7:
                    10:5e:f0:d1:16:24:7c:70:25:62:f0:7c:48:62:26:
                    6b:45:4f:e6:88:e3:d7:ee:57:25:77:de:0e:99:76:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:61:D6:2F:FF:94:7D:B0:F1:E3:65:68:82:77:76:0A:0C:66:AF:6D
            X509v3 Authority Key Identifier:
                keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c8:dd:de:f3:ec:f1:eb:79:17:41:06:ba:ed:2f:66:f4:8d:
         68:6b:8c:70:dc:66:7e:66:79:dd:38:65:fe:c1:f4:ae:05:7d:
         ae:10:c7:ef:f3:ea:bf:dd:25:3a:ea:56:84:37:f7:a3:66:82:
         25:da:23:7f:01:e4:be:02:6b:ed:70:67:05:0c:ad:79:65:16:
         42:01:e8:bc:dd:60:d8:c4:38:ea:24:1d:95:b9:90:f8:89:6a:
         49:2d:64:0f:d6:34:a3:30:d9:45:d1:9a:ed:6c:63:6e:9a:4c:
         37:16:e8:bf:76:21:6a:a9:a0:2a:9a:40:cb:d3:52:09:2a:60:
         36:12:58:9d:c9:7d:75:9c:ce:67:80:3b:ba:21:19:84:10:9d:
         4b:a4:af:54:52:83:44:79:83:82:29:a1:71:5a:7e:84:c2:3a:
         3c:99:7c:59:9b:e6:4a:5d:aa:d3:56:2d:47:53:37:9e:66:dd:
         06:ff:a0:0c:05:c4:df:3e:b6:50:ea:a3:fa:e0:df:9c:be:d3:
         7f:05:5f:b9:46:2a:d3:3c:d5:f5:14:d2:8a:01:2c:88:d7:f1:
         2c:e5:36:07:08:00:39:9e:bc:3f:2f:04:e2:e2:62:41:e0:0c:
         3f:cd:7f:27:f2:37:ff:38:eb:b8:bd:8c:1d:37:5f:43:ee:76:
         e5:3b:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:10 2026 by rpki-client