This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
File:                     o1EXGLQporBD5kW_sWUO5nd-QXI.mft (raw, json)
Hash identifier:          p3w03YXwuIbp2Fc8LVJ3Ab/FdaLQUYTwAAb7LleJZCQ=
Subject key identifier:   66:E0:FC:0D:9F:6A:53:C7:CC:89:92:DA:AB:B8:E9:A9:65:7B:8D:04
Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72
Certificate issuer:       /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
Manifest number:          0882
Signing time:             Sat 24 Jan 2026 19:57:10 +0000
Manifest this update:     Sat 24 Jan 2026 19:57:10 +0000
Manifest next update:     Sat 31 Jan 2026 19:57:10 +0000
Files and hashes:         1: o1EXGLQporBD5kW_sWUO5nd-QXI.crl (hash: iZiCyXxZAXqUdiIWEXQ6CjvDO7zXw3uWpnf6LK8OjTc=)
                          2: F48207E6DB8711EAA446B360C4F9AE02.roa (hash: +rqRhoF7M98jyOj7ilINYsh86Lj18TGDOqtK2wOwgR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ACF6, serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172
        Validity
            Not Before: Jan 24 19:57:10 2026 GMT
            Not After : Jan 31 19:57:10 2026 GMT
        Subject: CN=69752416-73c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:89:a9:23:dd:f3:6d:67:a0:8e:cb:23:db:
                    52:59:9f:49:86:3b:fd:91:cd:96:87:bb:95:ef:25:
                    a5:41:0f:71:b9:f3:0e:32:6c:b4:b9:02:ef:97:a5:
                    20:87:db:b4:5c:ad:85:76:1b:68:02:ae:10:4b:ca:
                    39:2d:59:2c:64:44:74:2e:57:09:76:e7:89:f3:9c:
                    5c:ce:e0:d5:69:76:c4:b4:33:f8:de:cf:29:5b:af:
                    81:72:fd:13:e3:e5:8a:ee:e6:74:b1:96:1e:00:db:
                    71:ed:57:83:5f:3c:75:ee:01:fd:0b:76:cf:7d:af:
                    d0:cd:d3:b8:bf:b2:7c:d8:66:5c:88:57:39:ca:f1:
                    cb:8e:26:6c:fd:d4:06:b5:af:4d:7d:97:fb:a4:10:
                    51:e2:0f:8a:a3:40:bb:c1:b4:a1:1e:66:c3:ca:da:
                    15:fe:7b:b2:5d:a7:f0:35:82:f7:de:ce:da:8f:af:
                    4c:d0:25:af:74:2e:38:43:84:fa:04:b0:4d:9b:b9:
                    69:72:02:e6:cb:e1:fa:57:21:64:a7:1a:e1:39:bd:
                    e3:d2:a9:26:cd:38:db:b6:ec:a5:95:29:8f:ee:a8:
                    52:ff:32:be:8d:5f:9a:16:0c:82:3c:e4:85:1f:f5:
                    f1:25:21:3c:f9:c9:f1:c3:20:e8:dd:73:54:6a:fd:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E0:FC:0D:9F:6A:53:C7:CC:89:92:DA:AB:B8:E9:A9:65:7B:8D:04
            X509v3 Authority Key Identifier:
                keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ab:92:6b:90:ac:6e:aa:d2:49:be:85:cf:53:26:22:44:10:
         ae:ea:cc:32:56:8e:9f:7b:eb:ba:b9:a4:6d:94:94:f6:10:b7:
         a5:e7:a1:f6:fa:00:d6:5e:10:81:46:5a:44:5f:d7:9d:1d:b2:
         46:72:85:dc:9a:41:eb:28:a9:c1:5c:16:9b:4b:4c:0e:6f:46:
         88:ae:2f:03:61:82:92:e1:a0:18:14:20:34:e2:09:21:9b:38:
         82:e8:c3:fc:64:20:aa:41:e2:89:31:18:ba:a3:fa:ac:72:ee:
         7c:c4:07:64:93:84:c1:64:f6:30:77:21:ab:8f:66:ea:b1:af:
         f7:8c:03:4d:13:ec:e1:57:3e:69:0a:00:ba:1e:35:df:a8:ec:
         30:c8:6f:04:03:7f:3e:64:4a:93:8f:10:75:e5:15:7f:30:3b:
         95:c2:4f:ae:e1:0c:12:2e:7a:82:c5:52:0b:b1:a9:a0:39:c2:
         da:4c:73:bf:88:9a:ac:8b:d7:c0:b1:3b:43:4c:b6:ec:ec:77:
         13:ed:18:55:02:4b:d0:46:da:06:ca:b7:64:23:20:97:f9:09:
         0e:fb:87:97:b8:02:51:82:52:35:92:52:28:f0:c2:56:85:63:
         94:5a:74:ed:5f:19:89:bb:ed:ff:e5:8d:c1:e3:c6:45:0b:3d:
         04:7b:84:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:46 2026 by rpki-client