This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
File:                     OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json)
Hash identifier:          9XMk8/bLCIVagoAOwSjGG7e2qAxKD6Nx9DPnwlCqE0g=
Subject key identifier:   CF:4D:B1:0A:ED:9C:5F:D5:2E:D4:31:E8:AC:C4:FD:46:07:E7:18:59
Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33
Certificate issuer:       /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
Manifest number:          EF
Signing time:             Sun 25 Jan 2026 04:36:06 +0000
Manifest this update:     Sun 25 Jan 2026 04:36:06 +0000
Manifest next update:     Sun 01 Feb 2026 04:36:06 +0000
Files and hashes:         1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: onMLAVXPnV/9uImdrgFSGUb3C7LhdULcP+Rcm9p1IHI=)
                          2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: AM8YczbuSDMrPGJYvj82lh85hv7XnwSEndBgiNbOMeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
        Validity
            Not Before: Jan 25 04:36:06 2026 GMT
            Not After : Feb  1 04:36:06 2026 GMT
        Subject: CN=69759db6-b74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:bf:a0:d2:94:14:29:9b:6d:7a:eb:e7:9a:
                    87:08:cd:a9:11:d9:8a:04:5d:7f:4f:92:5f:89:8a:
                    7a:8e:d7:24:73:a9:e1:f4:fd:9a:22:64:01:52:2d:
                    5b:7f:84:f8:85:88:b5:9d:53:fe:6c:0a:91:0b:7a:
                    ff:a1:91:97:d0:e7:2b:d5:c6:d7:17:6f:e8:67:36:
                    88:b9:ec:15:b1:06:b1:db:7e:0d:6a:6a:c4:80:4c:
                    2a:9b:83:f6:2b:7e:c2:2b:d6:91:b6:cb:82:12:2d:
                    e7:67:49:f6:65:86:e9:2c:8c:3b:3b:c1:2a:17:64:
                    bc:32:8a:80:4d:25:b3:0e:fa:d4:75:73:d1:d3:a9:
                    c3:7d:c2:39:fa:1f:38:d5:bd:fe:15:32:b6:3f:d1:
                    cb:e4:a7:4e:14:b9:f2:07:9e:4c:b8:13:91:58:ef:
                    1d:8e:55:a2:66:aa:bd:ea:36:e5:8f:ea:ca:a9:70:
                    aa:f8:00:d1:cb:b7:6a:49:e5:5d:19:ea:33:f2:77:
                    4f:db:86:7e:af:e9:45:a4:32:eb:3b:a3:74:ea:7d:
                    82:c3:a6:43:d7:ec:47:83:6d:75:d6:ec:89:d9:bf:
                    d5:4a:73:63:89:8d:c5:88:37:37:8b:15:50:61:97:
                    c0:12:85:ea:07:9b:b5:46:22:7d:a7:48:9e:dd:74:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4D:B1:0A:ED:9C:5F:D5:2E:D4:31:E8:AC:C4:FD:46:07:E7:18:59
            X509v3 Authority Key Identifier:
                keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:71:bd:bc:71:90:3f:95:c6:f9:2b:a7:32:46:00:69:5b:03:
         0f:77:0c:61:49:c7:27:21:bf:63:12:bc:0f:8c:30:d8:da:f7:
         ce:7e:72:27:bf:58:62:f8:70:cd:48:6e:f5:91:a1:f6:50:4c:
         df:4a:df:41:93:3b:bb:65:32:ea:8f:ff:b1:97:ec:39:42:d9:
         31:a2:fc:66:34:42:da:7b:b2:75:b6:e0:08:dc:50:60:ca:d4:
         d6:dc:0e:41:7b:9f:ed:ab:64:4f:04:1d:36:9b:d3:81:9d:fa:
         cc:3c:8e:3d:16:50:75:fa:b5:38:8b:4f:96:66:39:79:e1:17:
         4a:11:55:d3:d0:8e:12:79:72:63:90:e4:48:37:d0:9c:32:8b:
         5e:92:df:47:37:c6:f5:3c:02:3f:03:f5:f1:de:4a:8d:89:c7:
         60:cd:a6:c3:43:cd:ca:bd:5e:25:84:86:0f:a9:40:ad:11:da:
         64:92:88:90:2e:23:05:eb:70:1c:64:2a:76:aa:ba:10:57:88:
         11:14:fa:d2:9c:27:f5:60:15:a8:21:f8:0f:56:7a:12:5f:70:
         67:a9:a1:ea:a8:85:85:36:14:13:e0:b6:4c:75:b3:e1:43:fe:
         ef:c0:78:c9:f5:9d:ba:7a:9b:0a:73:3f:89:88:ad:14:49:5a:
         12:54:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:32:49 2026 by rpki-client