This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
File:                     A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json)
Hash identifier:          B+N0L8uFUQNQcdCYkuCc1dZMOdoG5T1MUXKtq7nlPPU=
Subject key identifier:   EF:07:7A:74:B5:40:9B:DC:31:EB:51:EC:C1:0C:F6:A8:BC:C1:DF:AF
Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E
Certificate issuer:       /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
Manifest number:          0563
Signing time:             Sat 24 Jan 2026 23:32:26 +0000
Manifest this update:     Sat 24 Jan 2026 23:32:25 +0000
Manifest next update:     Sat 31 Jan 2026 23:32:25 +0000
Files and hashes:         1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: GWw0sgaM2plqd9oddUvLPAdwWIp2AUC86Rqb+ehWAyk=)
                          2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E
        Validity
            Not Before: Jan 24 23:32:25 2026 GMT
            Not After : Jan 31 23:32:25 2026 GMT
        Subject: CN=6975568a-2621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:03:af:75:b8:57:7e:8b:1a:d6:54:ab:35:
                    73:d2:41:e6:62:43:e1:3b:f6:8b:a8:c4:27:b3:b1:
                    d7:01:f4:98:80:23:d6:55:c3:f7:66:a6:9b:21:63:
                    ae:33:f6:51:1c:65:7d:4d:43:19:9b:03:2d:be:8c:
                    95:c2:ef:32:00:c7:9f:4d:ff:49:fc:f2:61:e2:65:
                    d0:59:07:82:9e:6a:b5:3e:76:59:78:80:16:a5:99:
                    14:8a:73:41:40:15:32:5c:45:10:f3:94:42:4c:8d:
                    40:40:4f:89:12:c6:25:a6:cb:d8:58:f2:75:2a:33:
                    7a:73:61:94:1f:b5:44:1d:f3:3a:1c:e1:f0:c7:98:
                    b1:3b:30:96:9f:d1:0b:84:5a:68:71:d3:02:98:4b:
                    7f:18:a4:57:f7:62:78:db:e1:62:c9:57:0b:d1:02:
                    00:62:24:b9:ad:9f:c3:0e:67:1e:d8:ab:f2:46:75:
                    1b:fc:5b:bb:06:10:b5:7c:cb:80:2f:2a:00:89:74:
                    6a:14:b2:ec:1a:e0:e9:61:23:ba:86:d9:78:11:38:
                    73:6b:a3:ea:4c:3a:42:34:a1:d7:06:bb:88:bd:cd:
                    89:3e:40:6c:55:2f:4c:d0:e6:83:ca:d9:de:1a:ab:
                    24:a3:08:ca:0c:ce:a6:e4:de:cb:b6:ac:b2:f4:45:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:07:7A:74:B5:40:9B:DC:31:EB:51:EC:C1:0C:F6:A8:BC:C1:DF:AF
            X509v3 Authority Key Identifier:
                keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:62:79:74:3b:bf:da:6a:75:c2:54:cf:9c:c6:0f:27:a9:7a:
         22:94:98:d9:19:df:0e:7f:28:b1:50:db:e5:65:04:b2:d0:d8:
         5c:62:83:a0:a5:25:47:23:e0:fc:79:15:cf:18:a7:a6:fc:bc:
         04:b9:66:b8:2f:a5:85:54:69:4d:74:5b:55:71:72:96:6f:a2:
         c6:b8:c5:bf:8b:cb:5b:9e:37:c2:7a:50:5a:01:89:19:05:83:
         19:71:42:f4:59:bc:ec:3a:1f:d1:7a:74:f6:dd:04:6e:12:92:
         a0:bc:7d:d5:55:03:fb:47:5a:d7:8a:10:7f:64:1b:0e:f1:77:
         c7:64:f5:c9:f4:a0:23:42:8f:28:d8:4c:f5:09:a7:52:bb:b4:
         19:5e:0a:c6:2c:bf:7a:0d:74:19:ea:6a:55:a0:8f:56:60:42:
         37:aa:af:6e:ff:28:7e:5f:44:a1:d5:10:71:56:04:2c:67:3e:
         96:1c:85:2a:df:6b:fa:36:93:de:82:cb:62:86:6f:c7:ef:56:
         3b:6a:39:72:dd:0f:f2:cb:d0:11:1b:75:b6:70:d7:ba:71:a3:
         e0:68:aa:39:84:cd:4b:c2:ad:b9:5e:3c:7c:87:3e:6a:61:1a:
         c3:11:da:78:43:e6:6d:c4:92:63:ce:ca:af:69:ed:51:ae:bd:
         63:20:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:29 2026 by rpki-client