This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
File:                     o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json)
Hash identifier:          Al0AcofzWtRcMDdP8krwfPibJOYOAbAz/fxJ2KPzJco=
Subject key identifier:   CF:00:7C:E7:FC:44:D6:3B:6B:53:9B:EE:AF:53:9D:4A:E9:EE:35:82
Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
Certificate issuer:       /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Certificate serial:       065C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
Manifest number:          0655
Signing time:             Sat 24 Jan 2026 21:54:31 +0000
Manifest this update:     Sat 24 Jan 2026 21:54:31 +0000
Manifest next update:     Sat 31 Jan 2026 21:54:31 +0000
Files and hashes:         1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: eibsz3X9aky9deyFepTRnen/TnMqz1VREzf7TSus8eY=)
                          2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: AxnCXioU+pzcVhOQczSiGNqFZn1BtxYji3/Mt/svcQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl
                          rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
        Validity
            Not Before: Jan 24 21:54:31 2026 GMT
            Not After : Jan 31 21:54:31 2026 GMT
        Subject: CN=69753f97-e17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:f8:50:6a:20:5e:c4:e3:2d:52:6c:96:c1:
                    a2:5c:5d:47:ab:12:a4:59:2e:1a:aa:bc:60:90:22:
                    3f:30:c2:f3:e1:00:af:d4:ff:de:75:ae:8e:2a:04:
                    47:f9:dc:3b:06:ce:3d:cc:8a:23:f0:d6:c1:18:d8:
                    b5:77:c5:88:2b:6e:2e:dc:ab:30:39:52:9a:bb:50:
                    13:38:86:c8:54:31:b3:73:0c:a3:31:7f:1d:91:5f:
                    66:08:25:5c:a9:1c:a2:4e:bd:2b:03:f7:43:56:1b:
                    9a:9e:b2:2e:ab:5a:1d:a9:59:8e:d2:9b:df:38:66:
                    20:61:84:b6:c1:4c:6d:83:87:8a:2a:7f:40:58:2b:
                    98:37:b3:0b:53:5c:c3:9c:bb:7d:5e:c6:27:98:03:
                    af:5f:49:17:88:87:ab:49:d8:55:06:32:48:be:af:
                    6a:75:1e:8c:9c:f6:59:52:f3:ae:60:7e:c9:53:90:
                    fb:5d:bc:9b:c1:9c:31:4f:4c:7e:14:7a:6d:d0:9a:
                    2a:b4:8d:37:11:3a:2d:9f:c1:5e:ad:8f:a0:c8:eb:
                    1d:d5:97:4f:57:48:4b:99:4c:1e:de:ac:1c:0c:52:
                    24:b0:f9:a0:b8:0f:c3:2c:39:a0:98:b4:48:ad:2c:
                    6d:f8:7c:18:5f:aa:20:4c:7c:25:61:6a:6e:69:92:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:00:7C:E7:FC:44:D6:3B:6B:53:9B:EE:AF:53:9D:4A:E9:EE:35:82
            X509v3 Authority Key Identifier:
                keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:c3:41:4f:a7:eb:25:74:42:aa:5d:99:fe:b8:a8:3a:59:a3:
         fc:f3:3a:92:9d:5d:21:94:d0:38:38:35:24:eb:53:42:6d:4a:
         93:58:04:0c:ef:bd:b7:93:72:69:a6:f7:35:4c:5d:57:c0:a2:
         c8:82:e4:00:bf:eb:12:92:0a:72:cc:cd:02:ba:eb:02:0b:1b:
         70:85:56:75:9e:5c:59:ce:ba:bd:28:13:c1:2e:50:2e:81:8a:
         f2:3c:9d:06:8b:df:a0:3a:15:51:85:b9:08:5c:88:54:79:c6:
         ff:b1:43:e2:b2:b2:59:3e:ab:87:90:52:91:64:16:c5:e0:e1:
         d2:24:b4:5c:e2:10:0c:09:8b:da:57:65:a1:2a:df:24:85:0f:
         33:da:39:ec:94:e6:dd:f4:e1:b3:f6:58:e2:4e:eb:bb:a3:f2:
         95:e1:f1:76:2b:1b:ca:92:c3:00:14:2b:c6:d5:57:a3:87:a5:
         63:72:c6:1b:aa:79:12:82:86:96:72:c8:84:14:ed:31:bc:e3:
         16:6c:32:3a:cc:a2:78:a9:16:2b:ae:87:df:8b:c1:6c:cd:97:
         9a:dc:8e:4c:a1:b9:32:46:ae:80:74:0f:a9:11:06:0e:3c:cb:
         ab:3c:a8:53:6f:57:95:23:11:a2:51:0e:91:8e:bd:cd:4b:8e:
         e6:69:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:01:12 2026 by rpki-client