This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
File:                     mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json)
Hash identifier:          hXGyfPnUgKcEgs/izz6NyNAbIY9bJjRg6jxzIp1IxL4=
Subject key identifier:   EC:6F:ED:C9:97:D2:B2:BC:D0:E2:97:C1:27:42:F0:A4:6F:07:57:EF
Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
Certificate issuer:       /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
Certificate serial:       0591
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
Manifest number:          057F
Signing time:             Sat 24 Jan 2026 22:33:15 +0000
Manifest this update:     Sat 24 Jan 2026 22:33:15 +0000
Manifest next update:     Sat 31 Jan 2026 22:33:15 +0000
Files and hashes:         1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: M9XPPmaALRSy+Qpr77Gm4yDSZxtMp5nxKiaHw6omabo=)
                          2: 02817064DCD811F0A33153DF516F56BC.roa (hash: 8I9UOp4Z+/Xy0X8dibahvto/spl08HnHkRuVpTID/Qo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl
                          rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425 (0x591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
        Validity
            Not Before: Jan 24 22:33:15 2026 GMT
            Not After : Jan 31 22:33:15 2026 GMT
        Subject: CN=697548ab-0e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:4c:50:70:3d:49:a9:83:0e:bc:40:ff:c4:
                    d1:a1:a1:7b:12:1a:fa:2e:3e:16:ae:02:c4:b4:b7:
                    29:9a:ba:28:f4:c3:11:96:5b:a9:fd:b7:24:d3:45:
                    a6:d0:97:d9:6f:8b:c1:c8:a3:19:1b:c8:4f:27:86:
                    ef:0a:26:b7:85:fb:40:25:2a:cc:90:da:c2:67:7e:
                    db:dd:3e:df:1d:dd:6e:a7:f5:53:5e:65:4b:bd:50:
                    17:02:4c:f3:2b:26:9b:bf:b7:91:79:bf:34:b2:5b:
                    a5:0e:dc:b3:5e:e7:32:a6:01:ad:9e:e9:a5:a9:41:
                    48:9c:fc:95:d1:13:68:e9:7c:7c:51:f6:67:0a:c6:
                    1c:63:06:b0:5b:10:19:40:0e:69:f9:9e:1c:a1:04:
                    d7:25:4b:73:81:17:ad:c6:20:5b:cf:c8:55:66:ea:
                    c2:a6:b6:c7:98:a3:11:d4:8a:36:b2:1c:6e:19:7c:
                    36:0b:f1:6a:86:82:79:f0:ee:10:e4:69:a1:aa:56:
                    99:31:8e:6a:64:52:30:16:55:3f:7b:67:44:21:1b:
                    86:97:9d:ef:16:aa:59:56:fc:8d:5a:a6:c4:b8:5e:
                    99:78:83:b7:f4:2f:f6:c8:20:f4:04:d7:c9:7c:a6:
                    68:0d:0c:11:2f:0a:e0:19:3b:b8:cd:e5:e6:ef:a5:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:ED:C9:97:D2:B2:BC:D0:E2:97:C1:27:42:F0:A4:6F:07:57:EF
            X509v3 Authority Key Identifier:
                keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:1c:d5:6f:11:35:5b:12:06:8e:8a:08:ec:52:b0:47:cd:6a:
         ed:fa:3b:5c:d8:48:2f:ce:6a:97:23:92:46:57:bc:64:e8:8a:
         7d:e7:1c:15:be:c7:06:e5:1b:37:a1:d6:e2:b7:ab:34:f1:2d:
         af:e3:49:d5:e0:16:93:02:f6:ef:66:3e:42:7a:85:af:b0:44:
         a6:fc:a4:1f:41:b8:ca:5e:da:8c:3f:fd:42:8b:2b:d4:2a:84:
         9b:32:e1:d5:76:8c:5c:a7:62:1f:ca:5d:c0:8d:7f:c2:02:29:
         7b:d9:97:b8:13:ca:9c:5e:86:6f:ec:2e:bd:fa:24:ca:3c:bf:
         0f:32:87:f7:2a:89:a4:0b:31:e0:3a:1a:4b:cb:84:1c:92:e1:
         ae:17:8b:db:e8:d5:c8:dd:d9:4f:47:ab:ee:09:ff:26:af:18:
         ef:d0:1f:7c:b3:ed:e5:d1:81:bc:5c:9c:7d:4d:72:58:22:1f:
         6c:cc:76:4e:47:28:ae:7b:3e:39:41:38:fc:a0:10:78:32:d6:
         34:d5:85:4f:36:57:52:be:a0:57:f4:c6:cb:36:2d:a3:f1:2e:
         b9:13:98:94:eb:db:3d:70:ff:8d:2d:96:c0:d2:3a:15:8e:5f:
         d5:46:7c:72:4f:17:66:55:dc:7e:04:92:71:c0:1f:9c:9e:80:
         5d:bb:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:35:38 2026 by rpki-client