This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
File:                     oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json)
Hash identifier:          Qd72rNy58Z2hhb4K3HgegJvkbf8WheRTAikNeOehfvE=
Subject key identifier:   F2:A4:7B:CB:B9:B0:C4:76:96:68:6C:72:BC:91:EA:69:07:41:9B:7E
Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
Certificate issuer:       /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Certificate serial:       0B1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
Manifest number:          0B12
Signing time:             Sat 24 Jan 2026 18:51:12 +0000
Manifest this update:     Sat 24 Jan 2026 18:51:12 +0000
Manifest next update:     Sat 31 Jan 2026 18:51:12 +0000
Files and hashes:         1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: L9+Rm1N3yzLEUoO7wXMfw49iecT/SgAelKTFzpF6eIo=)
                          2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: iGeCqjea5TKx5w3j1RMFWZOzP6n/8IBkqpNhUcYz96Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
                          rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2844 (0xb1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
        Validity
            Not Before: Jan 24 18:51:12 2026 GMT
            Not After : Jan 31 18:51:12 2026 GMT
        Subject: CN=697514a0-a025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:0d:a5:4b:53:80:74:d3:59:f2:10:df:08:
                    d6:a1:35:04:fc:e1:5b:b3:dd:92:84:ef:ea:46:4d:
                    0f:3b:d0:d4:35:aa:0e:6b:8d:9f:f7:a8:e1:9b:c2:
                    09:de:54:a1:3e:5f:ee:e7:fe:fd:f3:f5:a0:bb:57:
                    35:aa:86:b8:1c:6a:7a:2c:a3:74:ee:9f:00:44:aa:
                    c3:64:2c:6e:da:eb:c3:63:19:df:9c:ea:47:0f:b3:
                    d9:e6:0a:27:49:3c:0e:6f:82:c2:b4:94:91:3b:a4:
                    8a:4f:e3:30:f5:6e:33:b9:31:3a:08:31:61:4a:f6:
                    96:b7:2d:5b:e1:19:bb:46:5d:85:25:9a:55:cd:bd:
                    0e:5a:1a:15:4c:a3:98:d8:9f:bf:a4:98:b8:7d:5e:
                    48:9d:b7:9f:a8:ff:45:ca:44:a6:a4:8f:54:94:8c:
                    4b:5f:53:6e:d3:47:2c:9d:2d:a7:42:ba:bb:18:fe:
                    14:24:42:c9:02:8d:ca:0e:f1:62:c7:d3:f2:0a:4e:
                    3a:ce:44:7c:26:58:40:69:fd:f7:fc:97:37:a3:5d:
                    ac:0e:0f:8a:f2:d4:56:41:27:af:6e:ba:aa:80:5c:
                    46:0e:73:14:de:b6:17:53:61:16:d4:75:53:2b:b3:
                    7d:52:d0:7d:92:af:0b:9f:20:16:2b:24:1d:99:ab:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A4:7B:CB:B9:B0:C4:76:96:68:6C:72:BC:91:EA:69:07:41:9B:7E
            X509v3 Authority Key Identifier:
                keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e2:5e:23:a5:7e:2d:3f:33:fe:77:ad:09:c1:51:82:2d:6c:
         ca:8c:90:91:d2:46:06:a8:ac:36:53:e3:66:2a:96:f0:33:d4:
         6f:d0:fc:8a:45:15:42:1a:bd:c2:87:cd:be:28:18:6b:4e:00:
         38:b2:df:66:27:f7:db:99:97:b7:16:25:ba:d6:d7:c8:9a:18:
         b5:46:eb:2f:72:2d:52:84:8e:1a:25:fe:7c:f2:42:ac:6b:bc:
         4c:01:fe:eb:62:8e:3f:f4:04:49:de:6d:ce:3a:fd:21:b3:3b:
         7f:51:23:c1:8d:22:75:9a:f4:56:d0:5a:b5:c4:f8:04:34:44:
         73:7d:e2:a9:ec:42:ac:6f:cd:8b:72:53:d3:c3:70:1d:7e:3b:
         2f:17:c9:bb:ad:f2:f7:bc:4c:63:f6:28:cf:c2:2b:1e:2d:80:
         f8:79:ed:d4:84:86:e7:88:cf:da:e3:ae:30:52:4e:3c:cf:5a:
         55:38:bb:b0:ee:c4:87:94:52:7b:f9:df:e3:a4:2e:97:1d:01:
         83:15:77:f1:62:99:b1:92:fb:31:c9:ea:ca:3e:cc:cd:a3:1a:
         e1:5a:47:ef:25:6a:9f:21:99:42:e1:0e:ff:f5:ba:14:26:5c:
         2e:95:7e:18:18:10:e4:0e:10:82:9c:0b:03:5d:56:7b:47:17:
         34:83:19:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRFRDAxMTAvBgNVBAUTKEEwOUNBMkQzMUIxNkJGQTU4NEE3NThDM0E3RDUxRkFD
RDIxNTFCMDIwHhcNMjYwMTI0MTg1MTEyWhcNMjYwMTMxMTg1MTEyWjAYMRYwFAYD
VQQDDA02OTc1MTRhMC1hMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvoQNpUtTgHTTWfIQ3wjWoTUE/OFbs92ShO/qRk0PO9DUNaoOa42f96jhm8IJ
3lShPl/u5/798/Wgu1c1qoa4HGp6LKN07p8ARKrDZCxu2uvDYxnfnOpHD7PZ5gon
STwOb4LCtJSRO6SKT+Mw9W4zuTE6CDFhSvaWty1b4Rm7Rl2FJZpVzb0OWhoVTKOY
2J+/pJi4fV5InbefqP9FykSmpI9UlIxLX1Nu00csnS2nQrq7GP4UJELJAo3KDvFi
x9PyCk46zkR8JlhAaf33/Jc3o12sDg+K8tRWQSevbrqqgFxGDnMU3rYXU2EW1HVT
K7N9UtB9kq8LnyAWKyQdmatweQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKke8u5
sMR2lmhscryR6mkHQZt+MB8GA1UdIwQYMBaAFKCcotMbFr+lhKdYw6fVH6zSFRsC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVEMC85MkIzQ0Q1QTU4
Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2V0VwMWpEcDlVZnJOSVZH
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29KeWkweHNXdjZXRXAxakRwOVVmck5JVkd3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEVEMC85MkIzQ0Q1QTU4Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2
V0VwMWpEcDlVZnJOSVZHd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJ4l4jpX4tPzP+d60JwVGCLWzKjJCR0kYGqKw2U+NmKpbwM9Rv0PyK
RRVCGr3Ch82+KBhrTgA4st9mJ/fbmZe3FiW61tfImhi1Rusvci1ShI4aJf588kKs
a7xMAf7rYo4/9ARJ3m3OOv0hszt/USPBjSJ1mvRW0Fq1xPgENERzfeKp7EKsb82L
clPTw3AdfjsvF8m7rfL3vExj9ijPwiseLYD4ee3UhIbniM/a464wUk48z1pVOLuw
7sSHlFJ7+d/jpC6XHQGDFXfxYpmxkvsxyerKPszNoxrhWkfvJWqfIZlC4Q7/9boU
JlwulX4YGBDkDhCCnAsDXVZ7Rxc0gxmC
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:08:09 2026 by rpki-client