This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
File:                     OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json)
Hash identifier:          VSmYbFNXxoGbBcAQ9XQO8+kKQks8nrnmHHojtxA3D7c=
Subject key identifier:   59:58:2E:5F:F9:7C:7B:B7:88:D7:A5:4E:27:35:49:D1:19:C5:36:88
Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
Certificate issuer:       /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
Manifest number:          F6
Signing time:             Sun 25 Jan 2026 04:31:25 +0000
Manifest this update:     Sun 25 Jan 2026 04:31:25 +0000
Manifest next update:     Sun 01 Feb 2026 04:31:25 +0000
Files and hashes:         1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: O0llO0i0lb4yTRoolPJsgxzSPtjVa8F5XPkXw2MqzGU=)
                          2: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: jJmFWeK8DxzcyCmNzQTOimZpBnvjDB61t5aPUy56grE=)
                          3: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: q2PsmBaPUlGvEput/dvI1P9mbtnk1siucrhRcpQcM5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
                          rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
        Validity
            Not Before: Jan 25 04:31:25 2026 GMT
            Not After : Feb  1 04:31:25 2026 GMT
        Subject: CN=69759c9d-4adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7a:08:ad:c7:7f:21:f7:ef:4f:7d:37:ad:bd:
                    89:d0:4f:f7:d0:a4:19:31:40:d0:1d:e3:76:e0:5a:
                    46:a7:f1:f7:5a:4e:e3:cb:6e:bf:fb:e7:a1:97:c0:
                    f0:93:9b:51:20:fd:ce:ba:42:97:2c:56:16:3b:ca:
                    0b:48:34:71:9d:15:8d:1a:7f:26:a7:11:52:29:50:
                    8d:85:dc:f0:04:63:fe:76:1a:f4:b3:09:c1:6d:a1:
                    73:fc:ae:98:61:b5:a0:ad:2d:fa:8f:80:29:43:b4:
                    72:29:95:f2:14:0d:63:12:0b:88:a6:d6:1e:39:ed:
                    78:23:16:8b:df:ce:bd:76:a2:6f:4b:c1:92:5f:af:
                    aa:fd:40:95:24:36:4e:56:22:f0:0e:1d:cf:97:94:
                    b6:b8:b6:88:c9:89:09:94:21:24:1f:fa:5b:84:e2:
                    44:a8:5b:82:eb:c3:62:35:98:d4:bc:73:88:21:a0:
                    e0:b3:2f:a7:98:ce:36:cb:e4:63:fc:24:70:b1:18:
                    51:59:00:2d:9b:e4:be:93:01:de:b3:c1:84:d1:2c:
                    fb:4b:ca:77:d3:dc:04:97:ca:b5:09:01:de:06:b9:
                    52:8e:71:8b:4d:0f:7e:27:a9:61:e1:e8:57:f4:16:
                    0f:8c:04:69:6f:50:11:7d:8d:46:74:8b:ba:eb:ed:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:58:2E:5F:F9:7C:7B:B7:88:D7:A5:4E:27:35:49:D1:19:C5:36:88
            X509v3 Authority Key Identifier:
                keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a0:b2:41:49:91:f9:65:b2:25:c2:b1:2b:87:03:c5:39:c1:
         4a:ba:7b:08:f6:31:7d:a0:b7:d4:d1:de:e3:dc:7d:77:3c:e5:
         dc:77:aa:7f:ef:3b:a5:6b:77:f8:81:24:b0:22:49:16:8f:e9:
         49:9b:11:f3:be:71:54:42:ad:01:82:a8:37:b7:1c:c0:b8:f9:
         d6:fc:9e:24:63:04:63:ba:25:e2:69:62:b2:08:27:c9:4d:a6:
         82:af:ae:e0:f4:37:c3:bf:ab:f5:f4:2d:e8:fb:66:3f:77:50:
         4d:52:c8:3b:2a:62:da:46:b2:cd:16:35:82:09:c1:e5:ac:fc:
         b4:24:50:64:99:01:07:e3:58:17:89:33:3d:31:c1:bf:93:d2:
         fa:e6:83:98:85:c0:76:05:ab:e4:13:22:c5:e7:23:85:2f:6c:
         f2:39:c8:b5:e7:6c:1d:60:6b:6c:16:2a:d7:2d:a5:92:ae:de:
         05:e5:e4:06:27:68:61:93:2a:f2:49:6a:c3:3d:ca:49:d7:0c:
         d4:6e:e9:e3:60:0a:5a:c1:05:78:c7:bc:e9:d3:72:7d:f9:0e:
         74:ed:5b:b7:82:06:bf:c3:eb:65:67:69:29:93:ca:57:45:28:
         6c:97:2d:56:cf:4e:14:df:a8:3d:e2:01:fe:af:32:ac:fe:5a:
         0f:84:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:04:23 2026 by rpki-client