This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
File:                     OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json)
Hash identifier:          56H+G61tiKzuWOIgG0EQZqdVCWErrkXPK1jyGwkZLu8=
Subject key identifier:   3D:A5:E8:A4:5A:F7:EB:FF:B2:78:98:1F:EA:5E:70:EE:EE:79:7F:58
Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
Certificate issuer:       /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
Manifest number:          0102
Signing time:             Sun 25 Jan 2026 04:20:13 +0000
Manifest this update:     Sun 25 Jan 2026 04:20:13 +0000
Manifest next update:     Sun 01 Feb 2026 04:20:13 +0000
Files and hashes:         1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: Eimg/6/VG6jD8bvbr1im1iQJKINKsTbnGQ8sS1G/VlU=)
                          2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: Aikvd4VQaZ5YWJuoaQst8o1un+A8abkdzu+IgmJpwMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
        Validity
            Not Before: Jan 25 04:20:13 2026 GMT
            Not After : Feb  1 04:20:13 2026 GMT
        Subject: CN=697599fd-5319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:3a:fa:9f:2f:9a:6c:6f:6e:44:29:19:08:
                    0f:44:ee:8b:1e:6a:e4:69:14:db:94:9e:31:38:33:
                    80:d0:dd:12:1e:ff:7e:71:ff:6c:82:2c:05:de:ce:
                    ec:3e:8c:61:26:42:4d:8e:94:31:e0:46:f1:2f:b3:
                    22:e9:ec:3a:13:9f:d0:e3:47:6e:ea:35:c7:f2:e7:
                    ed:29:2f:ac:fd:01:ed:b1:2f:63:57:20:d7:2f:96:
                    b9:2e:ad:b7:65:c9:53:86:d7:5e:04:8c:b1:a4:e4:
                    33:cf:1c:21:bf:90:9d:89:23:fa:03:ac:80:78:78:
                    b6:b4:19:52:a9:28:ec:5b:a2:6f:11:24:fe:7d:3f:
                    a2:b3:15:06:18:ab:24:01:71:43:df:86:5d:d3:91:
                    46:07:57:eb:28:ee:8a:94:7c:ee:c0:8c:a2:ac:8e:
                    0e:35:32:cf:39:4d:22:0e:be:97:15:85:67:04:6f:
                    18:d5:73:46:21:5c:0b:ed:19:27:82:3d:b1:25:49:
                    16:90:c8:f9:ae:f3:9b:2e:96:f1:40:a8:a9:f3:45:
                    f4:00:6e:3b:54:0b:8f:4c:88:90:64:aa:79:40:f0:
                    b8:b4:7c:d9:a6:cd:f7:a9:a0:e9:23:7f:92:35:bd:
                    89:63:1d:5e:d6:b3:5e:1a:ce:ff:a4:1b:5d:83:a1:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A5:E8:A4:5A:F7:EB:FF:B2:78:98:1F:EA:5E:70:EE:EE:79:7F:58
            X509v3 Authority Key Identifier:
                keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:00:6b:c8:af:43:a9:73:a2:e7:fb:da:3a:09:a0:29:0f:cc:
         80:dc:24:b0:f9:d0:54:30:4b:92:04:eb:a0:d1:16:36:d3:23:
         3d:dd:3f:b0:3e:b6:f5:ac:67:67:96:f8:06:a2:81:58:59:2f:
         58:b1:ac:6e:5a:ad:0d:f9:5b:a2:a7:90:48:18:ba:aa:b6:66:
         a3:34:1f:0c:bc:51:af:28:82:ff:eb:3a:a3:63:ed:ea:1a:c8:
         f7:8c:ee:9f:2c:42:b0:83:5c:ed:9e:1b:b0:a3:47:17:dd:42:
         fd:04:21:f0:24:6f:c8:2d:04:dc:b5:40:73:cc:17:01:9e:e0:
         d0:48:a6:17:a4:97:f8:be:9a:37:55:b4:e3:20:d1:91:0b:70:
         1f:20:ff:cc:e6:e1:75:56:59:30:16:8b:05:94:76:33:9a:32:
         7f:7b:80:6f:90:cb:1a:5c:c2:b1:62:5e:77:6f:da:3d:e4:3e:
         9c:5e:8f:72:cf:98:9a:e5:ce:91:f5:09:43:a1:5d:c4:fe:09:
         87:be:91:eb:43:b4:dd:e6:6b:93:0b:d4:25:57:33:01:f7:31:
         fc:99:e4:1d:1f:47:f2:67:4b:8b:30:05:67:c5:e6:e8:bc:27:
         ee:a2:29:ec:55:bd:f9:90:50:76:04:b2:0b:b2:96:3e:7a:66:
         51:14:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:21:25 2026 by rpki-client