This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
File:                     o222tflxI3VeVEH6xWqmu6BbCAo.mft (raw, json)
Hash identifier:          0VPHYTqQLnjnINj4L+heYohWz26Xm7ze0mN2/kGtp+8=
Subject key identifier:   51:60:10:F0:5E:1B:D2:88:81:AF:F0:BA:82:34:63:EF:EA:F5:7C:2E
Authority key identifier: A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A
Certificate issuer:       /CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
Manifest number:          0128
Signing time:             Fri 23 Jan 2026 03:51:40 +0000
Manifest this update:     Fri 23 Jan 2026 03:51:40 +0000
Manifest next update:     Fri 30 Jan 2026 03:51:40 +0000
Files and hashes:         1: o222tflxI3VeVEH6xWqmu6BbCAo.crl (hash: rwlMmHggh+67dFYKdH491ZV7EOmnRd2yqOy/YlSfjdQ=)
                          2: 4136642C39AA11EF933F9583C4F9AE02.roa (hash: 7GMLt8DR3EKxeEEuXi3Amm7OGvHhOLGYJHEFL/SfnE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl
                          rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD4DF, serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A
        Validity
            Not Before: Jan 23 03:51:40 2026 GMT
            Not After : Jan 30 03:51:40 2026 GMT
        Subject: CN=6972f04c-1f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:21:5e:f7:9f:e7:e9:3d:f5:6f:63:18:42:
                    bf:20:50:67:e5:98:13:6c:d4:25:fe:be:ba:3f:4c:
                    c4:57:59:82:36:ca:3b:6b:3e:54:11:e8:70:be:db:
                    f7:ad:80:eb:c7:02:86:14:f6:ee:e1:77:1a:5a:1a:
                    ef:63:a1:36:80:a7:59:94:c2:10:2d:32:2d:b0:b3:
                    47:29:57:14:25:2e:03:af:d4:70:50:c8:5d:88:f5:
                    a8:e4:44:29:aa:6f:7e:a3:14:ce:30:f1:d5:e9:1a:
                    ce:61:3e:c1:7d:3d:c1:1f:0e:1b:04:7c:88:4a:a7:
                    67:54:1d:2f:38:8d:62:1d:33:01:44:cf:0b:f6:09:
                    6c:47:ee:e3:e7:72:33:a3:3d:87:8a:66:d6:a4:f3:
                    43:1b:bd:7e:a9:31:30:aa:28:68:46:4c:7b:8c:c2:
                    9c:16:3a:9f:ba:02:40:91:22:a8:1c:da:ff:ec:b0:
                    07:82:df:64:45:7e:1a:b1:e8:94:82:16:b7:56:47:
                    d7:40:bf:76:fc:eb:2e:1e:a4:71:1d:d7:70:17:c1:
                    c0:35:10:c6:3f:68:43:c7:63:e8:f1:2c:fd:47:6d:
                    aa:4e:58:21:46:16:32:5b:07:66:bb:46:f6:9e:9c:
                    3d:57:29:f5:93:f7:52:c3:51:f8:11:c3:33:c7:68:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:60:10:F0:5E:1B:D2:88:81:AF:F0:BA:82:34:63:EF:EA:F5:7C:2E
            X509v3 Authority Key Identifier:
                keyid:A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:01:60:93:5d:20:be:af:f3:b9:ec:60:03:df:97:99:ec:89:
         de:31:1a:59:e1:07:dd:eb:ff:66:3d:fc:4b:c3:41:60:64:7b:
         9c:ed:db:3d:de:e9:7d:41:8d:71:38:29:87:ee:77:3d:66:e5:
         6b:18:31:50:af:7f:6b:ac:c6:5c:60:73:a2:98:46:23:67:29:
         0c:9e:c9:ed:6f:3f:89:4d:46:5b:a7:da:95:55:54:98:a4:bf:
         f4:d4:b4:9b:07:bb:98:a2:46:2a:58:f0:bb:7a:9d:f3:5e:6d:
         88:b4:81:fc:28:79:85:5e:3e:c2:ab:64:9d:3c:4e:42:d1:57:
         38:00:f2:16:62:55:69:ed:fc:e6:3b:d8:2d:f5:17:31:26:f6:
         f4:f9:dc:f0:04:95:57:79:35:84:e2:47:73:92:2a:8f:3a:54:
         59:49:3d:f3:1d:3f:39:bb:4d:3f:16:05:10:92:b7:c3:16:be:
         cd:1f:44:1e:3a:e9:42:82:c2:0d:6b:fa:ac:f4:f6:b8:48:33:
         cb:00:64:f9:dd:68:d7:b3:07:2b:98:32:de:7e:5a:d9:ba:6e:
         67:11:70:af:38:1c:a5:e7:12:51:5a:b8:f5:49:83:e2:20:43:
         6c:26:a2:1b:38:7b:c9:bf:f6:bd:be:a0:d2:6a:6b:8f:22:ed:
         db:95:85:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QkQ0REYxMTAvBgNVBAUTKEEzNkRCNkI1Rjk3MTIzNzU1RTU0NDFGQUM1NkFBNkJC
QTA1QjA4MEEwHhcNMjYwMTIzMDM1MTQwWhcNMjYwMTMwMDM1MTQwWjAYMRYwFAYD
VQQDDA02OTcyZjA0Yy0xZjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/8hXvef5+k99W9jGEK/IFBn5ZgTbNQl/r66P0zEV1mCNso7az5UEehwvtv3
rYDrxwKGFPbu4XcaWhrvY6E2gKdZlMIQLTItsLNHKVcUJS4Dr9RwUMhdiPWo5EQp
qm9+oxTOMPHV6RrOYT7BfT3BHw4bBHyISqdnVB0vOI1iHTMBRM8L9glsR+7j53Iz
oz2HimbWpPNDG71+qTEwqihoRkx7jMKcFjqfugJAkSKoHNr/7LAHgt9kRX4aseiU
gha3VkfXQL92/OsuHqRxHddwF8HANRDGP2hDx2Po8Sz9R22qTlghRhYyWwdmu0b2
npw9Vyn1k/dSw1H4EcMzx2jdNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFgEPBe
G9KIga/wuoI0Y+/q9XwuMB8GA1UdIwQYMBaAFKNttrX5cSN1XlRB+sVqprugWwgK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDRERi8zMTBEMzU0MjM5
OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkzVmVWRUg2eFdxbXU2QmJD
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28yMjJ0Zmx4STNWZVZFSDZ4V3FtdTZCYkNBby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDRERi8zMTBEMzU0MjM5OTMxMUVGQTA4RDJFMUJDNEY5QUUwMi9vMjIydGZseEkz
VmVWRUg2eFdxbXU2QmJDQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZAWCTXSC+r/O57GAD35eZ7IneMRpZ4Qfd6/9mPfxLw0FgZHuc7ds9
3ul9QY1xOCmH7nc9ZuVrGDFQr39rrMZcYHOimEYjZykMnsntbz+JTUZbp9qVVVSY
pL/01LSbB7uYokYqWPC7ep3zXm2ItIH8KHmFXj7Cq2SdPE5C0Vc4APIWYlVp7fzm
O9gt9RcxJvb0+dzwBJVXeTWE4kdzkiqPOlRZST3zHT85u00/FgUQkrfDFr7NH0Qe
OulCgsINa/qs9Pa4SDPLAGT53WjXswcrmDLeflrZum5nEXCvOByl5xJRWrj1SYPi
IENsJqIbOHvJv/a9vqDSamuPIu3blYXp
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:49 2026 by rpki-client