This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File:                     o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier:          v4OA5LDjKQgAgNrtkkiNwxjfIidnQnkbjb0PrjEEVRo=
Subject key identifier:   D9:2C:E7:32:9D:A1:35:8C:F2:21:9C:99:F0:0F:91:B5:E1:A4:D1:E7
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer:       /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial:       03AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number:          03A7
Signing time:             Sat 24 Jan 2026 23:54:37 +0000
Manifest this update:     Sat 24 Jan 2026 23:54:36 +0000
Manifest next update:     Sat 31 Jan 2026 23:54:36 +0000
Files and hashes:         1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: qAEI3sGoCwdiIc36UPYYGylrjRy1spgWicerOCunsOI=)
                          2: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: xTkFFGEwoSM0XslM057b0r3pWef291E2LlOQWfzYUXc=)
                          3: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: DhDV/fmV49KF53LCzY2iPFhFE+P1oeX1k0nYiQfDFpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942 (0x3ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
        Validity
            Not Before: Jan 24 23:54:36 2026 GMT
            Not After : Jan 31 23:54:36 2026 GMT
        Subject: CN=69755bbd-6e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:76:c3:d7:00:25:21:8b:44:38:d3:6a:7a:
                    8a:5f:c8:71:7c:4a:00:02:bd:7e:47:3c:f1:c7:ec:
                    dd:93:08:1b:07:75:e2:3a:8f:eb:e2:20:de:86:9b:
                    79:8e:69:5a:67:48:2b:47:4f:ca:77:49:f9:63:5b:
                    64:ad:ca:96:be:56:98:4f:3c:98:4a:48:08:ab:e4:
                    73:86:d5:36:d6:60:28:c7:65:48:10:79:0b:20:dc:
                    05:2b:86:22:e3:ec:d2:15:80:bf:fe:f0:4b:8a:26:
                    43:d7:94:eb:ac:1d:e0:07:63:7f:ee:94:0e:8c:6b:
                    91:8b:05:89:d3:f0:a4:98:0e:ad:1c:47:ce:3d:c5:
                    84:df:37:e1:31:cd:18:7b:c9:f0:52:85:79:28:cf:
                    c7:32:03:54:2b:a8:06:99:e0:c6:ff:a8:0d:2c:ee:
                    55:8b:17:02:5d:96:04:55:43:f0:8f:1d:4e:80:88:
                    21:56:25:d7:fe:03:c1:65:0f:71:6f:ab:d4:21:d6:
                    3e:d0:3c:39:1b:01:a0:67:fb:3b:4b:85:2c:2c:74:
                    70:fc:9d:df:be:b5:6b:d6:9f:b1:38:7b:06:64:7b:
                    0a:d1:61:13:12:93:b0:2d:50:a0:23:b1:10:4b:5e:
                    80:82:ab:c8:f7:e8:4f:92:b2:42:c2:3b:39:1b:6b:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2C:E7:32:9D:A1:35:8C:F2:21:9C:99:F0:0F:91:B5:E1:A4:D1:E7
            X509v3 Authority Key Identifier:
                keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b8:a3:15:9b:75:9d:79:10:c0:de:da:d7:f7:0a:01:cf:55:
         6c:c7:f0:b1:2c:fa:14:df:eb:a5:9b:4d:43:7d:ea:a1:8d:7f:
         d3:aa:fd:6f:ec:b9:0d:92:4b:fb:d6:bf:b2:ac:1c:65:57:4a:
         f7:ef:4d:6d:59:0a:e7:ef:a8:ae:74:2a:30:ee:f7:fd:9c:c0:
         cc:44:2a:d1:9b:17:b3:c1:e1:d3:37:30:c0:f8:41:5c:f2:d5:
         5f:55:7d:31:28:fb:ef:0b:c4:f8:3f:2c:8b:ea:93:01:02:ad:
         1c:22:f2:30:07:1f:29:1a:75:c5:cc:4c:a0:37:29:61:f3:ff:
         fc:3f:d0:f0:d6:f8:94:c2:cc:7a:42:54:24:6d:b1:59:15:73:
         44:59:8d:0b:93:a3:ef:df:9d:7a:91:11:24:8c:a1:d6:01:7c:
         d2:e7:4f:d9:9f:f0:8c:1e:11:83:a7:6c:a7:34:dd:05:bf:7c:
         aa:11:7d:44:74:38:4b:d2:70:6c:d5:1e:2f:44:15:6b:97:ed:
         ec:bd:5a:a9:23:52:93:96:78:22:4f:9f:65:6a:f8:6c:24:74:
         10:d9:91:92:06:bf:b5:56:01:7f:cc:b9:85:f7:a4:d6:62:41:
         67:eb:23:9c:79:73:df:27:89:1d:fa:b4:12:a8:09:33:87:66:
         3e:01:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:29:32 2026 by rpki-client