This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
File:                     oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json)
Hash identifier:          Ho7m9L0K9MyEWpzb/CXLxbzA3a6IQ5Raa6qsbBznnFE=
Subject key identifier:   5A:3D:77:27:8C:CB:5B:48:07:7C:86:CA:DA:82:DB:A5:0A:CB:63:47
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Certificate issuer:       /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial:       0444
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
Manifest number:          042B
Signing time:             Sat 24 Jan 2026 23:33:29 +0000
Manifest this update:     Sat 24 Jan 2026 23:33:29 +0000
Manifest next update:     Sat 31 Jan 2026 23:33:29 +0000
Files and hashes:         1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: 4stgIHdTTedjvo//YswqVOR0tEWW9B+eaZIUvQoXVH0=)
                          2: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: G5JJTNT4PHPw15mb1pwEFBh3OwjZ888UZyxc9uGXXjk=)
                          3: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: vdnC+qFt4udVq1B1izXx0+o2/X3aQtQham+DUqTDpDA=)
                          4: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: II1bO3mfo86eOnAcV9DLjx45WlHcGH9mE7tGPgaK/1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
                          rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
        Validity
            Not Before: Jan 24 23:33:29 2026 GMT
            Not After : Jan 31 23:33:29 2026 GMT
        Subject: CN=697556c9-d384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:62:51:aa:50:e2:d0:66:5c:3e:69:85:b7:10:
                    d2:95:1f:16:6a:6c:fb:c3:88:1a:fb:e2:c1:9a:ca:
                    11:fa:de:c2:f0:34:68:0f:dc:6b:4a:a2:b5:07:16:
                    ce:6d:b6:64:3e:b1:81:78:9f:bd:65:d0:77:47:e7:
                    b9:af:c9:4b:fb:fe:03:7f:95:b4:4c:6d:c5:b9:f6:
                    b7:ca:da:5c:f7:bc:7a:a8:a7:8f:a4:c5:4e:ff:9d:
                    47:9a:9a:76:4d:40:99:fd:db:b3:4d:86:2d:a0:30:
                    57:a0:6f:a4:81:eb:5a:29:ec:93:9b:4c:c7:17:27:
                    d6:6f:f0:b1:df:13:54:a2:69:4c:2c:e1:d6:3f:d3:
                    55:7d:f8:ad:63:d6:c0:5c:50:64:2b:2b:44:b2:0c:
                    a7:0b:9f:c1:29:d8:ae:cb:43:c3:63:69:8c:8b:80:
                    e7:ee:ad:14:60:6d:d0:fe:f5:9a:53:6c:7a:aa:13:
                    eb:31:9c:0a:9d:9e:09:e2:3f:a6:b4:b0:a8:f1:97:
                    2e:08:39:c6:9e:41:36:60:37:59:33:de:9a:d9:30:
                    31:ff:83:f2:dc:2e:89:23:33:35:75:39:d2:6c:c3:
                    55:24:90:94:37:3c:c1:f2:80:ef:f3:e3:db:f1:9a:
                    f6:9f:e1:cc:15:19:3f:6a:b9:b4:b9:ad:3e:21:83:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3D:77:27:8C:CB:5B:48:07:7C:86:CA:DA:82:DB:A5:0A:CB:63:47
            X509v3 Authority Key Identifier:
                keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:11:23:3c:80:c3:18:2a:c4:dc:53:a7:7b:d5:bf:af:77:87:
         ab:e6:50:7f:23:5b:f8:74:53:68:ca:b1:78:1c:5c:a0:45:2b:
         9b:0f:9a:df:f3:19:78:e9:f5:61:58:d2:2b:cb:e4:85:c1:5d:
         17:21:95:ea:93:75:7b:cb:91:d5:59:57:1c:31:5f:b6:6d:60:
         29:e4:62:76:1f:ef:8e:64:85:f8:bf:18:b0:e6:ed:ff:b3:a7:
         93:aa:1b:9d:ab:e0:6b:62:51:14:e5:d5:7b:0c:f2:c5:48:c3:
         d6:bc:79:20:d8:7c:38:0e:2b:11:a1:07:f4:b4:ac:11:25:2c:
         54:2c:f5:91:69:77:dc:73:b6:01:ac:8b:57:36:f6:92:f6:b0:
         56:54:48:94:68:b8:a0:67:fc:21:c2:f6:b0:3c:3c:c4:50:99:
         b5:4a:f2:76:36:29:a1:cf:60:49:7e:18:85:8e:ca:a3:8d:26:
         10:3a:2e:3f:dd:74:f7:d7:62:f6:12:1b:16:4b:ef:eb:3b:19:
         54:e4:9c:27:bd:1d:99:92:78:b8:2a:72:eb:54:7a:6a:b9:37:
         82:43:0f:74:3c:a0:4b:52:59:9a:c0:42:5f:00:22:02:48:00:
         80:d4:78:bb:a1:e6:7f:ed:fc:a9:0b:08:d0:95:26:04:9b:76:
         37:74:0c:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDVGMkQxMTAvBgNVBAUTKEEwMTNCMTM4OEEzOTMzQkUxMDZCRUFFRERGRTlGM0I4
MzQ2RDM3NDgwHhcNMjYwMTI0MjMzMzI5WhcNMjYwMTMxMjMzMzI5WjAYMRYwFAYD
VQQDDA02OTc1NTZjOS1kMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA52JRqlDi0GZcPmmFtxDSlR8Wamz7w4ga++LBmsoR+t7C8DRoD9xrSqK1BxbO
bbZkPrGBeJ+9ZdB3R+e5r8lL+/4Df5W0TG3Fufa3ytpc97x6qKePpMVO/51Hmpp2
TUCZ/duzTYYtoDBXoG+kgetaKeyTm0zHFyfWb/Cx3xNUomlMLOHWP9NVffitY9bA
XFBkKytEsgynC5/BKdiuy0PDY2mMi4Dn7q0UYG3Q/vWaU2x6qhPrMZwKnZ4J4j+m
tLCo8ZcuCDnGnkE2YDdZM96a2TAx/4Py3C6JIzM1dTnSbMNVJJCUNzzB8oDv8+Pb
8Zr2n+HMFRk/arm0ua0+IYOHxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFo9dyeM
y1tIB3yGytqC26UKy2NHMB8GA1UdIwQYMBaAFKATsTiKOTO+EGvq7d/p87g0bTdI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUYyRC9DRDZENkU1Njk4
OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03NFFhLXJ0My1uenVEUnRO
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29CT3hPSW81TTc0UWEtcnQzLW56dURSdE4wZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUYyRC9DRDZENkU1Njk4OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03
NFFhLXJ0My1uenVEUnROMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARESM8gMMYKsTcU6d71b+vd4er5lB/I1v4dFNoyrF4HFygRSubD5rf
8xl46fVhWNIry+SFwV0XIZXqk3V7y5HVWVccMV+2bWAp5GJ2H++OZIX4vxiw5u3/
s6eTqhudq+BrYlEU5dV7DPLFSMPWvHkg2Hw4DisRoQf0tKwRJSxULPWRaXfcc7YB
rItXNvaS9rBWVEiUaLigZ/whwvawPDzEUJm1SvJ2Nimhz2BJfhiFjsqjjSYQOi4/
3XT312L2EhsWS+/rOxlU5JwnvR2Zkni4KnLrVHpquTeCQw90PKBLUlmawEJfACIC
SACA1Hi7oeZ/7fypCwjQlSYEm3Y3dAx7
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:47 2026 by rpki-client