This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
File:                     oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft (raw, json)
Hash identifier:          tW7oQq4oz2u4NV21alHELDnYfdQorZY1AsT52agk14A=
Subject key identifier:   E0:58:D1:94:B3:74:5E:65:45:11:64:0B:F2:25:2D:2C:7B:3E:05:1D
Authority key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8
Certificate issuer:       /CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8
Certificate serial:       024C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
Manifest number:          0246
Signing time:             Sun 25 Jan 2026 01:08:36 +0000
Manifest this update:     Sun 25 Jan 2026 01:08:35 +0000
Manifest next update:     Sun 01 Feb 2026 01:08:35 +0000
Files and hashes:         1: oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl (hash: f/fi1LsxyXzXXqGtzJZWP0kC2isI8NDLLmzYtWgUW8M=)
                          2: 95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa (hash: 9UBDG0nK7dNXHoswvyDP2323eSe7RBcMWWQgGNewLxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl
                          rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9D8B, serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8
        Validity
            Not Before: Jan 25 01:08:35 2026 GMT
            Not After : Feb  1 01:08:35 2026 GMT
        Subject: CN=69756d14-4fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:0d:0c:2f:f2:e4:b9:0b:8d:e1:63:72:7a:
                    95:d4:ec:e6:b6:84:7d:76:2f:4a:0a:8d:b8:39:be:
                    96:a8:64:a4:e5:74:7e:fa:65:1b:7b:75:6f:9a:7a:
                    d6:a8:ef:e2:76:dd:e2:69:dd:28:01:06:49:b0:ce:
                    15:11:3e:56:f8:89:0a:b1:91:4a:73:5f:0a:64:10:
                    2a:84:4f:ff:b7:d1:26:62:ef:e4:d8:e2:81:90:a5:
                    a5:67:b7:0e:b1:c1:40:72:38:3d:ee:ac:58:ba:cc:
                    cc:c2:53:a6:4e:52:57:81:d5:f6:48:61:14:fb:b3:
                    dd:1e:56:35:d3:c9:06:1b:cc:5b:a4:48:b2:3e:49:
                    f3:1c:66:b5:a1:f5:74:31:e1:2d:72:3b:b1:d9:04:
                    31:2e:7a:c5:3d:9e:a3:93:1c:e2:3f:b9:57:df:97:
                    0b:04:c1:b9:1d:c2:65:81:49:50:64:30:6d:de:18:
                    24:d5:24:4e:a0:ce:a8:f1:e2:53:98:f7:50:a4:25:
                    b7:ff:b2:6f:31:de:7b:19:23:70:61:8d:69:3b:eb:
                    59:bf:a7:83:4d:6f:5e:37:f1:ac:7c:84:1b:0f:5b:
                    e7:9d:9e:3c:93:42:6e:1d:66:c5:1c:01:35:c5:4a:
                    54:f2:61:fa:22:31:5b:ce:f4:f3:79:42:b4:4d:ee:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:58:D1:94:B3:74:5E:65:45:11:64:0B:F2:25:2D:2C:7B:3E:05:1D
            X509v3 Authority Key Identifier:
                keyid:A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2f:a4:ac:bd:90:41:16:ed:19:29:27:74:d6:7e:63:02:0a:
         e4:f2:57:53:21:5d:18:18:97:bb:27:96:4c:8a:2a:42:c7:0f:
         7a:9a:a9:67:a0:97:a7:94:ee:0f:95:96:8b:42:c2:47:bc:95:
         0a:89:d9:b3:94:b5:93:fd:fc:88:7d:81:da:bc:25:98:c2:c0:
         d8:70:c8:38:33:43:8f:e7:5a:b1:0d:f6:83:51:30:3f:f1:70:
         c2:27:d9:3b:40:7e:4b:26:c9:45:00:2c:ce:e9:e7:d1:17:4f:
         30:8e:72:89:6a:bf:8e:41:8a:a5:8c:fc:51:ae:cc:41:a6:27:
         a5:e1:a7:31:1e:96:b2:c4:41:60:25:5e:75:8c:89:45:1e:5e:
         4e:ad:44:a1:f3:7c:1b:e3:8e:7b:b0:e0:55:94:74:cc:b4:d1:
         dd:e7:c3:0c:e6:9d:09:9c:cf:df:3c:f9:50:32:6d:af:6e:59:
         8a:41:8f:26:4d:55:38:ea:df:b7:a1:58:9e:95:23:6e:4e:56:
         5c:a5:ec:8d:88:27:6d:64:9b:77:4a:73:f4:e4:42:ec:60:c8:
         05:f7:49:41:91:41:c1:0f:26:19:31:4b:20:fc:10:25:25:d4:
         76:c0:df:6d:84:b1:87:27:e6:18:e6:83:d8:a6:e0:d2:78:0b:
         88:b9:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:37 2026 by rpki-client