This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
File:                     OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json)
Hash identifier:          NDFU+M7710QgcdYQqiCLsU0H+WZMuFIN0HMFDUFKnOQ=
Subject key identifier:   1B:16:D8:09:31:73:D5:E7:C6:86:31:97:AD:5C:12:FC:10:90:77:42
Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A
Certificate issuer:       /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
Certificate serial:       0AF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
Manifest number:          0AED
Signing time:             Sat 24 Jan 2026 18:53:19 +0000
Manifest this update:     Sat 24 Jan 2026 18:53:19 +0000
Manifest next update:     Sat 31 Jan 2026 18:53:19 +0000
Files and hashes:         1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: KO+tzRHahxmke22OxFyPJPNSLCHUofkYkht938jbqGM=)
                          2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: RsV1HG0sblH5nYeZVkL9f/OZ/ev49KnYKTaHyjLrK0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2804 (0xaf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
        Validity
            Not Before: Jan 24 18:53:19 2026 GMT
            Not After : Jan 31 18:53:19 2026 GMT
        Subject: CN=6975151f-979a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:82:09:1b:a2:1c:41:0d:b6:34:d8:74:bf:62:
                    73:fc:f0:dc:e6:63:03:35:56:7b:6b:10:f8:82:3b:
                    2b:af:0c:64:08:c6:f3:48:92:07:c0:b1:5e:6e:02:
                    ec:68:6d:ef:f7:bc:ac:ee:10:a1:fe:f9:ca:78:fa:
                    1f:d9:d1:93:bd:4d:ea:59:09:e8:d0:ac:96:8e:42:
                    41:1a:f4:55:9d:8f:8a:0b:16:07:0b:67:b8:f3:9a:
                    7a:96:96:d1:a1:d9:ae:ff:27:87:9b:75:6b:95:91:
                    9a:63:78:94:bf:b2:98:05:35:e0:b2:b7:4b:2b:3c:
                    53:f2:8a:45:72:1a:e9:aa:96:ad:06:49:7d:e1:96:
                    ce:41:e4:02:d4:71:7b:3a:6d:70:7a:db:b9:fb:70:
                    3b:db:1c:c3:c1:d5:76:aa:f0:5e:7d:c2:d9:f0:58:
                    12:9e:8b:1c:81:b0:6c:59:07:08:32:a4:32:6d:0d:
                    57:e3:0a:2c:b8:32:49:3a:ea:16:28:cd:76:6c:e7:
                    4d:23:52:e9:f1:9c:9c:c9:36:b5:10:79:d6:5f:0e:
                    70:b4:12:d4:25:05:e0:57:7b:5e:66:c5:cc:84:aa:
                    f5:99:61:09:7e:d1:85:96:25:09:31:f3:0e:34:71:
                    34:88:68:ce:47:29:61:e4:29:73:a9:9c:76:3c:e2:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:16:D8:09:31:73:D5:E7:C6:86:31:97:AD:5C:12:FC:10:90:77:42
            X509v3 Authority Key Identifier:
                keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a7:36:f7:0b:2a:2c:c5:a5:f3:06:a9:b4:8a:7c:d7:95:1e:
         b6:de:8c:86:6b:bd:7b:db:04:45:fb:30:ef:e8:d5:63:70:eb:
         92:ea:0d:ff:5c:c7:2a:6f:ff:8b:0a:c0:eb:ec:18:5a:b4:1c:
         91:a4:d0:2e:9d:83:88:64:fb:2a:ab:4d:26:3d:2f:df:9e:f1:
         b2:51:83:08:6f:cd:25:17:1b:c9:40:71:05:92:f3:9b:4f:1e:
         b2:bd:0f:3f:ed:13:08:f0:01:a0:e0:1f:64:ed:06:32:37:55:
         20:ab:88:4c:2c:35:4e:30:11:c0:92:05:2b:6b:2b:0c:65:af:
         da:e0:b9:79:7f:3e:13:52:93:9d:2e:80:90:ed:a1:64:01:45:
         4a:02:4c:12:9e:0c:70:12:43:90:84:7e:cc:f6:57:bf:dc:a4:
         a8:f1:7a:42:60:93:aa:56:66:9e:9b:cc:e3:86:97:53:45:10:
         31:fc:f0:49:48:f0:40:61:8d:1a:37:b2:b9:70:48:8b:73:17:
         a5:ac:fe:85:e0:30:57:5a:26:b6:ad:47:8e:c7:71:3f:e3:d9:
         ce:e7:c5:34:bf:1f:01:b7:8d:8e:85:02:71:46:57:34:4d:60:
         7e:b8:99:c5:4c:25:3d:2a:de:74:c8:9f:c5:03:19:26:fa:44:
         38:b9:31:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:06 2026 by rpki-client