This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
File:                     oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json)
Hash identifier:          NpOl0kt5h0Yam22zsgGUJxfzRzYt7N78Q9VsZc2f7/U=
Subject key identifier:   F3:37:D2:40:80:B9:E7:8F:75:52:A2:CC:9A:96:69:B1:E7:CA:74:EF
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       03D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
Manifest number:          0379
Signing time:             Sun 25 Jan 2026 00:17:44 +0000
Manifest this update:     Sun 25 Jan 2026 00:17:43 +0000
Manifest next update:     Sun 01 Feb 2026 00:17:43 +0000
Files and hashes:         1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: hdeJahjG927abAwXG9UDcl5mTHZwgt4maSmF5uf1QMs=)
                          2: 2C155C38E62911F0B525CBC56F6F56BC.roa (hash: xzXCmIOI4n+hu8G1iGIEEK3bKhUG/IqbdaJcLrGUz0s=)
                          3: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: dSfere7QhRvtorz+gmreSnCGYZIH1WofndwPCRU2nxo=)
                          4: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: iyDMS6tOGnY0vV2tRBpkImtDJt2yb1m8IIZ76sEjG28=)
                          5: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: /HSo5jxbj7peidwO9alg4qXB6CLHjHvT7Exk5bMgxFc=)
                          6: B111111288B411EF80480527C4F9AE02.roa (hash: qLIDrHWS/i6A8fwW8H8k+xkymy4Akbi61wq5s13V2Ww=)
                          7: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: DFlr8Tn/hG96eJuSS2hv0WiijRfajfy1iDPzEugU79I=)
                          8: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: emdOoNHeNPd2I/1TXnCpTax46mU70PVq1qcXN4YL9To=)
                          9: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: oa1DI9U4A4Nx6Hk3PHDp1mXpYhzRJyPS5jmqfG2Om0Y=)
                          10: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (hash: VitD9nfvSlKWRXb0qJCXTZOKT5a6K8qw8uO3GVdwbyk=)
                          11: F2F59366E93211F0977E0D6F386F56BC.roa (hash: NdmZODI+NoDjZcaCQRDq/mC6N+4esweLJGp3j7Wx15I=)
                          12: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: 2idrkUiE1glbbdM/t25K//0O3gKsqe5+guvE9Yfyva4=)
                          13: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: IpxcD4cHmOeodB8ybIfLf30tVWg9Lc/8x7ghIc66rAM=)
                          14: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: CJ9YN6FLH2mWQGJEIYwUy4MU0VtOp9beQcxD+Nz5y9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Jan 25 00:17:43 2026 GMT
            Not After : Feb  1 00:17:43 2026 GMT
        Subject: CN=69756127-4efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:90:5d:ed:70:b2:3f:28:5a:d2:d6:4e:8a:
                    d5:8f:6f:10:fc:ab:aa:e4:9c:d5:7c:23:8c:8b:34:
                    97:63:77:11:7f:d8:5b:7c:8d:88:66:72:1a:ee:7a:
                    88:6c:e6:25:69:d9:2b:74:e5:34:b8:c8:b9:f3:c4:
                    74:f1:70:df:7a:ba:01:56:2d:6e:51:53:4c:cb:1e:
                    b1:44:4f:f3:f0:e2:f2:55:ba:7d:18:02:46:7e:f3:
                    f4:68:a9:43:db:68:1e:78:cf:e2:85:5f:bf:ec:b9:
                    c7:e3:ee:a9:4f:a3:fa:d8:59:45:f6:bf:9e:84:0f:
                    62:ab:5c:fa:61:9b:2b:93:a9:1d:c6:c7:24:c3:f4:
                    66:c1:e1:26:ef:3b:87:f8:f6:90:33:10:5d:4e:75:
                    e8:a4:97:21:28:0a:9d:28:18:c3:c7:b8:72:09:b2:
                    b1:b7:a5:5e:6e:cb:71:54:a7:ff:15:f5:af:10:af:
                    ec:ec:06:ec:dc:91:e2:b7:78:32:31:0d:32:17:fe:
                    e0:8b:20:29:96:25:76:8a:07:d7:09:95:83:8a:0a:
                    5c:fb:47:6f:0e:b7:1b:98:5b:0f:ad:2f:e4:94:e2:
                    58:96:cf:e6:b3:60:ed:88:e1:21:c4:9b:ab:d1:10:
                    31:8d:c4:65:76:b7:0c:9f:3a:67:69:ac:af:42:db:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:37:D2:40:80:B9:E7:8F:75:52:A2:CC:9A:96:69:B1:E7:CA:74:EF
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:19:c1:00:3a:e7:75:94:1e:de:87:b1:af:25:30:72:a1:5d:
         c5:c6:fa:8b:46:fd:d0:c2:6d:c2:b5:a1:f9:87:25:04:91:ce:
         c8:46:de:c3:34:a4:18:4b:3a:e2:b8:b9:40:cd:bb:06:7a:ef:
         35:65:27:f7:61:e6:9b:b9:70:bb:11:15:92:e8:2a:e0:1f:e3:
         e8:f8:8e:1d:af:9b:11:28:60:42:88:af:14:3a:73:b7:82:a2:
         39:26:b1:0d:a6:fd:5c:56:cc:d9:dd:51:c5:11:d9:33:f4:39:
         87:18:50:89:44:dc:70:e9:77:7d:84:0e:c4:c4:c1:e4:1e:b6:
         ae:cd:b8:db:a8:e2:3d:36:17:e0:cd:3f:27:1d:89:09:a4:8f:
         1c:3c:67:f3:62:0f:62:c8:ac:c7:2f:b1:de:1c:b4:6d:89:36:
         7b:9a:ea:8a:fc:e3:52:fe:e7:29:36:82:21:b4:61:fa:3a:08:
         51:71:c9:cb:c0:75:7d:42:db:0b:28:3b:bd:34:d8:d0:c9:f9:
         58:2b:eb:10:4b:ff:f8:06:e0:9f:76:86:d0:fe:b3:d8:3f:d3:
         72:19:d0:7f:58:65:76:c7:65:10:db:29:58:8d:31:ac:ad:d0:
         6a:3a:c5:ab:9a:cc:b9:b3:16:9c:75:a7:c8:b0:ec:f5:44:43:
         a3:56:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:57 2026 by rpki-client