This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
File:                     Od1jNTmfErgZIRzpGqfc9i9tgbw.mft (raw, json)
Hash identifier:          55pZmCMXdcJ4o6uEwPCjAQ5ZAhOqeDL7SptSvDE6z+c=
Subject key identifier:   15:84:AB:C5:6C:18:78:A7:F0:C4:B7:B1:55:0E:72:F5:07:69:23:CE
Authority key identifier: 39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC
Certificate issuer:       /CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
Certificate serial:       03E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
Manifest number:          03D5
Signing time:             Sat 24 Jan 2026 23:47:54 +0000
Manifest this update:     Sat 24 Jan 2026 23:47:53 +0000
Manifest next update:     Sat 31 Jan 2026 23:47:53 +0000
Files and hashes:         1: Od1jNTmfErgZIRzpGqfc9i9tgbw.crl (hash: qA1ccXDLcmQ5iSHES5T31NI4vNJY1ReJQ+FB8UjckHw=)
                          2: 9233AB983ED411F0B38CCD78C4F9AE02.roa (hash: 9jPLiSrAv9CpBTipdqfUpD+haiGgsN7V6kZeTNfsQaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl
                          rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBB2D, serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
        Validity
            Not Before: Jan 24 23:47:53 2026 GMT
            Not After : Jan 31 23:47:53 2026 GMT
        Subject: CN=69755a2a-c886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f8:56:69:d6:d6:a9:0c:6e:7f:43:12:73:57:
                    ca:64:8e:71:85:bd:aa:24:e2:66:34:89:ed:17:24:
                    62:b6:1e:ae:54:cb:22:6f:dd:28:b4:11:ac:14:b9:
                    01:cd:3e:70:5d:37:08:2f:d8:24:a0:ef:40:8c:58:
                    90:69:ef:75:89:ac:70:09:b8:10:dd:a2:ca:51:62:
                    9e:dd:76:dc:62:a9:ae:13:e0:e0:65:50:72:bf:24:
                    96:e8:1b:26:c4:1d:9d:22:48:01:e0:1e:7e:72:c3:
                    c9:b0:78:e8:d0:93:22:ad:98:3e:21:27:d0:7b:8a:
                    95:ee:2a:21:0f:4b:b3:38:3b:4a:f8:41:33:de:a3:
                    7e:f1:50:b0:69:a7:fb:4d:82:3f:2a:88:81:fc:71:
                    41:33:9a:b9:9b:90:3d:a9:7b:30:85:e8:79:27:a9:
                    4f:ea:c5:9d:c7:4a:d6:de:c0:0b:8b:d7:51:e1:f5:
                    0c:8b:b8:29:ff:b2:28:f7:28:4d:e1:be:ba:67:94:
                    32:ff:96:e7:53:af:c6:3a:d5:af:9d:38:02:7d:21:
                    1f:9f:bf:4c:cf:b0:01:50:d9:f6:34:1b:44:c9:07:
                    31:25:28:b4:17:56:3a:b9:25:95:14:21:d0:7d:63:
                    a7:cf:76:e8:35:4d:07:98:f1:e2:de:7d:38:18:88:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:84:AB:C5:6C:18:78:A7:F0:C4:B7:B1:55:0E:72:F5:07:69:23:CE
            X509v3 Authority Key Identifier:
                keyid:39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:57:7a:b8:a7:1b:f4:25:32:fa:32:55:3c:f7:66:1b:7f:c5:
         f9:75:63:5f:38:11:0b:19:f3:05:43:c8:ab:3c:4e:70:f3:a1:
         84:bf:8a:c4:cb:49:e3:14:81:84:ad:4a:9d:fb:07:1f:d8:1d:
         9f:fa:51:61:8f:66:7e:33:88:64:88:9e:9c:d6:04:af:6e:5b:
         d4:3a:c4:4c:95:e8:56:3a:6b:b8:16:d9:27:68:6e:2a:d9:47:
         ee:44:d9:a8:96:6d:0a:d7:12:39:72:ca:af:f2:c2:dc:e3:53:
         08:ee:c0:3e:8c:fa:8a:00:4a:af:55:99:08:d3:b0:2e:17:20:
         4f:b7:98:4a:23:d9:f2:97:12:f4:95:eb:2b:91:b2:98:7f:b8:
         dd:20:cd:59:91:43:42:55:c5:83:5b:c1:e7:7d:be:c3:fc:5b:
         46:71:1c:ac:36:95:2c:46:0a:a3:9d:63:bb:37:e8:1c:1d:16:
         92:63:58:f1:56:6e:50:fc:2b:b0:3c:0a:8e:5d:90:d5:77:3b:
         70:b7:c9:46:2f:d3:8c:c5:3f:3f:6d:54:c7:25:fe:d2:3e:41:
         a8:79:d4:58:1b:e4:b1:82:f3:b1:82:6e:02:f9:60:98:5f:da:
         ec:e5:ca:cf:55:a7:41:85:16:f3:c4:a2:a1:b7:fa:53:49:b0:
         9c:23:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:28:49 2026 by rpki-client