This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
File:                     ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json)
Hash identifier:          Gh5haoQ7z/xpacQYXpj9G70N/SBhmx7DRzPMV+KY07s=
Subject key identifier:   FC:39:83:12:7C:48:97:07:40:C4:63:CC:6B:41:DE:2B:EE:C3:5F:19
Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80
Certificate issuer:       /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
Manifest number:          087C
Signing time:             Sat 24 Jan 2026 20:00:14 +0000
Manifest this update:     Sat 24 Jan 2026 20:00:13 +0000
Manifest next update:     Sat 31 Jan 2026 20:00:13 +0000
Files and hashes:         1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: hco3YsUiXgOy7UDGH4/YD9q665mYMYDgaZ/5+1fxJDE=)
                          2: B019C596499E11EBA61D7146C4F9AE02.roa (hash: 66DABlOmlKanBg15AydHS4VXq/M6pzfU0oFhd1sQmaw=)
                          3: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: 5mbzjcjzxDZf01pjMXDuNhQqBvsv1vcB9wr2EMeLZMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl
                          rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBFC9, serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
        Validity
            Not Before: Jan 24 20:00:13 2026 GMT
            Not After : Jan 31 20:00:13 2026 GMT
        Subject: CN=697524ce-9448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:8e:79:b8:ba:13:c0:88:60:0e:7f:ed:ef:
                    cc:77:f9:b5:94:81:13:eb:a7:7e:4d:6a:16:6c:bc:
                    fb:d4:4b:51:ad:db:57:7a:78:81:12:05:ee:e1:54:
                    24:a4:d2:12:09:b3:21:a1:b3:78:f2:10:1d:dd:44:
                    6d:12:93:33:13:39:27:c0:ad:37:89:e3:86:5b:e0:
                    60:30:6f:72:66:c3:52:f8:f0:a2:f4:ca:42:bf:12:
                    12:be:09:6b:66:f4:49:5f:58:7b:79:1d:f1:40:6f:
                    be:51:36:1b:2a:52:b7:7a:b5:40:39:e7:4f:be:05:
                    e8:7f:74:cb:3c:7f:b3:f4:2f:6b:c1:9c:6e:d5:79:
                    e4:0d:53:a9:4e:23:e7:c5:f3:2d:5f:4c:23:2c:e6:
                    0d:87:a4:6a:9b:88:46:13:c7:95:eb:c1:43:7d:89:
                    c6:9d:11:a7:c7:34:b3:cc:92:e5:e2:9c:fb:21:d1:
                    fd:fe:b6:8f:c4:41:41:93:13:dc:e6:ff:55:61:b2:
                    84:c7:88:b6:f1:84:7d:d2:bc:1a:28:8a:72:98:bd:
                    ba:51:e5:37:25:b9:7b:05:9e:a0:fc:f4:b3:69:9b:
                    79:98:7f:8f:7b:8b:bb:30:9b:d7:5c:8f:c8:49:28:
                    ae:1b:fd:5f:74:a0:8a:0c:9b:18:85:23:23:c4:bb:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:39:83:12:7C:48:97:07:40:C4:63:CC:6B:41:DE:2B:EE:C3:5F:19
            X509v3 Authority Key Identifier:
                keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f8:74:65:6e:5a:ae:e2:e8:c2:e7:e6:c0:71:4e:1a:d3:d6:
         f1:c9:d9:7e:27:86:a3:47:40:ab:98:b8:da:13:79:91:df:b9:
         67:e7:42:65:4a:63:6a:77:ff:07:1e:f5:f4:24:3f:bf:da:a5:
         70:59:3a:b8:1c:54:32:c6:5c:9a:cd:df:73:20:86:53:c0:4d:
         87:b0:9b:33:61:03:f7:bc:fe:f1:90:4b:dc:c3:c9:60:62:d5:
         d7:72:d6:2e:1d:9b:8f:12:a2:38:4d:fa:97:7f:fb:a7:b3:b0:
         59:82:f8:c6:4e:84:f3:da:9b:60:0f:f9:9d:c7:1e:b9:7c:33:
         33:6a:d1:3b:62:12:67:0f:38:44:c3:6e:51:9d:74:e2:3a:73:
         92:d6:45:d7:e0:4a:37:26:88:4c:89:e2:9f:51:48:85:00:32:
         76:48:b3:35:e1:02:57:c6:e5:7f:70:6a:f2:13:55:64:96:07:
         56:4d:9f:ee:da:b8:89:86:b4:e3:c6:5b:46:b7:e2:78:25:b5:
         f1:e2:88:3f:11:3c:c9:6b:2e:9f:dd:51:66:2f:64:f7:3d:07:
         0c:9b:1d:91:d6:48:39:8d:e7:16:1c:b4:e2:a4:cc:d4:03:06:
         9d:bc:7a:40:f1:42:93:f7:63:c5:02:27:ef:e7:fd:76:10:f8:
         ee:7b:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:07 2026 by rpki-client