This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File:                     o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier:          VuRcYOVyzf9rHmfDVYJhQYKfadpQMb60d+x7BQtAmVM=
Subject key identifier:   8B:EF:38:08:60:A4:D8:99:30:3A:1E:F8:99:4A:C1:55:05:4A:46:AF
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer:       /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial:       03B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number:          03AC
Signing time:             Tue 03 Feb 2026 00:11:16 +0000
Manifest this update:     Tue 03 Feb 2026 00:11:16 +0000
Manifest next update:     Tue 10 Feb 2026 00:11:16 +0000
Files and hashes:         1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: 9zWMN+wwHS1dAnQK056K1NXcmf4/Yhsr7krNFlCFy5Q=)
                          2: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: xTkFFGEwoSM0XslM057b0r3pWef291E2LlOQWfzYUXc=)
                          3: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: DhDV/fmV49KF53LCzY2iPFhFE+P1oeX1k0nYiQfDFpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 00:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947 (0x3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
        Validity
            Not Before: Feb  3 00:11:16 2026 GMT
            Not After : Feb 10 00:11:16 2026 GMT
        Subject: CN=69813d24-93eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:45:5f:68:e9:78:32:b3:ae:14:31:60:d2:
                    90:07:ac:d5:e3:5f:59:7d:a3:da:48:8f:53:3c:2f:
                    89:16:d6:8d:2d:db:7d:60:46:c9:bb:f6:d8:06:ff:
                    8a:a7:1c:1f:e2:fc:14:03:b1:39:61:d2:6d:6e:c3:
                    c5:63:e3:aa:7e:e6:db:f8:a0:79:b5:b0:d3:48:b4:
                    41:0d:99:02:8e:d1:cc:61:eb:2b:fc:f2:b2:62:b1:
                    f1:b4:cd:0d:c2:87:df:6b:74:a7:49:27:75:b4:a8:
                    9e:ca:d5:04:66:bf:e7:ed:d5:69:5f:09:e9:85:48:
                    f5:1d:de:f2:69:3f:0c:f5:e7:e2:9d:eb:e4:30:6d:
                    f4:06:f5:4f:e0:04:c3:38:39:4c:b8:d2:78:bc:b7:
                    ec:ec:68:aa:82:0c:23:b7:2b:e5:97:69:b5:5e:ec:
                    9d:2c:f5:81:89:1b:84:4e:29:9b:0e:df:a7:6f:60:
                    c0:f4:1e:65:dd:cf:df:de:bb:12:9c:35:9a:95:27:
                    75:b8:47:a9:2c:78:74:15:9f:46:40:13:27:0b:cf:
                    1a:42:7b:1b:e1:f5:ce:61:e9:69:b8:eb:7f:76:08:
                    53:f8:e4:ad:e3:9c:84:51:7a:d1:88:37:14:fc:54:
                    cb:01:83:a4:78:75:c1:66:9b:8d:80:51:06:f4:d3:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EF:38:08:60:A4:D8:99:30:3A:1E:F8:99:4A:C1:55:05:4A:46:AF
            X509v3 Authority Key Identifier:
                keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:6b:59:a9:15:99:d1:79:12:6e:be:f1:88:69:2a:c2:4d:ad:
         31:c8:55:5e:c8:2f:f8:ad:cc:f1:f4:89:80:fe:fc:5c:63:dd:
         05:93:f4:13:82:a9:f4:d0:4d:e3:cc:a7:97:28:46:c0:e2:7a:
         0c:f9:88:16:49:7b:c8:09:c5:e6:78:33:08:94:d9:4a:8e:98:
         bb:0f:0b:07:83:5d:b5:14:08:95:74:ea:5a:65:57:24:3f:cb:
         15:0f:c0:ef:21:6d:77:4b:11:94:4a:c1:bd:dd:e4:1b:4b:d2:
         9e:e3:30:47:94:fc:f2:dc:28:a0:77:d3:25:18:54:48:34:20:
         24:8d:97:33:09:04:ff:59:e9:be:bb:3d:aa:e0:7d:ca:2b:24:
         54:29:c2:d4:65:c6:7a:a6:25:9b:ea:02:27:7e:84:19:6f:d0:
         39:5a:b4:ec:bc:f4:34:c2:9f:86:88:b2:66:14:1e:fe:11:2a:
         da:3a:8a:2a:9a:9f:6b:81:b1:b8:6c:3e:26:41:c7:95:a3:c1:
         bd:44:7d:1d:10:53:1a:2b:c5:c6:0c:b6:d0:ab:46:18:44:a8:
         43:2d:c9:c7:88:a4:9e:ae:7f:a0:36:55:38:ac:77:b8:81:3f:
         75:e6:8e:98:9d:1c:20:74:de:3a:9e:63:d4:e4:0c:ba:61:c9:
         d1:7e:fd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:13:33 2026 by rpki-client