This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File:                     OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier:          jMsoVi6r56oQZeYjOmWjarvOkq9XAcPKJMKjPuKQcIY=
Subject key identifier:   D4:6E:17:14:90:94:25:6F:2D:F0:FD:5A:CE:5D:79:0E:0A:91:9E:D6
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0F2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number:          0CD9
Signing time:             Mon 26 Jan 2026 19:15:29 +0000
Manifest this update:     Mon 26 Jan 2026 19:15:28 +0000
Manifest next update:     Mon 02 Feb 2026 19:15:28 +0000
Files and hashes:         1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: en4i8uN72iAgYf/iwSZpK8iiAjgBjVGmGOwdtPTJINw=)
                          2: 1D5C6E6CA0FA11F0B026D133C4F9AE02.roa (hash: daadqhUC8rdwBg4PXjfz5k9+RSh/I3PQ1NMohDOfJ90=)
                          3: 111D54B0CB6911F0B09B4C71C4F9AE02.roa (hash: mejMLEXKX8ZTqS+UtWxU2w+7wunhtyY77FL1SzQP7Bo=)
                          4: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: s5N2TyQ76d6xMdXE61yLpof0IVsz9xlEvKQDUIYT3lc=)
                          5: ABBC6CB0DFE911F0B906DA90576F56BC.roa (hash: Mi9KErzLxryBNvCvaD6e6lLwngxzlha+vc3wkWjpbY8=)
                          6: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: IULXHhlu5uT6Tg9jL/yk50UFaDGDqG8EJ1WnwAnbvbg=)
                          7: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: f40eX3Uo9sbGTboryo9RIIQpZyzECmWAmF9jxcBqWxQ=)
                          8: 8FF3B806B0D411F0955C2A4DC4F9AE02.roa (hash: LZ0pNikl+GOc3SHl1zJlXg3qSuepoZ3LIiuO7cdJ5ss=)
                          9: CE96CCA2B6FF11F09F680173C4F9AE02.roa (hash: J2RQb3BBIURRwX2BLX2xvqyl9v+nDrLbXlV8YCOhG4U=)
                          10: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: 0YoPMQw7ZQ5kCQUd3F7ZIgdfuVPe710u9EKW9PtZo3w=)
                          11: F91AFD3EDA4711F084CDC7A990D3641D.roa (hash: eNIx59IPvURhZNJvWE5tBw48sAEjOKFmE8SR7xNL/SA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 19:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3884 (0xf2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Jan 26 19:15:28 2026 GMT
            Not After : Feb  2 19:15:28 2026 GMT
        Subject: CN=6977bd51-c238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:a2:de:71:ad:c8:c6:c4:ce:f8:ee:40:5a:
                    83:f9:72:b1:9d:31:be:bd:f1:e4:09:b0:b5:61:4f:
                    c4:86:8a:42:d4:e5:56:52:d1:0f:47:90:a3:17:6f:
                    cc:bc:6f:92:93:e9:5f:53:d4:72:41:bb:a8:86:13:
                    db:65:32:b7:a0:60:97:ef:7b:f4:da:5a:2d:12:c8:
                    7e:e2:37:eb:96:70:fd:d8:84:80:ac:da:c9:8c:d6:
                    9c:0f:ab:83:18:ea:66:52:80:25:79:86:29:68:cb:
                    15:be:5a:0f:d7:87:9e:c3:d0:9d:1a:91:cb:7e:48:
                    98:5d:ea:d1:5b:71:20:ce:69:c3:14:76:78:39:0a:
                    3d:f6:6f:36:5c:37:d2:a7:f3:3c:56:b7:7a:c2:d9:
                    84:82:b4:5a:88:f7:23:91:66:61:6f:9f:d4:79:bc:
                    4b:b2:9d:3f:6c:fe:6c:80:fe:f0:5a:1f:f7:c5:4e:
                    41:6a:e8:4b:0d:96:04:e6:a4:c8:11:e1:09:3a:b4:
                    4a:2c:37:58:ea:92:21:b1:d7:8e:18:b2:fa:c3:71:
                    ec:13:4d:d8:d3:14:17:8e:7f:4c:43:91:42:a2:e8:
                    d5:c9:17:b5:c0:b0:3b:d2:ea:cd:07:4b:4a:41:dd:
                    42:5b:74:a2:aa:ec:4c:d5:93:94:ab:48:58:db:33:
                    f0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6E:17:14:90:94:25:6F:2D:F0:FD:5A:CE:5D:79:0E:0A:91:9E:D6
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:94:ce:ab:44:d7:b5:3c:a6:61:d1:49:1c:08:4c:53:74:ef:
         6a:88:06:5d:c7:a9:10:8c:73:f7:f1:74:10:57:e7:3e:0d:de:
         f1:5f:91:bb:f8:7e:8b:5b:26:2e:1c:89:20:a1:09:8b:4a:f5:
         8d:37:4f:4e:47:60:bf:29:93:5f:af:a5:70:6f:4a:4f:19:79:
         d6:a0:ef:b1:92:a8:15:b3:57:9c:f8:70:bc:58:f4:8a:b5:88:
         05:66:2a:15:bc:a6:7c:ce:2d:93:53:02:dd:be:26:08:03:7e:
         8f:93:a3:c2:8d:3f:ea:8b:97:d0:cb:c2:1a:4d:5b:86:9e:6b:
         4e:44:89:a4:0a:46:f0:b6:d2:fc:c6:c9:28:a9:39:1d:58:f6:
         5d:7b:78:f7:c0:cd:65:a2:5d:d2:0b:e2:c6:11:af:a6:d2:d1:
         c9:9a:c6:7b:da:c4:51:d1:4a:d4:25:40:1c:32:ba:d1:8e:1f:
         2d:82:0b:f3:8e:f3:db:db:89:9f:6f:9c:2c:1f:61:31:2d:1c:
         56:3b:45:d9:ee:df:8e:a2:65:68:83:b0:8b:45:b0:5a:4e:57:
         bd:92:3b:ec:a1:a2:45:01:d5:3a:02:b2:e2:28:6f:bc:6f:d5:
         8c:59:d9:07:26:ab:8f:1b:0e:bd:97:4a:70:96:52:69:41:07:
         5b:68:f3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:50:58 2026 by rpki-client