This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
File:                     OYN8tL7K9qYmyRaulgJBtgnmsgo.mft (raw, json)
Hash identifier:          b9Fh7X8xQBOLxfK1JYWJPxRXgNWztT+ksAcoTYAY7/E=
Subject key identifier:   D9:66:38:20:73:31:CA:4B:D4:3E:A6:73:7A:07:2C:5A:46:2E:61:58
Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
Certificate issuer:       /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
Manifest number:          018C
Signing time:             Sat 17 Jan 2026 02:45:05 +0000
Manifest this update:     Sat 17 Jan 2026 02:45:04 +0000
Manifest next update:     Sat 24 Jan 2026 02:45:04 +0000
Files and hashes:         1: OYN8tL7K9qYmyRaulgJBtgnmsgo.crl (hash: M90jv9Z3q7AmN5cWLww3cpON8YWjroukjY4TQYtDL+s=)
                          2: C635D41E611411EF9B00D029C4F9AE02.roa (hash: rOwD6kKfHs7j3niSOFa7ZxwcRgpXDjpa8bFCR+QwO/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
                          rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 02:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C3B7, serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
        Validity
            Not Before: Jan 17 02:45:04 2026 GMT
            Not After : Jan 24 02:45:04 2026 GMT
        Subject: CN=696af7b1-d7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fc:04:f7:05:95:85:a1:fd:11:bc:b0:62:fa:
                    11:30:9b:61:c6:68:ad:91:2a:1e:d5:bf:c7:11:8c:
                    7d:9c:7f:52:58:b9:72:24:13:28:35:8e:55:4b:9b:
                    3b:33:a8:7f:6e:16:d4:cf:ba:a8:7b:f3:e4:1e:e0:
                    d8:e1:d8:c0:c3:c2:35:3b:2b:3f:d8:5a:5c:eb:6b:
                    4b:a7:87:e8:8a:83:07:45:a5:31:db:a6:a2:cb:44:
                    d3:b4:66:92:77:93:bb:6e:23:d1:6a:b2:ca:e3:60:
                    3f:11:bd:da:88:ed:8a:bd:e7:48:7d:27:ff:b0:e4:
                    a9:ab:e4:57:c2:02:f4:25:4e:09:25:3a:ef:99:a4:
                    3d:93:a6:31:9e:49:21:80:c4:05:56:61:20:06:a4:
                    0a:51:47:a8:a1:47:df:e7:51:b4:46:9c:d4:0f:66:
                    4b:c2:59:b0:13:8d:d7:2a:4b:e2:d3:10:90:6f:12:
                    88:46:5e:54:c6:85:59:0e:52:04:4c:75:ff:6b:b6:
                    c8:48:48:57:f3:3f:de:57:33:ae:2d:96:e5:ae:08:
                    b0:fc:5b:0b:a8:b9:23:2f:cb:d0:49:66:8f:07:f5:
                    b6:fe:98:25:3c:60:0a:3d:d2:09:64:8c:e6:35:f4:
                    32:fe:55:d9:08:fe:4f:8d:25:eb:d3:45:79:08:fc:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:66:38:20:73:31:CA:4B:D4:3E:A6:73:7A:07:2C:5A:46:2E:61:58
            X509v3 Authority Key Identifier:
                keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:d9:03:8d:80:b2:64:a1:32:3f:ef:0d:d1:bf:aa:9e:cf:1c:
         88:a6:a8:23:7b:5a:bd:8d:3f:a4:8b:a1:20:a0:07:6e:43:da:
         c4:e8:10:c4:78:90:c9:9e:90:09:8b:c3:ff:a4:75:41:68:37:
         b1:c4:86:86:c3:b4:1a:55:07:0f:0f:27:57:9e:11:b6:d5:d7:
         62:b1:84:2d:95:04:c4:e2:65:70:e5:72:57:a7:78:38:60:9a:
         c2:6d:f2:f6:37:4d:c4:cc:e1:cf:0e:b4:ee:da:d7:c9:9f:79:
         18:17:0b:26:c7:95:05:e7:4b:f4:7d:39:ee:20:1d:bb:6e:af:
         e9:fd:d9:c4:f2:39:cd:2f:3b:42:8c:ce:f9:52:68:33:6d:6a:
         6b:d1:25:f2:ec:12:4e:4d:6a:84:f7:86:2c:06:4c:90:ab:ca:
         70:f2:2f:b1:cb:36:ab:9d:e5:1b:74:cb:70:18:e0:95:98:c9:
         db:17:ea:e6:88:1a:8f:bc:60:d8:03:a4:96:06:94:47:a9:99:
         1a:e2:71:12:90:85:c0:6e:7a:64:e1:4e:d0:17:7f:61:c6:55:
         0c:4b:36:bf:19:66:00:45:18:77:0a:b3:52:53:23:6a:b9:74:
         48:09:d5:f4:53:c1:f4:29:55:aa:e0:a7:59:cc:f7:5d:f3:0d:
         30:d7:0a:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMzQjcxMTAvBgNVBAUTKDM5ODM3Q0I0QkVDQUY2QTYyNkM5MTZBRTk2MDI0MUI2
MDlFNkIyMEEwHhcNMjYwMTE3MDI0NTA0WhcNMjYwMTI0MDI0NTA0WjAYMRYwFAYD
VQQDDA02OTZhZjdiMS1kN2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtPwE9wWVhaH9EbywYvoRMJthxmitkSoe1b/HEYx9nH9SWLlyJBMoNY5VS5s7
M6h/bhbUz7qoe/PkHuDY4djAw8I1Oys/2Fpc62tLp4foioMHRaUx26aiy0TTtGaS
d5O7biPRarLK42A/Eb3aiO2KvedIfSf/sOSpq+RXwgL0JU4JJTrvmaQ9k6Yxnkkh
gMQFVmEgBqQKUUeooUff51G0RpzUD2ZLwlmwE43XKkvi0xCQbxKIRl5UxoVZDlIE
THX/a7bISEhX8z/eVzOuLZblrgiw/FsLqLkjL8vQSWaPB/W2/pglPGAKPdIJZIzm
NfQy/lXZCP5PjSXr00V5CPz2IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlmOCBz
McpL1D6mc3oHLFpGLmFYMB8GA1UdIwQYMBaAFDmDfLS+yvamJskWrpYCQbYJ5rIK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xNTlBNEFEMDkz
MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3SzlxWW15UmF1bGdKQnRnbm1z
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09ZTjh0TDdLOXFZbXlSYXVsZ0pCdGdubXNnby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzNCNy8xNTlBNEFEMDkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3Szlx
WW15UmF1bGdKQnRnbm1zZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDE2QONgLJkoTI/7w3Rv6qezxyIpqgje1q9jT+ki6EgoAduQ9rE6BDE
eJDJnpAJi8P/pHVBaDexxIaGw7QaVQcPDydXnhG21ddisYQtlQTE4mVw5XJXp3g4
YJrCbfL2N03EzOHPDrTu2tfJn3kYFwsmx5UF50v0fTnuIB27bq/p/dnE8jnNLztC
jM75UmgzbWpr0SXy7BJOTWqE94YsBkyQq8pw8i+xyzarneUbdMtwGOCVmMnbF+rm
iBqPvGDYA6SWBpRHqZka4nESkIXAbnpk4U7QF39hxlUMSza/GWYARRh3CrNSUyNq
uXRICdX0U8H0KVWq4KdZzPdd8w0w1wrt
-----END CERTIFICATE-----
Generated at Sun Jan 18 04:34:59 2026 by rpki-client