This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File:                     o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier:          pmOxQlAQW1ZQtNJOSq23sHNQ6IVs3Fe1qyvESRFX9Bw=
Subject key identifier:   4E:68:BF:38:3D:BA:17:C6:2A:E7:1D:CE:10:CE:93:44:C7:1E:55:C9
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer:       /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number:          1A
Signing time:             Sat 17 Jan 2026 06:53:01 +0000
Manifest this update:     Sat 17 Jan 2026 06:53:00 +0000
Manifest next update:     Sat 24 Jan 2026 06:53:00 +0000
Files and hashes:         1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: E3j1ZQU0iIeueHZSLiR7bVoUEo1ezHWPiu7irJnNyXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
        Validity
            Not Before: Jan 17 06:53:00 2026 GMT
            Not After : Jan 24 06:53:00 2026 GMT
        Subject: CN=696b31cc-d55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:ff:0f:bf:64:01:13:36:62:43:c2:11:45:
                    c6:04:90:90:d1:36:1d:85:d9:67:d8:2d:e9:8f:90:
                    70:ae:05:71:69:03:ff:8b:09:6f:8e:cc:88:f0:c0:
                    2f:23:87:43:6d:bd:e0:49:2c:ae:55:b3:00:30:6b:
                    b3:37:f9:65:7c:71:d2:9a:d8:8a:fe:f0:5d:86:ba:
                    03:76:c6:b2:b9:b5:a7:9c:75:fe:6b:73:d3:47:dd:
                    d7:ce:01:f5:53:1d:f7:97:6a:ca:5c:96:0f:05:56:
                    d0:9a:75:b6:1d:19:16:ba:1b:61:58:43:4d:83:c9:
                    d1:53:ac:c1:ca:68:ef:86:34:7b:2c:ba:85:18:2d:
                    27:c3:d0:20:f4:43:bc:85:15:37:0f:48:e2:6b:a7:
                    15:18:13:a9:c2:cb:82:fb:70:8b:0e:ac:40:e4:1a:
                    a5:84:5c:4a:df:ec:b5:a3:eb:7a:74:37:85:9d:d1:
                    a2:64:c7:81:e5:ea:de:b2:57:df:5e:9a:e2:2e:ad:
                    70:f0:1c:ef:47:7e:b2:96:f5:3a:be:70:1d:fc:c7:
                    ac:5f:1d:de:17:4c:4a:7a:84:f0:54:28:10:f6:7e:
                    f5:03:c7:7c:3f:eb:59:8f:42:a9:73:5d:9a:00:a9:
                    33:67:7b:2f:4e:af:fb:25:70:df:af:6d:3c:5e:13:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:68:BF:38:3D:BA:17:C6:2A:E7:1D:CE:10:CE:93:44:C7:1E:55:C9
            X509v3 Authority Key Identifier:
                keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:dd:d9:41:65:37:54:ca:9a:ad:be:8c:51:e1:b4:3e:36:a8:
         cc:c6:13:44:0a:c0:56:54:48:45:7d:ea:74:2e:07:52:a8:70:
         32:8e:7a:d3:9d:ba:e4:ec:d7:c3:c1:aa:a2:dc:4e:46:e2:88:
         a0:34:17:1f:9a:ac:37:2d:47:ba:5c:02:f1:99:b1:37:75:35:
         ea:d7:cd:6a:78:c9:42:e2:8e:eb:e0:c1:ff:53:bf:4a:4f:29:
         1f:2a:75:c2:65:7a:aa:78:a0:66:c0:c2:da:c6:30:03:1e:57:
         30:0f:10:5a:10:f6:b0:6b:56:33:13:e8:b5:a1:71:7e:13:60:
         a0:ff:ea:ab:64:3c:85:0f:13:a2:78:d1:64:25:81:c9:07:17:
         4b:ac:c8:0d:ba:c8:f4:73:70:f6:a6:12:70:0f:43:df:97:fa:
         61:26:8f:3d:02:2c:f3:3f:c9:f0:c9:d2:47:6b:cb:b7:54:f1:
         aa:a3:78:70:0b:68:43:dc:8f:33:15:81:52:1d:df:ee:fa:be:
         58:d5:81:0d:f5:1a:5b:86:04:99:ec:66:17:f9:4b:46:0a:38:
         0b:00:f3:5b:f5:51:14:74:de:a4:50:c4:03:99:42:a8:7e:9d:
         25:21:5f:8c:6f:2a:e9:a5:ad:b9:7b:d5:fc:04:c2:10:17:56:
         e1:c4:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:26 2026 by rpki-client