This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
File:                     2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft (raw, json)
Hash identifier:          XvAS19pxDuueqo6KgwkanCqtMIgbXZ6TnnJPJ+fdvyU=
Subject key identifier:   C5:B9:0A:68:2E:74:EF:ED:A7:1E:C5:93:3F:E8:A9:EF:97:81:8D:D5
Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
Certificate issuer:       /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
Manifest number:          017A
Signing time:             Sat 17 Jan 2026 02:58:09 +0000
Manifest this update:     Sat 17 Jan 2026 02:58:09 +0000
Manifest next update:     Sat 24 Jan 2026 02:58:09 +0000
Files and hashes:         1: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl (hash: dyMtaY9cen93omVPkBzGpsWOcjW34biKuyvnbmNmSW0=)
                          2: 2E31B8FCB57211EEBB68526DC4F9AE02.roa (hash: sp0oN6M3b0vKQWiSIdTtVM/z4x+pZK5BNETB2TbgZ2E=)
                          3: 6F5F30B8B56111EE91C72951C4F9AE02.roa (hash: ipvSSCsuIB7+MwYDiVzzG4/g5ky54F8EF1XYBBpIM6E=)
                          4: 2DCC0688B57211EEBB68526DC4F9AE02.roa (hash: 3pfVChkV7zELWja+oHQv3Km6INJzdWSQS1Y4XK0gQXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
                          rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 02:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
        Validity
            Not Before: Jan 17 02:58:09 2026 GMT
            Not After : Jan 24 02:58:09 2026 GMT
        Subject: CN=696afac1-0868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:9d:9e:f4:4e:fe:e0:10:69:a1:04:37:5c:
                    c1:aa:f8:32:82:f3:1a:95:f0:26:c3:96:e0:62:b7:
                    57:fa:06:00:f4:9f:9e:c4:7b:f2:35:c0:f5:75:34:
                    28:61:e5:df:a7:59:29:fc:1c:80:ce:0d:13:6b:c4:
                    02:87:da:e5:b2:c5:0b:5d:f5:91:52:b4:9e:c6:2d:
                    0c:ac:6d:91:de:e7:6f:6b:b5:0f:14:7e:94:54:20:
                    88:ee:c9:e9:f5:da:88:d6:56:08:73:03:57:be:47:
                    5a:61:81:da:25:7f:54:17:ad:c2:ad:2f:7c:1e:6e:
                    b4:cd:6a:2d:11:0d:48:e7:dc:c2:ab:42:49:36:4f:
                    0d:74:be:ee:8d:2c:62:5e:b6:4a:e3:32:62:e0:93:
                    04:cd:99:65:68:1e:1a:57:4c:5c:55:1b:57:e5:63:
                    a4:cc:ee:be:70:2e:30:05:f7:f8:1d:d1:8a:4c:29:
                    b0:8d:a2:16:e7:e5:85:f5:6d:47:26:f0:2c:f5:5b:
                    42:69:6e:63:46:42:d6:0d:db:0b:58:91:66:d5:c7:
                    e7:0d:97:27:69:ab:15:9b:de:93:8a:4d:7a:73:3e:
                    9d:18:52:39:5f:cb:11:b1:88:56:a1:4a:ec:53:b5:
                    8f:2b:33:75:a6:9f:67:ae:81:68:e4:db:56:1a:ab:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B9:0A:68:2E:74:EF:ED:A7:1E:C5:93:3F:E8:A9:EF:97:81:8D:D5
            X509v3 Authority Key Identifier:
                keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:50:51:64:a8:a4:c3:9b:dd:5e:b9:db:de:eb:d4:5e:3c:73:
         db:42:fb:5e:14:b9:55:b8:5d:0c:f9:8c:b5:db:0f:18:eb:3b:
         b6:10:24:56:4a:1a:1d:29:ad:a6:99:3d:95:59:da:e1:11:b7:
         62:ef:a0:e9:a6:ec:48:0a:ef:c6:1e:17:79:65:fc:80:ec:ee:
         e4:ea:85:03:6c:b3:88:90:5f:42:57:a1:fd:c8:1c:df:ba:3e:
         4f:36:11:7f:a1:cc:15:9a:88:f4:ac:05:60:8a:f6:4b:67:21:
         d0:65:4a:8e:70:10:bb:42:19:28:5e:76:63:48:c6:e7:ee:c4:
         a8:fe:42:ca:41:a8:b8:93:5a:59:a7:ce:93:f0:b3:cb:4e:cd:
         f9:4a:15:51:97:33:13:a5:0e:e6:0b:83:18:69:48:2e:e9:ea:
         e4:02:69:8f:c2:09:0e:96:57:82:bf:7e:ef:2f:e8:b8:67:47:
         69:e6:ad:a4:f5:04:44:90:d8:3e:4d:de:4c:68:4e:0e:17:35:
         0f:28:45:38:2c:b4:ac:af:2f:14:be:11:3e:3b:fd:d3:7b:bd:
         b9:90:13:4a:aa:bd:9e:be:1a:37:6a:c5:8b:31:a5:69:60:2c:
         6f:19:85:89:f3:a4:c9:d0:4b:9d:bc:0b:17:e7:35:80:a1:ec:
         63:36:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:36 2026 by rpki-client