This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
File:                     OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json)
Hash identifier:          +6GcKD9Uj/yLsRe73sc0d7KyXDCbWyY4G9xZmxhZf9U=
Subject key identifier:   AC:18:9A:57:41:19:66:E3:87:44:42:DD:45:83:5D:CE:8B:62:6D:E6
Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41
Certificate issuer:       /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
Certificate serial:       245F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
Manifest number:          60EA
Signing time:             Fri 16 Jan 2026 14:15:16 +0000
Manifest this update:     Fri 16 Jan 2026 14:15:15 +0000
Manifest next update:     Fri 23 Jan 2026 14:15:15 +0000
Files and hashes:         1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: hXSbhmXMLUx9s07+EOFl0XYMt0JJqJd5eDbOVtCNclg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 14:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9311 (0x245f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
        Validity
            Not Before: Jan 16 14:15:15 2026 GMT
            Not After : Jan 23 14:15:15 2026 GMT
        Subject: CN=696a47f3-386c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:e9:e4:b3:16:47:1a:1d:f5:22:f4:7c:c5:
                    c8:f1:4e:7a:9a:c3:29:46:a6:ee:23:73:16:f6:3c:
                    ab:3b:0c:89:59:74:98:b7:c2:50:4f:63:1c:ad:3f:
                    3a:63:ec:be:c4:be:61:46:8f:bb:1f:cd:b8:ac:32:
                    55:4f:fc:08:8e:3b:86:b9:bd:96:f0:38:88:c2:e6:
                    4d:3b:b6:99:14:f3:78:15:5b:47:b6:c4:2e:07:c5:
                    41:9f:90:c1:6a:22:29:f5:34:9a:bc:83:8d:c5:ec:
                    9b:27:7f:71:45:ce:c0:ea:c0:ad:33:3a:05:5b:d6:
                    27:b8:3a:cf:08:22:f7:56:fa:72:ac:91:d7:52:55:
                    dd:00:80:09:7d:69:63:71:d3:53:73:85:9e:ec:4e:
                    22:25:4f:12:ba:6e:d8:5b:77:72:a7:94:4a:51:5f:
                    40:7f:43:8a:4b:8a:1f:3b:28:5b:2f:cd:61:9a:3c:
                    e9:dd:d6:6f:ba:bd:fa:21:69:cf:ca:65:07:a7:a3:
                    44:d7:68:37:01:42:c5:6f:37:47:e4:03:ec:c4:19:
                    8b:a4:4c:d5:e3:5b:d9:56:45:db:9c:91:fa:4c:93:
                    1b:90:e3:67:aa:77:3f:38:0b:cc:d3:a5:3a:a4:57:
                    9f:9d:72:9f:85:4f:f4:e1:e3:cd:1d:4f:d9:6d:d2:
                    a4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:18:9A:57:41:19:66:E3:87:44:42:DD:45:83:5D:CE:8B:62:6D:E6
            X509v3 Authority Key Identifier:
                keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:92:d9:fa:bd:86:63:5a:8f:fd:f9:61:d5:56:e3:f4:6f:6b:
         da:ae:9a:35:c5:5d:36:2d:85:ce:b3:08:8d:0d:b4:1f:32:4d:
         25:12:90:9e:de:50:8d:69:28:e8:61:95:9e:a4:19:71:ab:c8:
         80:d3:e8:87:33:98:71:47:c1:ba:59:72:10:4a:44:bb:0a:17:
         fa:e8:13:66:7d:3d:7d:fb:11:52:21:cb:16:74:da:2e:85:38:
         cb:7b:db:d6:18:46:ca:76:4d:ea:6c:32:00:47:26:7d:9e:69:
         87:a0:12:d1:73:f0:db:7c:b2:19:85:67:70:99:9c:af:0e:49:
         bd:ff:5d:a8:7e:c8:2e:cb:2e:4d:d2:7a:9f:d3:41:a6:de:27:
         0c:a5:67:8a:4c:00:b8:30:33:d9:98:6d:f9:a3:ed:7d:a0:04:
         4d:5d:69:a5:6d:73:50:e5:b2:c5:71:0d:c1:28:b9:ad:1b:0e:
         de:1f:49:fa:e2:82:8d:3e:37:36:9e:4a:24:1e:41:46:1e:68:
         81:ac:dc:c7:e3:55:73:d6:69:3b:ea:42:a1:38:bc:65:8f:a0:
         78:e7:4f:13:fa:a9:d0:ae:a0:da:bc:4b:28:ea:48:78:6f:6f:
         64:4d:90:e0:2c:41:e1:68:8b:e7:0c:d7:86:05:f6:93:1f:1d:
         73:fe:eb:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwREExMTAvBgNVBAUTKDNBODMwRDQzRjM1OTQ0RkZCMjg2MDFEMzMzMzAyMEFD
M0MzMTkyNDEwHhcNMjYwMTE2MTQxNTE1WhcNMjYwMTIzMTQxNTE1WjAYMRYwFAYD
VQQDDA02OTZhNDdmMy0zODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp13p5LMWRxod9SL0fMXI8U56msMpRqbuI3MW9jyrOwyJWXSYt8JQT2McrT86
Y+y+xL5hRo+7H824rDJVT/wIjjuGub2W8DiIwuZNO7aZFPN4FVtHtsQuB8VBn5DB
aiIp9TSavIONxeybJ39xRc7A6sCtMzoFW9YnuDrPCCL3VvpyrJHXUlXdAIAJfWlj
cdNTc4We7E4iJU8Sum7YW3dyp5RKUV9Af0OKS4ofOyhbL81hmjzp3dZvur36IWnP
ymUHp6NE12g3AULFbzdH5APsxBmLpEzV41vZVkXbnJH6TJMbkONnqnc/OAvM06U6
pFefnXKfhU/04ePNHU/ZbdKk1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwYmldB
GWbjh0RC3UWDXc6LYm3mMB8GA1UdIwQYMBaAFDqDDUPzWUT/soYB0zMwIKw8MZJB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE
NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQLXloZ0hUTXpBZ3JEd3hr
a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09vTU5RX05aUlAteWhnSFRNekFnckR3eGtrRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQ
LXloZ0hUTXpBZ3JEd3hra0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgktn6vYZjWo/9+WHVVuP0b2varpo1xV02LYXOswiNDbQfMk0lEpCe
3lCNaSjoYZWepBlxq8iA0+iHM5hxR8G6WXIQSkS7Chf66BNmfT19+xFSIcsWdNou
hTjLe9vWGEbKdk3qbDIARyZ9nmmHoBLRc/DbfLIZhWdwmZyvDkm9/12ofsguyy5N
0nqf00Gm3icMpWeKTAC4MDPZmG35o+19oARNXWmlbXNQ5bLFcQ3BKLmtGw7eH0n6
4oKNPjc2nkokHkFGHmiBrNzH41Vz1mk76kKhOLxlj6B4508T+qnQrqDavEso6kh4
b29kTZDgLEHhaIvnDNeGBfaTHx1z/us1
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:30 2026 by rpki-client