This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
File:                     O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft (raw, json)
Hash identifier:          L/rzE0mjPtfwZkGOBIqKH6m+t29TAHEhH64hruAmBsY=
Subject key identifier:   D5:5E:F0:E3:8D:B4:C9:15:92:72:E1:5D:5A:47:FA:6D:21:87:A7:83
Authority key identifier: 3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7
Certificate issuer:       /CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
Manifest number:          0166
Signing time:             Sat 17 Jan 2026 01:22:47 +0000
Manifest this update:     Sat 17 Jan 2026 01:22:46 +0000
Manifest next update:     Sat 24 Jan 2026 01:22:46 +0000
Files and hashes:         1: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl (hash: QpwF7iQf3lw4xGOm9E5JA03LQrgFr/FQ5BLchLebNQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl
                          rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 01:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB92D, serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
        Validity
            Not Before: Jan 17 01:22:46 2026 GMT
            Not After : Jan 24 01:22:46 2026 GMT
        Subject: CN=696ae467-dfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:a8:e8:32:92:b6:d5:0a:20:cf:57:0a:57:
                    03:73:ec:17:50:3d:b5:80:38:8a:71:12:8e:00:e5:
                    5f:0c:6b:33:81:83:72:4d:93:db:c7:ec:12:aa:2d:
                    18:6e:f6:3a:be:e3:be:37:c3:88:77:70:b1:b2:70:
                    58:4d:29:93:4b:34:d5:30:63:37:30:e6:22:7e:e7:
                    7b:07:fe:cb:a1:fd:d6:aa:6f:aa:99:c3:24:74:30:
                    da:0d:0b:af:61:54:b7:c8:e2:93:c2:30:63:41:43:
                    96:c4:ff:03:33:fb:b6:16:44:5b:a2:50:84:24:63:
                    c3:4e:a6:5f:b4:32:f1:02:b5:55:d7:bf:cf:c5:7c:
                    67:0d:05:28:4c:14:8d:55:87:07:3a:3c:8b:ac:34:
                    b7:94:f2:d3:e0:38:15:aa:57:aa:c7:9c:7d:7d:2b:
                    46:0a:95:08:e5:95:87:34:b7:36:14:bd:75:2a:1c:
                    e5:0c:11:da:76:46:8b:7e:d2:09:ba:28:d3:71:7c:
                    c1:60:de:45:ed:60:70:83:03:7f:a4:c4:a1:ab:83:
                    94:8f:fe:09:41:d9:24:ab:0e:64:56:10:90:9a:d0:
                    71:71:59:5f:f3:95:85:50:49:73:92:43:d1:1b:91:
                    88:3d:04:97:72:4a:03:47:5c:d7:6c:93:53:7c:d5:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:F0:E3:8D:B4:C9:15:92:72:E1:5D:5A:47:FA:6D:21:87:A7:83
            X509v3 Authority Key Identifier:
                keyid:3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3b:28:41:ce:af:2d:2a:44:8f:4c:d8:46:85:7b:dc:50:24:
         54:fa:14:14:af:5d:f1:e0:fa:dd:15:97:77:13:a7:98:aa:d2:
         c7:5d:bc:9a:60:68:09:cd:da:cc:83:6f:89:bb:54:8a:bd:70:
         7e:7b:87:35:8c:69:ef:3c:ca:96:b1:03:eb:f3:91:e1:fc:dc:
         52:e6:80:c6:5c:7b:d7:77:f6:e5:3d:b9:24:60:bf:78:c7:f9:
         69:31:07:b2:c5:e6:c5:b0:b4:6e:b5:1f:5a:ce:f0:2e:1e:c9:
         69:b0:a4:77:ac:88:79:84:8e:a3:6e:a9:b4:b1:ac:fe:3a:23:
         16:be:93:38:d1:a9:6a:1c:57:b4:4b:ba:e0:1a:8e:82:9d:b9:
         37:98:82:25:cd:72:db:d7:bf:5b:3e:04:f5:e8:06:42:77:3a:
         54:a3:5c:e0:96:e0:0a:46:fd:34:a4:5d:aa:92:6e:86:25:c9:
         78:d9:58:72:eb:91:bd:5c:95:8d:27:6a:67:df:51:45:1f:9b:
         4a:fd:6c:11:99:16:9a:ba:3a:60:72:a2:4d:d2:99:40:fe:88:
         af:d1:a3:5f:eb:99:8a:3d:ac:f6:bd:f5:a6:27:49:fd:b9:d2:
         db:32:c8:df:81:aa:df:64:4e:50:a7:d2:20:ce:7f:fe:69:1b:
         bc:f2:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:00:55 2026 by rpki-client