This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
File:                     OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json)
Hash identifier:          onCUObqNAgvlzlRkGO7tM5LZulR7XhBIGJQXItIj4PA=
Subject key identifier:   7C:C2:4C:44:0E:3A:F7:F2:FE:87:55:E2:6B:03:BD:58:00:B8:90:87
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Certificate issuer:       /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
Manifest number:          9E
Signing time:             Wed 07 Jan 2026 05:33:13 +0000
Manifest this update:     Wed 07 Jan 2026 05:33:13 +0000
Manifest next update:     Wed 14 Jan 2026 05:33:13 +0000
Files and hashes:         1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: Z8Lwuv6pQ8Do4MkuaRVBDetKWHCRmVdZcWdRpZk+PGE=)
                          2: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=)
                          3: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: n88ojmtdqrdiflLIe0+SBb0jpSl3tXT/vbn9UpYcLtE=)
                          4: 16105334922D11F087917886C4F9AE02.roa (hash: D5KaIdGc2ZrurRFfjIe8sBVZ5qr9BavnbZqsjgwmDZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 05:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
        Validity
            Not Before: Jan  7 05:33:13 2026 GMT
            Not After : Jan 14 05:33:13 2026 GMT
        Subject: CN=695df019-394b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1a:a9:e8:ea:a9:54:41:93:c4:8c:51:e5:e3:
                    ef:52:cb:0c:92:f1:35:9c:9f:aa:d8:f9:d9:eb:9e:
                    37:c3:d4:62:87:79:ff:e9:e5:bc:6a:b9:eb:8d:09:
                    61:62:5b:f2:31:d3:2a:07:22:04:05:2b:62:78:fb:
                    0c:a8:e4:f9:ef:dc:79:13:fc:61:12:7b:f7:d0:ed:
                    f7:ea:c7:4a:94:4d:79:4c:61:6b:12:d8:73:f3:c3:
                    9e:09:81:a0:2e:4c:74:bc:90:c9:51:f3:a3:82:a0:
                    72:60:97:74:4d:db:f6:d1:b7:3e:b8:8f:6c:25:23:
                    0c:90:f7:98:0d:a3:1c:e1:83:95:81:89:82:51:1e:
                    f7:24:4f:0f:ed:d1:bf:cf:51:71:11:f6:63:01:ab:
                    e7:af:c5:4d:a8:50:87:3f:03:14:d0:d4:61:aa:4c:
                    ef:b0:5d:28:af:9b:30:61:bf:8c:88:88:ce:5a:72:
                    d3:f8:b7:3e:75:90:91:22:f0:23:98:14:99:08:5c:
                    5c:37:04:03:e3:6c:c0:a8:3c:3f:5d:36:fb:69:bc:
                    74:e4:88:1d:db:ce:af:c8:aa:4f:18:2a:8e:73:70:
                    88:6b:90:ee:03:e2:a6:a5:96:d1:7a:8b:12:8f:b7:
                    52:91:26:3b:d1:4a:f1:33:80:5a:dd:f7:54:d5:46:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C2:4C:44:0E:3A:F7:F2:FE:87:55:E2:6B:03:BD:58:00:B8:90:87
            X509v3 Authority Key Identifier:
                keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:56:12:62:9d:cd:1b:ca:ea:bb:af:2b:c3:40:cd:1b:ee:ea:
         62:f8:c1:87:cc:d0:63:5d:5b:ab:27:5d:57:33:cf:13:c9:78:
         6b:10:05:33:1c:76:df:00:bb:90:cb:85:11:ae:74:7b:e8:95:
         10:14:c8:8a:8a:0a:39:0d:bf:0e:e1:cb:f3:56:d1:8b:7d:51:
         34:93:d1:7c:2c:6b:f5:d8:25:17:ae:f9:8a:30:37:45:c5:c9:
         a8:ec:34:c7:ba:e4:09:91:67:cf:a5:14:d7:14:3d:83:fe:37:
         25:3d:12:65:78:3a:51:09:8e:61:9d:9d:c7:2b:50:c7:20:e8:
         ba:38:b8:a0:fb:17:4f:79:83:6f:f8:57:36:26:bd:12:21:b1:
         7f:f8:29:f2:ed:a0:06:3a:33:bb:cf:95:0a:77:71:71:d2:86:
         13:8e:08:c3:a2:0e:87:f3:3f:2b:ee:fa:5c:62:5b:2a:63:5d:
         28:7d:ea:27:22:05:de:8c:fd:76:f4:5e:ba:21:d4:f8:ff:71:
         28:c8:32:72:b8:7b:52:d6:f1:b7:17:43:05:cf:c1:4f:77:f2:
         89:e9:60:27:d0:8b:98:ef:31:ec:59:0e:ee:c2:ce:81:0f:91:
         ac:00:5d:6f:13:62:6e:a7:33:ae:5d:b2:94:63:2c:6c:51:34:
         cc:43:d3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 01:10:29 2026 by rpki-client