This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
File:                     kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json)
Hash identifier:          oJA5PN60OgJV2rRRinOEIolFCdc7OKZrMItyburihx0=
Subject key identifier:   3B:75:5E:CB:A9:B2:66:D6:0C:BD:E0:81:70:B1:57:0A:EC:36:EF:CC
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Certificate issuer:       /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial:       04C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
Manifest number:          04BB
Signing time:             Mon 26 Jan 2026 23:04:55 +0000
Manifest this update:     Mon 26 Jan 2026 23:04:54 +0000
Manifest next update:     Mon 02 Feb 2026 23:04:54 +0000
Files and hashes:         1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: yPI5VbEbEF9OHiQS6Z/XDYohl7a+2+UNPaiM16+8wiI=)
                          2: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: wmmIaxLCg5K0uFc5rnys8oy6i0z0O/e/VdhovEca3nw=)
                          3: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: wGvigc7YwHG59J2rGqwJ7WYeY96T+112b/PUTqhl/lE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
                          rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 23:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
        Validity
            Not Before: Jan 26 23:04:54 2026 GMT
            Not After : Feb  2 23:04:54 2026 GMT
        Subject: CN=6977f317-644b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e0:6c:64:8b:26:7c:80:41:7d:0e:43:0b:be:
                    90:47:2d:6e:9e:0c:09:ff:ac:80:e4:01:5d:59:0e:
                    b1:97:29:92:a5:53:81:ea:2b:79:2c:7e:92:65:67:
                    f3:35:07:e8:ab:82:aa:e5:51:0f:7c:e3:84:4d:f7:
                    f1:e4:08:ba:27:8e:33:42:62:d3:9e:91:83:0b:09:
                    c4:0f:24:db:46:be:d0:31:4e:2a:bb:da:1e:33:71:
                    49:5c:ed:f7:01:27:a7:23:be:b8:c4:fc:c5:7b:97:
                    1f:94:f7:7a:64:28:52:38:59:da:14:e9:68:63:81:
                    2c:c7:b8:65:91:7e:bc:97:84:a5:fa:62:40:d5:17:
                    f6:d7:1b:d0:8b:d0:2d:14:65:d6:0f:0b:16:da:c3:
                    44:ca:9c:76:28:7a:9a:cc:ef:ab:b9:78:37:c3:54:
                    1b:a0:15:91:b5:bf:c5:37:8d:0c:2b:12:e9:3c:c3:
                    31:2d:23:00:a8:dc:2d:ee:9c:15:fa:a6:06:6b:94:
                    f1:9d:b5:22:77:65:63:19:f0:55:ee:cd:15:d4:9d:
                    a1:40:ac:1c:ac:6d:16:8b:6d:10:a4:01:77:ab:ab:
                    d1:47:db:bb:d7:e7:71:5e:f2:0f:31:c7:ba:c5:05:
                    f3:87:9f:62:95:e3:84:ae:b3:4c:b6:e7:8a:64:53:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:75:5E:CB:A9:B2:66:D6:0C:BD:E0:81:70:B1:57:0A:EC:36:EF:CC
            X509v3 Authority Key Identifier:
                keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:42:19:c0:d3:d1:21:08:4a:86:57:5a:16:6c:46:97:5a:86:
         e2:3f:07:30:46:fd:db:c9:7c:de:2f:eb:a2:d8:4e:b9:28:60:
         49:2e:90:d9:b2:40:e8:96:3e:28:23:a8:83:c1:45:b8:3a:e4:
         38:72:ad:44:b0:17:9a:2f:56:54:42:a6:f8:e6:45:97:fd:9f:
         f9:2d:ae:5f:31:62:bf:97:b6:57:56:d0:d3:9c:4b:c6:85:07:
         11:fe:fb:f3:d5:a3:65:65:29:df:e8:02:ed:41:06:d5:34:98:
         09:a5:d2:ec:b9:b7:0d:03:f3:61:ef:d9:ee:00:45:fa:3e:7f:
         e4:68:3a:ce:96:fe:33:1d:6a:f2:3e:d1:05:f4:14:5d:67:58:
         aa:5c:98:8c:4b:a7:c0:81:3a:fb:a4:07:ad:5b:e6:41:52:5f:
         a5:0b:93:c1:95:1c:cc:e3:7c:01:43:f9:af:4c:73:41:9a:bb:
         1f:ec:14:d4:78:fa:ce:e2:0c:ea:df:69:aa:4a:cb:cc:13:8e:
         25:3f:dc:05:5c:c5:9f:12:c7:aa:b1:06:7d:fc:16:c2:d2:39:
         83:9a:87:1d:bb:c3:4b:16:27:a7:4d:a3:35:b3:03:7d:2b:3a:
         42:25:99:61:84:3d:c1:8c:12:e4:04:ba:57:c0:59:9a:9f:1e:
         77:ac:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 13:23:22 2026 by rpki-client