This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File:                     OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier:          4DNiONCXLDt5hwiq9Hw9Qy1sdNHlY2CtzduwO+ds8Ns=
Subject key identifier:   2F:D4:52:DA:97:A1:F8:61:07:69:65:11:0A:F4:A1:33:F9:64:28:EE
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer:       /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial:       0845
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number:          0829
Signing time:             Sun 08 Feb 2026 20:38:29 +0000
Manifest this update:     Sun 08 Feb 2026 20:38:28 +0000
Manifest next update:     Sun 15 Feb 2026 20:38:28 +0000
Files and hashes:         1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: szzVI1kiKbtMbT6cppO03ls4IyZc1n9Xb+Sbg5uRFVY=)
                          2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: eZNeXm4nQEQxR4xjyKWddfWZzO4YMno8B7hOjNNuzA4=)
                          3: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: 4m4gcDBDEGLhIqThmo+gOWnFoA1rBH2fxZa2WsNnbcQ=)
                          4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: M6qmfQhNqaFBZk6GUbAn8MkOvEVJ93hzUV5R5uLKCj4=)
                          5: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: O2jis8H/LjOcx4S7CbvRkc2kU/tbO3dAf3gniLEQHkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
                          rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 20:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117 (0x845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
        Validity
            Not Before: Feb  8 20:38:28 2026 GMT
            Not After : Feb 15 20:38:28 2026 GMT
        Subject: CN=6988f444-3cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:3e:5c:41:68:e2:ca:49:91:6b:a7:d0:df:
                    ac:e3:1e:ca:86:a5:96:aa:09:a6:9b:02:cf:33:12:
                    af:b2:e2:2a:1e:1c:96:64:d5:db:a8:b6:1f:f4:81:
                    e8:a8:7a:ea:4c:c5:36:cd:fb:49:03:b5:8b:33:51:
                    ea:c1:d3:18:ff:08:22:2f:c7:0e:cf:cc:5c:9c:d5:
                    74:02:24:5c:9a:1b:d5:b8:cc:5e:8a:f4:bd:70:86:
                    e9:dd:1e:19:13:b6:e9:bd:42:69:ca:b9:68:92:ff:
                    2f:04:d6:c7:20:9f:64:c4:2e:76:3b:6f:a7:8d:6a:
                    c9:a9:6f:61:b6:5d:90:0d:e0:b0:be:93:23:82:2b:
                    f6:ae:67:95:78:1c:f6:1e:ed:65:22:1a:fc:cc:66:
                    2d:b3:bd:4a:53:d8:dc:29:82:5d:4e:ca:4e:56:65:
                    cc:09:84:b0:44:d1:31:77:14:79:54:18:7d:43:c3:
                    d0:91:fd:33:d9:60:09:e3:23:84:e7:22:80:12:ce:
                    50:5d:45:00:c0:c6:e4:ae:c5:37:64:73:e1:61:0d:
                    18:25:c8:71:a1:72:4a:1e:4e:a9:4e:ad:ce:ab:49:
                    b5:ed:3b:ca:24:5a:55:6f:61:f3:60:43:c0:de:e4:
                    6b:51:ea:a0:71:06:97:89:9a:fb:82:c1:07:64:b1:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D4:52:DA:97:A1:F8:61:07:69:65:11:0A:F4:A1:33:F9:64:28:EE
            X509v3 Authority Key Identifier:
                keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5a:c4:17:93:f7:14:18:14:12:c8:02:30:2c:4a:bf:c9:e8:
         e3:f2:9f:e1:4f:a1:1c:51:f4:77:4d:e2:d6:fe:d2:e9:b5:b5:
         d6:a1:6a:23:6a:04:39:e3:b4:ac:81:d0:64:50:25:55:7a:f4:
         96:f7:cd:5b:91:27:7d:14:d3:90:6e:8c:c3:a2:a6:2c:78:1c:
         81:6e:6d:73:6a:f4:57:d7:a9:46:b8:55:bb:26:44:a0:36:17:
         2f:ad:b4:26:b6:77:44:e5:32:19:42:0e:6f:53:5b:f4:f7:1b:
         46:46:d1:7a:5e:b1:68:25:94:aa:1c:fd:5b:6c:9f:f5:0b:e1:
         df:91:fc:0a:bb:ce:3f:9b:c7:1e:bd:18:08:76:77:a2:25:b6:
         05:9e:d0:5a:8b:ab:3c:09:5e:9c:f8:37:5b:4c:bb:21:23:67:
         ef:6a:60:78:00:ff:bb:21:33:b5:41:3c:7d:31:30:2f:63:8c:
         e1:bf:86:ae:ef:ae:52:80:3e:e8:c1:16:78:71:40:2e:bd:a7:
         e5:dc:1f:a0:84:ad:6e:a3:e3:3a:83:f2:5e:d7:bd:b4:24:e2:
         54:69:63:c0:b4:b3:61:85:7a:72:43:af:59:31:37:7e:05:4b:
         b9:d0:d9:4d:1a:57:77:0e:63:fe:f3:8c:68:2c:18:26:9e:4a:
         15:13:a4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:16:30 2026 by rpki-client