This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
File:                     oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json)
Hash identifier:          aAx2evbdKEJk3rQFMSMHKARwz+w2AW9gtgEUaFGpONU=
Subject key identifier:   00:62:7E:61:24:63:A7:0A:26:F1:EF:6A:28:82:D3:98:15:E5:BE:88
Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
Certificate issuer:       /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Certificate serial:       1431
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
Manifest number:          1426
Signing time:             Fri 30 Jan 2026 16:46:20 +0000
Manifest this update:     Fri 30 Jan 2026 16:46:20 +0000
Manifest next update:     Fri 06 Feb 2026 16:46:20 +0000
Files and hashes:         1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: JJ3nmyzwMoiW8xcqdsb1QUCSVBm0wLait5EI3sycamw=)
                          2: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: M9FXaqMN3xRXkYSG9XQqHpw6Lro8+iU9Ajk3i3+nJw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Feb 2026 16:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5169 (0x1431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
        Validity
            Not Before: Jan 30 16:46:20 2026 GMT
            Not After : Feb  6 16:46:20 2026 GMT
        Subject: CN=697ce05c-4e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:f5:c4:1d:7c:d0:46:bd:a8:21:ea:a1:d4:
                    8b:94:75:66:36:9f:c0:b8:c1:60:d0:aa:da:78:14:
                    b0:ad:62:65:40:a9:b6:4a:ff:ef:e7:99:5c:d3:f4:
                    58:d7:ab:02:0d:48:93:fa:ee:1d:1a:f6:ae:3f:57:
                    3a:03:86:0b:2b:63:61:68:70:47:31:ad:51:85:5d:
                    2d:d8:8b:49:68:3d:db:bd:3d:0f:36:bc:f1:88:25:
                    f9:bf:e4:e4:52:6f:aa:64:c0:10:37:c4:52:30:47:
                    23:b5:52:7b:d9:a9:f3:68:38:d5:75:24:ff:8e:fe:
                    43:4d:5f:ee:20:bc:73:d3:1c:ed:3d:21:0d:dc:e6:
                    26:0b:7e:eb:68:7c:06:99:60:57:38:68:fa:1c:7b:
                    74:1e:f8:1a:d1:7a:f9:fd:ba:c1:69:da:8f:fd:06:
                    5c:a5:96:c6:7b:17:29:6c:e4:be:53:a3:99:2e:1b:
                    62:52:73:ab:15:1f:15:83:80:92:7d:15:bd:6c:06:
                    8b:da:71:12:b5:bd:c5:12:cc:b1:2d:98:13:bc:e2:
                    cb:bc:4d:42:3f:ad:a4:4c:d9:21:be:31:39:6c:b1:
                    f1:83:19:b9:98:5f:af:40:93:aa:aa:96:06:c3:f7:
                    1c:e2:b3:88:67:08:7d:e7:ab:e9:f3:b3:d9:4d:62:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:62:7E:61:24:63:A7:0A:26:F1:EF:6A:28:82:D3:98:15:E5:BE:88
            X509v3 Authority Key Identifier:
                keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:ca:b4:89:c1:cd:df:71:fb:56:b8:34:0e:6f:33:28:31:5d:
         52:5b:fc:15:d4:fd:a5:2e:be:b3:74:8c:6a:69:dc:d4:c8:5a:
         a9:79:eb:2f:d4:63:97:df:dc:c7:9d:fb:44:17:7a:0a:8c:26:
         2e:c9:81:e2:62:39:35:13:28:6a:4b:3a:d6:98:88:50:ab:f8:
         5b:3e:b3:3f:5b:fc:3a:39:d4:33:8f:27:32:05:b0:15:e9:37:
         fa:59:60:cb:a9:8f:ea:b9:27:fe:d8:e6:e4:3a:b1:b8:7e:c4:
         59:7a:95:43:3b:1a:c8:47:7e:be:55:90:82:1e:33:59:f7:1f:
         a7:0f:23:7b:ad:f1:93:dc:e6:58:d5:76:fb:0d:1d:02:e1:39:
         3a:62:08:68:63:3a:c8:57:12:bf:63:4e:93:08:61:cf:9d:84:
         ef:e7:6a:04:42:3b:38:b3:b9:83:cf:56:88:3a:d4:c6:35:8b:
         66:c8:e4:28:83:99:a0:92:6a:50:35:87:98:f4:00:2c:4a:ae:
         52:ef:c7:4f:2f:8c:dd:75:59:21:c4:2a:a2:4a:d7:73:fd:3b:
         79:aa:1e:22:c3:b0:95:00:bc:45:72:de:49:be:e1:b5:5b:d9:
         1b:44:39:9f:6a:5f:1b:40:ce:85:0e:5e:27:0d:24:64:fc:b4:
         79:d5:e6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 00:29:35 2026 by rpki-client