This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
File:                     OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json)
Hash identifier:          9PAXH85uy1fedCOTWuVQCSVbMTDV2jdqRIX/sWy2iE0=
Subject key identifier:   56:74:17:86:82:E0:94:21:1F:F4:80:A4:70:AF:1F:F0:B8:80:81:88
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Certificate issuer:       /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial:       1F0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
Manifest number:          1F03
Signing time:             Fri 02 Jan 2026 15:51:54 +0000
Manifest this update:     Fri 02 Jan 2026 15:51:54 +0000
Manifest next update:     Fri 09 Jan 2026 15:51:54 +0000
Files and hashes:         1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: DKONztrCMpSiw9kfUXmexNfLZ8Fv7W5i+MDGIRu7+vI=)
                          2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: W0ZWmGkhW06fRZVPw8jscLCIBobXeY3y+SwBDvJ1Z0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
                          rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Jan 2026 15:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7951 (0x1f0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1
        Validity
            Not Before: Jan  2 15:51:54 2026 GMT
            Not After : Jan  9 15:51:54 2026 GMT
        Subject: CN=6957e99a-4804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:b0:13:06:a0:47:96:43:05:e8:4e:86:c5:
                    98:4e:78:92:22:c2:1f:e4:43:de:ef:56:fa:63:f2:
                    bc:12:e7:4f:8c:59:32:6b:23:d4:2c:db:72:d9:ca:
                    b0:1b:3a:f2:60:bc:99:b9:2f:e6:62:94:94:6a:d5:
                    4c:00:cb:9f:12:71:43:48:3a:24:8b:7d:90:9a:96:
                    15:8e:ad:71:07:3a:53:a1:f5:a7:2e:53:4a:2e:aa:
                    fc:a3:dd:6d:01:ce:87:91:29:aa:2b:9d:3c:39:71:
                    69:b6:c0:55:51:ae:e2:ab:76:49:b4:3a:fb:1a:bc:
                    dc:82:94:72:13:f4:8e:6d:8a:4b:e4:35:db:26:dc:
                    88:89:15:83:69:ab:99:10:90:62:0b:03:35:9a:32:
                    3a:d4:0b:99:fc:94:68:ae:41:97:1d:91:d7:e9:79:
                    29:15:70:16:0e:3d:c3:1a:51:7e:8a:8c:77:37:74:
                    7f:e5:5f:dd:80:93:76:83:1b:1f:db:04:4e:3e:c9:
                    22:4c:0a:8d:43:b0:b9:a8:7c:83:9b:6e:3d:44:5d:
                    56:7d:b3:73:b0:73:87:8e:04:db:9b:f0:8f:b8:56:
                    45:ee:97:25:76:51:e0:60:a0:af:35:7f:8b:6a:e3:
                    d3:46:f5:aa:27:c7:ad:99:df:d2:9a:16:ae:b1:7c:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:74:17:86:82:E0:94:21:1F:F4:80:A4:70:AF:1F:F0:B8:80:81:88
            X509v3 Authority Key Identifier:
                keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:bd:fe:3e:ec:8c:11:14:86:b6:ba:a6:80:ae:9e:61:2e:de:
         a0:7a:71:b3:81:90:77:ae:7b:5b:8b:51:0c:ed:fd:5f:ab:00:
         17:01:95:40:31:72:34:58:15:17:6d:e9:04:1a:5a:05:60:72:
         af:d9:4c:4b:b8:0f:f0:60:c0:33:b9:2b:ec:e6:d2:50:be:4a:
         ab:de:62:d7:4f:07:6b:6b:2c:9c:61:17:bc:85:9d:dc:cf:db:
         3f:7e:ef:bd:02:5d:b5:78:27:e1:a5:60:8d:75:2a:b0:5b:6a:
         25:96:b5:b0:76:cd:23:5b:52:78:8d:bd:f7:ec:7d:14:30:f2:
         69:e3:cb:8f:18:22:8d:41:43:d0:27:ab:e5:4e:1e:a0:31:3c:
         af:dd:9a:e8:bc:d5:25:0e:27:1c:80:f5:ef:c9:9a:ee:fe:ea:
         d8:46:82:e0:ce:ee:fe:a5:58:ff:e0:2d:0c:45:00:3c:74:bd:
         e2:13:c1:e7:c4:df:96:82:b4:49:b9:be:0b:05:ff:15:43:fe:
         49:54:93:e6:0a:5f:2b:25:37:9d:f8:69:c5:6b:13:22:14:bb:
         51:9b:9a:5a:a8:3e:cb:a7:77:1f:ff:d2:3c:aa:d9:77:43:61:
         54:43:d7:ae:ad:f9:3f:44:72:27:72:ed:f5:2a:0d:68:3e:98:
         ab:11:2a:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBDN0MxMTAvBgNVBAUTKDM5RDFENTk1NTQxODkxMzUzMDk0NTgzNjE4RDZDQzA3
OUM4MzBDRTEwHhcNMjYwMTAyMTU1MTU0WhcNMjYwMTA5MTU1MTU0WjAYMRYwFAYD
VQQDDA02OTU3ZTk5YS00ODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuEywEwagR5ZDBehOhsWYTniSIsIf5EPe71b6Y/K8EudPjFkyayPULNty2cqw
GzryYLyZuS/mYpSUatVMAMufEnFDSDoki32QmpYVjq1xBzpTofWnLlNKLqr8o91t
Ac6HkSmqK508OXFptsBVUa7iq3ZJtDr7GrzcgpRyE/SObYpL5DXbJtyIiRWDaauZ
EJBiCwM1mjI61AuZ/JRorkGXHZHX6XkpFXAWDj3DGlF+iox3N3R/5V/dgJN2gxsf
2wROPskiTAqNQ7C5qHyDm249RF1WfbNzsHOHjgTbm/CPuFZF7pcldlHgYKCvNX+L
auPTRvWqJ8etmd/SmhausXzenwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZ0F4aC
4JQhH/SApHCvH/C4gIGIMB8GA1UdIwQYMBaAFDnR1ZVUGJE1MJRYNhjWzAecgwzh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM3Qy8yOUY3QTA0MDZF
RjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtUVXdsRmcyR05iTUI1eURE
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09kSFZsVlFZa1RVd2xGZzJHTmJNQjV5RERPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEM3Qy8yOUY3QTA0MDZFRjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtU
VXdsRmcyR05iTUI1eURET0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1vf4+7IwRFIa2uqaArp5hLt6genGzgZB3rntbi1EM7f1fqwAXAZVA
MXI0WBUXbekEGloFYHKv2UxLuA/wYMAzuSvs5tJQvkqr3mLXTwdrayycYRe8hZ3c
z9s/fu+9Al21eCfhpWCNdSqwW2ollrWwds0jW1J4jb337H0UMPJp48uPGCKNQUPQ
J6vlTh6gMTyv3ZrovNUlDiccgPXvyZru/urYRoLgzu7+pVj/4C0MRQA8dL3iE8Hn
xN+WgrRJub4LBf8VQ/5JVJPmCl8rJTed+GnFaxMiFLtRm5paqD7Lp3cf/9I8qtl3
Q2FUQ9eurfk/RHIncu31Kg1oPpirESqv
-----END CERTIFICATE-----
Generated at Sat Jan 3 02:20:23 2026 by rpki-client