This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
File:                     1O0zil4gh9gu9ML2RZm0ERJy5eA.mft (raw, json)
Hash identifier:          5eqhzI7+CEfnRT+XfwzyJgjvMKsD4gDc9f4Zbs/vq04=
Subject key identifier:   E9:2F:26:4F:03:D5:2D:1F:64:27:F7:EE:4C:D7:7C:35:B8:8D:D2:2D
Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0
Certificate issuer:       /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0
Certificate serial:       0794
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
Manifest number:          078B
Signing time:             Sat 10 Jan 2026 20:53:23 +0000
Manifest this update:     Sat 10 Jan 2026 20:53:22 +0000
Manifest next update:     Sat 17 Jan 2026 20:53:22 +0000
Files and hashes:         1: 1O0zil4gh9gu9ML2RZm0ERJy5eA.crl (hash: 7cX5CzQe1R4A6JSLhjed6xfe+DoMwRcUpyTxB1FS+oE=)
                          2: FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (hash: gBZ45Ahcw6RfwL3mlFFuHRRbvWj8T4TaJokdj0B0Q2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl
                          rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 20:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ECA4, serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0
        Validity
            Not Before: Jan 10 20:53:22 2026 GMT
            Not After : Jan 17 20:53:22 2026 GMT
        Subject: CN=6962bc43-1296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d4:b3:0d:1b:97:5b:3a:54:31:15:4d:5d:60:
                    6c:83:ea:a2:66:ad:61:6d:fa:e0:2b:ef:11:0e:14:
                    0f:2c:01:4c:44:12:af:23:bc:ea:14:0a:f4:a8:20:
                    28:a7:c3:b1:49:93:8e:f7:76:87:97:9c:81:58:9f:
                    77:c3:34:76:fd:30:c9:ff:0f:aa:68:e7:d5:1c:4c:
                    7c:07:5b:0d:01:4f:d6:60:78:25:30:46:0f:c2:d1:
                    50:0f:77:20:ef:9e:03:1d:3b:cc:e3:f0:b9:b6:e3:
                    ca:8f:88:5e:8a:87:ce:a7:41:23:aa:dc:94:00:11:
                    f7:cd:7e:13:56:dd:fc:68:4c:9e:ea:80:c7:05:1d:
                    ff:23:17:da:cf:fd:38:d6:e9:ef:a4:b9:f3:55:9c:
                    77:de:00:ea:0a:db:29:8b:7f:92:dc:ad:f6:cf:85:
                    cb:c8:39:85:fc:51:ee:69:2a:4c:89:ba:af:58:81:
                    de:68:98:ba:58:29:73:31:6a:a2:62:57:40:44:f5:
                    cd:9a:85:06:41:6b:bf:45:bb:3e:e5:8d:80:d6:07:
                    fc:af:18:56:e9:24:23:b6:e0:63:38:26:31:9c:36:
                    b8:c8:b0:db:cf:03:1a:9b:56:3a:b5:2b:e3:d0:10:
                    a3:89:0a:68:55:fd:9b:e0:b7:af:8f:1b:68:d3:29:
                    47:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:26:4F:03:D5:2D:1F:64:27:F7:EE:4C:D7:7C:35:B8:8D:D2:2D
            X509v3 Authority Key Identifier:
                keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:99:c1:ed:70:4a:82:af:dd:ad:4f:65:dc:b6:8b:99:37:4a:
         fa:a4:f1:c6:df:aa:c2:26:0a:4b:11:96:0c:7a:c4:eb:8b:b9:
         7f:55:57:98:3b:42:03:93:f9:30:ef:56:62:7f:0d:ea:0b:4e:
         a5:38:68:69:22:27:13:e7:9c:8b:60:2f:39:91:ab:16:14:76:
         51:db:a6:9d:23:ad:5f:64:7b:e2:b9:ed:7e:86:50:4a:47:1e:
         ee:b5:3f:31:14:1d:95:0b:6e:a2:71:59:68:44:16:61:26:05:
         86:e5:57:cf:27:44:88:36:b4:6f:d4:81:a5:b3:6b:c8:b4:66:
         57:4e:47:cb:99:48:62:cd:0e:8f:92:6f:77:f1:96:14:48:2b:
         a7:75:e6:3f:5a:22:d6:29:46:5f:7d:f0:66:66:9e:f6:7b:67:
         75:2d:e1:62:72:bf:35:fd:4c:68:2a:cc:c2:1d:66:8b:26:a4:
         d7:86:5f:eb:98:ff:1e:2f:76:19:3f:cc:64:2b:cc:dc:0e:da:
         ad:e0:7d:4b:24:90:4d:c1:cf:7e:ee:8b:1a:b3:92:b7:c0:34:
         04:fa:7d:42:e2:90:65:7c:bd:99:fb:98:3a:08:a8:5c:cd:83:
         5c:f6:78:73:a0:a2:dc:25:c2:4f:52:c4:d4:4d:e9:1f:64:5b:
         bf:37:a0:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVDQTQxMTAvBgNVBAUTKEQ0RUQzMzhBNUUyMDg3RDgyRUY0QzJGNjQ1OTlCNDEx
MTI3MkU1RTAwHhcNMjYwMTEwMjA1MzIyWhcNMjYwMTE3MjA1MzIyWjAYMRYwFAYD
VQQDDA02OTYyYmM0My0xMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz9SzDRuXWzpUMRVNXWBsg+qiZq1hbfrgK+8RDhQPLAFMRBKvI7zqFAr0qCAo
p8OxSZOO93aHl5yBWJ93wzR2/TDJ/w+qaOfVHEx8B1sNAU/WYHglMEYPwtFQD3cg
754DHTvM4/C5tuPKj4heiofOp0EjqtyUABH3zX4TVt38aEye6oDHBR3/Ixfaz/04
1unvpLnzVZx33gDqCtspi3+S3K32z4XLyDmF/FHuaSpMibqvWIHeaJi6WClzMWqi
YldARPXNmoUGQWu/Rbs+5Y2A1gf8rxhW6SQjtuBjOCYxnDa4yLDbzwMam1Y6tSvj
0BCjiQpoVf2b4Levjxto0ylHjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkvJk8D
1S0fZCf37kzXfDW4jdItMB8GA1UdIwQYMBaAFNTtM4peIIfYLvTC9kWZtBEScuXg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNBNC83QUU5RkVENjNB
N0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5Z3U5TUwyUlptMEVSSnk1
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFPMHppbDRnaDlndTlNTDJSWm0wRVJKeTVlQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUNBNC83QUU5RkVENjNBN0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5
Z3U5TUwyUlptMEVSSnk1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcmcHtcEqCr92tT2XctouZN0r6pPHG36rCJgpLEZYMesTri7l/VVeY
O0IDk/kw71Zifw3qC06lOGhpIicT55yLYC85kasWFHZR26adI61fZHviue1+hlBK
Rx7utT8xFB2VC26icVloRBZhJgWG5VfPJ0SINrRv1IGls2vItGZXTkfLmUhizQ6P
km938ZYUSCundeY/WiLWKUZfffBmZp72e2d1LeFicr81/UxoKszCHWaLJqTXhl/r
mP8eL3YZP8xkK8zcDtqt4H1LJJBNwc9+7osas5K3wDQE+n1C4pBlfL2Z+5g6CKhc
zYNc9nhzoKLcJcJPUsTUTekfZFu/N6DP
-----END CERTIFICATE-----
Generated at Mon Jan 12 15:34:33 2026 by rpki-client