This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
File:                     o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json)
Hash identifier:          2HBXGIaml9nV0Tu1iXPrsdsH9VMjDfMkF0brwQ9kT2o=
Subject key identifier:   31:BC:4C:E2:25:10:93:82:C9:C3:CA:DA:94:10:04:89:1B:CB:D1:D7
Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65
Certificate issuer:       /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
Manifest number:          0145
Signing time:             Thu 01 Jan 2026 03:59:43 +0000
Manifest this update:     Thu 01 Jan 2026 03:59:43 +0000
Manifest next update:     Thu 08 Jan 2026 03:59:43 +0000
Files and hashes:         1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: bJHnhFF1bV7U2g2FOrA81kamXLpF6fL1s39S/Lcvcec=)
                          2: 4A9AD51270F811F0BA070F34C4F9AE02.roa (hash: GfIBo0sJeXzYPko1KN4K0PA1n9E0Kyw46Z51n+s1ljE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl
                          rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 03:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C10F, serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
        Validity
            Not Before: Jan  1 03:59:43 2026 GMT
            Not After : Jan  8 03:59:43 2026 GMT
        Subject: CN=6955f12f-3862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:98:2f:97:63:ef:0a:ab:39:5b:1c:b2:25:33:
                    1a:bc:79:9f:c2:8f:9d:97:02:fd:dc:75:03:c6:9e:
                    67:8d:e2:77:90:2d:6d:bf:bf:a3:1d:04:d9:36:3b:
                    4c:3b:f8:b9:4c:49:93:bd:d6:00:43:f0:40:be:20:
                    85:40:e7:10:8f:5c:b5:c8:c4:f0:f9:10:d7:fc:16:
                    28:25:eb:02:dd:86:98:36:5d:30:cc:ee:31:63:3c:
                    a9:8a:a6:97:5d:ce:e3:39:48:be:a5:f7:88:fe:93:
                    03:45:43:8c:c7:2e:3a:37:d7:2c:ae:4a:a5:fe:7d:
                    17:0c:ff:bb:ec:c0:4c:38:d1:6f:95:4a:9a:f3:22:
                    3f:f4:c5:34:5c:f7:f0:d2:25:e1:ca:c2:87:c5:12:
                    b3:89:c8:c9:87:d0:eb:ce:71:b1:24:5a:66:d4:1c:
                    f9:76:e9:ab:1c:46:2b:9a:aa:04:c3:74:38:51:6b:
                    57:cb:36:97:ec:d2:58:77:77:78:10:53:84:29:2e:
                    36:09:a7:43:af:9e:07:50:0b:f8:49:fb:57:3b:d9:
                    03:64:19:15:00:c6:cc:d5:34:b3:a9:32:7e:78:9a:
                    a7:b2:c9:30:10:45:66:40:b9:84:21:7f:c5:8c:83:
                    ec:e8:2a:f8:5b:75:ef:6f:3e:3b:8b:e7:e5:94:52:
                    1f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BC:4C:E2:25:10:93:82:C9:C3:CA:DA:94:10:04:89:1B:CB:D1:D7
            X509v3 Authority Key Identifier:
                keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7f:db:39:60:97:7d:8c:31:5d:f8:9b:17:23:56:65:54:0c:
         a1:7f:57:d0:b8:d4:6a:60:c2:b4:39:10:59:07:ab:e2:b1:bc:
         82:36:0f:ec:11:27:ee:46:65:c2:c9:cf:01:5d:ee:43:de:c4:
         a1:c7:a7:e4:07:7a:aa:d5:0d:d8:0a:2d:46:f5:56:8a:9d:3c:
         56:d8:09:1d:36:43:2f:c0:65:71:97:48:a6:cb:a5:d4:c9:95:
         5f:4c:85:54:9c:f5:09:63:b4:17:60:fa:56:73:bb:8f:b4:66:
         7e:10:bd:28:4e:a4:c0:05:27:61:df:e8:17:34:08:b4:7d:87:
         3e:d5:9b:7f:03:f3:55:2e:09:3e:a7:b8:bc:28:db:05:a9:8e:
         4f:06:ff:25:a2:df:8d:12:56:ff:91:b8:dd:d3:0d:c5:32:9f:
         f2:c2:35:f6:5e:01:58:6e:a9:0e:e5:e6:5d:63:86:1b:71:33:
         ad:7e:52:60:13:c1:47:85:91:23:8f:73:7b:b0:9f:ae:e8:79:
         18:02:85:a6:59:b3:59:2d:3a:32:fd:0b:be:ce:e7:02:3e:a6:
         fe:ea:e8:6c:40:08:da:8b:74:3e:ee:7b:49:d7:94:64:5e:23:
         d3:76:24:1e:83:4c:2d:ac:39:65:26:23:46:50:26:bd:3c:23:
         c1:00:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:25:32 2026 by rpki-client