This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
File:                     Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json)
Hash identifier:          Ngn6Fh+E4Y1/tyQcZV5mannA/1+pnk85y8ee1tgGgWY=
Subject key identifier:   2F:0B:2E:18:CC:A8:C4:93:12:6C:CC:0B:8B:96:2A:C0:5D:02:88:25
Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Certificate issuer:       /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
Manifest number:          0184
Signing time:             Sun 25 Jan 2026 03:04:25 +0000
Manifest this update:     Sun 25 Jan 2026 03:04:25 +0000
Manifest next update:     Sun 01 Feb 2026 03:04:25 +0000
Files and hashes:         1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: eM636cE5fHha5yUx5lM48QPAGwT1Y7N3Zuk3j5ucNUU=)
                          2: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: j/V4XNGNwoAwBD2fM6BAWHsPlbD9xKq2cTFKjMRTC08=)
                          3: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: z1tB95lFpcoG7gufS1WVI98iQupCm/LxCrECBfeoY8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
                          rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
        Validity
            Not Before: Jan 25 03:04:25 2026 GMT
            Not After : Feb  1 03:04:25 2026 GMT
        Subject: CN=69758839-7485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f0:8b:08:d9:b3:02:93:ce:94:b4:a6:91:3c:
                    57:3a:a4:67:45:cb:3c:16:44:4f:1f:a0:90:fd:7b:
                    1b:e5:17:15:8d:b2:74:c2:b8:66:dc:d8:64:03:eb:
                    11:af:a8:52:bb:06:22:a6:74:0f:9e:70:56:fd:ac:
                    b5:6b:3a:04:b1:a5:3a:24:6c:ae:4d:ae:cd:f1:b1:
                    f9:15:ae:4b:e1:2d:49:ba:0a:9f:1e:20:ab:42:50:
                    f9:8c:bb:6f:84:f2:65:da:2e:e5:4d:f3:7c:f1:7e:
                    8c:9e:19:b7:70:1f:70:29:0d:5f:73:3d:9e:44:f2:
                    76:cd:a3:f2:52:a0:2e:70:43:55:7c:c8:05:fc:a8:
                    6b:ad:44:46:25:a5:47:3a:a5:c8:d0:88:53:46:73:
                    57:11:83:b8:33:6a:f7:c0:41:d2:4a:a8:34:27:cf:
                    a3:b9:df:18:6c:57:40:7b:1a:ee:99:b8:ad:67:85:
                    c4:db:72:ce:be:a0:cb:b5:02:e9:ed:74:16:6e:44:
                    76:7d:25:5e:5d:2e:42:91:a8:ea:f2:9f:86:11:b6:
                    c6:50:a6:fe:07:1a:4e:29:f0:09:80:f1:5a:a8:44:
                    9d:9a:51:03:bd:48:60:63:ca:84:34:5d:aa:fa:21:
                    9c:e0:95:e7:92:48:b0:eb:62:2d:34:0b:41:3a:d4:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0B:2E:18:CC:A8:C4:93:12:6C:CC:0B:8B:96:2A:C0:5D:02:88:25
            X509v3 Authority Key Identifier:
                keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5f:bb:64:85:ff:72:db:8f:5f:d4:51:87:c5:7e:e4:65:ab:
         a2:82:75:12:8a:e9:15:2a:18:3f:da:a5:2f:0b:24:de:fb:d0:
         79:09:64:66:3d:38:85:60:0c:e1:b5:c3:1f:5c:d7:ad:53:b7:
         e6:e3:7d:57:db:24:c5:b2:ac:34:d7:e0:0a:28:c4:6a:d3:a9:
         6e:c5:22:08:44:f8:0e:e8:f9:52:7e:6c:a7:36:45:41:5d:43:
         e5:a6:13:c8:13:fb:65:14:0c:75:be:0d:3d:80:30:3e:b5:fe:
         5d:bc:19:e8:ad:5f:e7:d6:7b:8c:db:60:2c:15:55:ba:de:c7:
         3a:27:a1:ec:e5:c4:bb:83:09:c3:3e:e3:a2:7b:40:f0:d4:54:
         8a:0b:78:b3:a5:b0:23:80:f7:d3:ba:b8:1e:c5:81:56:bf:6d:
         0e:09:f8:26:e1:8b:c3:19:cb:e6:fc:90:c7:7a:51:67:bb:c6:
         1e:ec:0f:33:79:73:87:6b:04:a3:33:be:e3:4e:40:f1:c9:ee:
         fb:7a:0c:06:1c:2e:64:5a:19:42:c8:57:ba:60:e8:1d:15:78:
         81:e6:3a:cb:62:9f:85:53:8f:d0:fc:0b:6e:d1:3e:00:6c:a7:
         c2:7d:3d:7d:de:69:14:ee:8f:48:1b:4b:d1:dc:8f:ca:11:8e:
         a1:2b:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:24:03 2026 by rpki-client