This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File:                     aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier:          aooDt5oqe35BGO+1iKBuYzXqaM5zcjMAWUOeq3tx7ew=
Subject key identifier:   A4:E7:E0:16:BA:37:72:ED:E4:C9:F0:79:61:20:BB:D7:6F:D1:FA:A8
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer:       /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number:          0112
Signing time:             Fri 23 Jan 2026 04:06:29 +0000
Manifest this update:     Fri 23 Jan 2026 04:06:29 +0000
Manifest next update:     Fri 30 Jan 2026 04:06:29 +0000
Files and hashes:         1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: lLnkPdlUrZOt0s3OFhCElw4KVsL7V96Oh8sGnVpVg7g=)
                          2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: 4wFdAJqxj8YswLOV/tdLrHAF7d4VnFbbezC7qK8vV6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
                          rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
        Validity
            Not Before: Jan 23 04:06:29 2026 GMT
            Not After : Jan 30 04:06:29 2026 GMT
        Subject: CN=6972f3c5-be3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:47:d5:15:1b:bb:92:8d:10:81:b1:14:53:
                    73:69:aa:47:23:de:4d:d5:9f:8c:30:9c:09:c5:4c:
                    9e:5b:31:31:29:6e:26:1f:f6:d4:61:b0:31:3e:c1:
                    e8:3d:90:20:b4:e0:56:be:46:71:b2:a2:83:c8:e1:
                    d0:60:07:05:da:37:34:83:17:a4:14:c6:a9:59:99:
                    e7:e8:5b:dc:76:0c:fc:5f:63:6c:8f:ea:5a:2d:8b:
                    ce:ca:7b:0a:ac:cb:d2:31:90:47:16:7b:28:c9:1d:
                    8a:9a:6b:ab:f4:c1:a7:26:b9:ab:53:5e:84:64:01:
                    f2:6d:88:23:d3:c1:53:14:27:61:91:c1:ab:70:73:
                    4b:e1:36:0e:c9:cd:41:1e:aa:50:a7:b7:28:7c:e7:
                    5f:7c:b8:44:c1:f6:9d:a2:3e:8a:2f:27:ad:29:cb:
                    c4:cd:0b:10:8e:26:73:73:72:db:d8:ae:71:9f:b0:
                    fe:7b:5d:53:3d:8d:aa:08:37:69:82:99:8a:b3:cf:
                    c0:aa:de:2a:ea:2f:c3:c6:47:4d:46:fc:b8:8b:b2:
                    ea:0a:7f:eb:d6:7b:91:4b:1c:55:38:1c:7c:80:0e:
                    32:b9:0e:bf:29:ee:13:e2:55:a7:35:ea:de:17:44:
                    c5:14:e6:c3:9b:82:e6:da:b6:f2:23:66:95:89:2b:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E7:E0:16:BA:37:72:ED:E4:C9:F0:79:61:20:BB:D7:6F:D1:FA:A8
            X509v3 Authority Key Identifier:
                keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e8:a8:48:c9:97:1a:57:aa:18:d3:de:25:b5:4f:d6:45:78:
         ed:0b:0a:03:6a:0d:a9:f1:a2:49:05:5f:49:5e:e9:57:b1:fc:
         90:f0:8e:d6:14:ed:06:2f:3b:3b:d0:cc:3e:f9:20:de:ac:9e:
         a3:45:f0:ef:8c:33:23:a3:a1:92:d1:4f:c1:d1:1a:92:3d:37:
         c3:03:11:b7:ec:a5:89:1c:5b:35:72:64:7a:c4:09:8a:90:f7:
         e1:ac:a9:de:0a:fc:79:41:9e:36:61:a3:51:35:0c:cd:91:41:
         a1:05:83:38:bf:a9:ca:37:ab:d9:7a:d8:c0:6e:75:47:82:d0:
         59:ca:93:ce:c7:e1:47:a3:3c:92:ad:37:54:70:de:f4:2e:8f:
         7c:5a:7d:6a:b4:b4:81:18:9e:2f:3e:96:5d:f6:ad:d7:87:d8:
         c1:76:26:c2:f9:99:a3:d1:cf:cd:8f:d2:5e:93:79:f7:aa:7c:
         33:b0:19:53:03:a9:47:d0:4e:2f:2e:47:a0:2e:2e:5b:16:33:
         93:f4:c9:1a:a7:af:13:7f:0a:0c:1c:28:70:71:1b:68:4f:cb:
         8a:49:28:0c:71:52:b6:3e:b9:74:13:92:e7:11:00:c3:68:67:
         d2:b5:fa:d5:fa:39:6b:c8:74:4c:12:5d:21:97:b7:c5:0e:3c:
         59:ce:36:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:12 2026 by rpki-client