This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft
File:                     rN0Hh_30YaFfcqHizj449FTtIHI.mft (raw, json)
Hash identifier:          7i3GqYBGHDzsA6/Ab0ZdKKZ7J6tp5Su50i1yz0PYzw4=
Subject key identifier:   24:EF:20:AC:BD:32:CC:72:EB:49:AC:D1:51:FF:38:62:9A:70:93:F0
Authority key identifier: AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72
Certificate issuer:       /CN=A9116D68/serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072
Certificate serial:       0F7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft
Manifest number:          1847
Signing time:             Sat 24 Jan 2026 17:14:16 +0000
Manifest this update:     Sat 24 Jan 2026 17:14:16 +0000
Manifest next update:     Sat 31 Jan 2026 17:14:16 +0000
Files and hashes:         1: rN0Hh_30YaFfcqHizj449FTtIHI.crl (hash: PYKlz0sngyqc8Y1405XzRRIVVhh9ynebmLoYffleNVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl
                          rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3966 (0xf7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116D68, serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072
        Validity
            Not Before: Jan 24 17:14:16 2026 GMT
            Not After : Jan 31 17:14:16 2026 GMT
        Subject: CN=6974fde8-3e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a5:7b:a4:bf:81:13:c9:63:68:15:9d:92:fc:
                    1a:f7:79:64:30:11:c5:ef:01:6b:d2:f0:1e:e3:8e:
                    2c:da:dd:be:c8:f9:14:42:8c:41:ce:53:fa:52:27:
                    ed:db:a0:c4:be:de:f4:5f:3a:6b:8e:4d:1b:59:e4:
                    66:32:b9:70:9e:72:fb:cb:19:03:cd:86:6b:98:dc:
                    45:b5:37:6b:fd:35:68:8d:75:5e:63:99:6d:21:99:
                    58:82:75:54:66:f2:9d:42:dc:be:d1:87:fe:c1:06:
                    f1:e2:6a:b6:3a:08:a0:8f:e3:93:c1:36:77:26:51:
                    ab:8e:4c:77:be:cd:12:3a:a1:f3:e2:6d:66:ad:49:
                    45:64:f5:5a:d2:d3:72:26:1b:04:c7:0d:6a:93:26:
                    39:f8:46:78:83:54:ee:ab:e1:69:6c:ea:a8:6c:12:
                    ed:a9:f0:1f:67:77:bc:45:a0:f9:5a:ae:d4:52:f3:
                    87:5e:57:d6:80:6d:7c:a6:2c:4f:da:7b:9d:2f:6b:
                    e8:03:fb:c7:55:81:9a:04:a8:15:ce:3a:57:1f:77:
                    d8:b1:bd:73:60:01:bd:4e:3a:72:1c:8e:6d:49:1f:
                    a2:3c:e6:fc:b5:eb:3c:6c:68:f0:12:43:85:a5:11:
                    5b:00:07:1b:61:28:9b:be:a0:e0:2c:83:8f:e5:90:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EF:20:AC:BD:32:CC:72:EB:49:AC:D1:51:FF:38:62:9A:70:93:F0
            X509v3 Authority Key Identifier:
                keyid:AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fd:ab:24:4d:41:11:84:43:48:1d:c3:5f:65:63:4d:2d:6c:
         ac:d7:0b:8d:db:0f:9e:2c:9e:ad:0b:1b:13:53:e2:53:2f:2c:
         a8:b9:51:5f:10:de:75:7c:fd:03:6a:b9:d5:2f:a5:f3:a1:9e:
         10:b5:54:ea:50:97:d5:ba:0e:88:69:17:84:46:5e:d6:c7:79:
         da:b3:aa:de:df:0e:eb:65:69:63:fc:ad:23:72:eb:72:60:f9:
         f3:42:39:ed:cc:69:ca:c2:22:99:fd:e5:66:ff:18:ac:e6:c0:
         f1:e6:97:8a:a5:75:cb:4e:9c:cc:08:36:f5:56:6d:77:3d:5c:
         f0:8f:4b:41:ab:2c:97:b4:e5:17:cc:88:75:fa:49:a1:c7:36:
         46:07:5e:d7:d8:91:09:66:61:59:d8:bd:1e:18:78:7b:2f:6c:
         98:2b:b6:6b:f3:21:f2:32:65:25:c4:9d:07:a9:73:ca:03:96:
         ed:cd:a1:5d:2c:4d:61:c5:dc:2d:6b:8b:9c:fa:f0:7f:f2:ae:
         e8:74:ef:61:8c:49:36:c2:9c:07:2b:b6:70:6f:ab:c0:b4:07:
         7c:8c:15:05:a1:53:b9:a3:56:e9:4a:43:bc:4b:c1:d5:b2:1a:
         36:21:f1:85:19:65:0f:71:1b:0d:98:c3:ee:04:6d:92:ea:79:
         e0:ea:ed:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:01:54 2026 by rpki-client