This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft
File:                     hlMymlHbxnnxvxfXkdg-x2ib564.mft (raw, json)
Hash identifier:          uxq6IWmqQs7h1L+ArjAgxEWN71b1o31Inuri10cITxE=
Subject key identifier:   42:B2:35:E7:FD:5A:95:94:A1:C8:47:0A:DF:78:A6:E5:FD:F6:6E:A5
Authority key identifier: 86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE
Certificate issuer:       /CN=A91177D4/serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE
Certificate serial:       08AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft
Manifest number:          08A4
Signing time:             Sat 24 Jan 2026 19:54:24 +0000
Manifest this update:     Sat 24 Jan 2026 19:54:24 +0000
Manifest next update:     Sat 31 Jan 2026 19:54:24 +0000
Files and hashes:         1: hlMymlHbxnnxvxfXkdg-x2ib564.crl (hash: /6c/AsODs7fmU+h7SwU2uH9QpAN93vOQdPiV/3a81Cc=)
                          2: 2611C806D1AA11EA82C4313FC4F9AE02.roa (hash: 8ta9HVc8kWnLyV4rQM+6TAEQnoWOLIl1eGvxCBdphDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl
                          rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2219 (0x8ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91177D4, serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE
        Validity
            Not Before: Jan 24 19:54:24 2026 GMT
            Not After : Jan 31 19:54:24 2026 GMT
        Subject: CN=69752370-f2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:aa:d1:f3:3a:e5:79:51:c1:ff:75:fa:58:
                    9a:ad:a2:54:89:27:94:30:3a:98:83:bc:62:0f:6a:
                    51:88:48:7e:48:a7:e1:7e:94:b8:90:54:8f:f0:a6:
                    5c:24:7f:28:50:ed:f2:a7:37:fd:e4:cb:a7:43:72:
                    2f:d5:be:38:58:a4:72:17:6f:6f:c3:13:9c:f3:48:
                    b5:6d:3d:64:85:e8:ff:1c:f2:4d:24:ed:6f:a1:38:
                    f6:2d:9d:b2:0b:39:c1:9f:8b:83:f2:d4:17:d5:45:
                    e4:af:ae:13:67:cd:d3:55:64:31:ec:a1:f4:75:a1:
                    90:76:71:1b:97:5b:b0:cd:db:31:48:a2:95:a7:7a:
                    dd:a4:de:d3:41:30:db:57:11:d4:f9:a1:bc:e4:cf:
                    c5:a2:41:7e:ee:1a:91:20:04:08:c7:bf:bd:ec:fb:
                    06:63:24:c9:ae:1b:b9:cb:32:2e:07:94:93:40:68:
                    ea:86:52:7c:28:a6:4e:5a:95:47:7a:9f:5d:e3:4e:
                    ee:ff:b7:78:1a:3e:1c:3d:09:ff:6e:13:c0:ca:32:
                    b1:ec:bd:17:e4:9c:83:9a:9e:a6:0c:17:5a:fb:89:
                    f0:2f:21:ca:40:77:3b:5d:24:a1:14:4b:f9:56:d8:
                    cd:a6:7c:05:b3:59:15:56:83:b1:c1:5c:52:90:2c:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B2:35:E7:FD:5A:95:94:A1:C8:47:0A:DF:78:A6:E5:FD:F6:6E:A5
            X509v3 Authority Key Identifier:
                keyid:86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4e:5b:56:f5:b7:c0:9e:ce:04:46:7b:fb:19:ed:2d:5b:4e:
         c5:48:3a:79:8f:8e:ce:c4:9b:a8:6b:f6:02:ff:75:bc:a8:20:
         ab:40:d1:ef:4c:af:76:89:e3:a2:4d:ee:d2:63:14:c8:ed:4e:
         e7:49:8d:46:7d:85:a0:a2:bb:be:e7:34:f5:1a:02:e6:7a:78:
         1b:28:69:b0:9b:6c:be:84:59:ef:5e:36:94:08:00:c2:67:9e:
         66:6e:92:8a:60:be:1b:4b:0d:9a:59:ac:5f:5b:b6:90:5a:70:
         c9:9f:df:73:2a:1b:fb:18:7d:30:74:57:b3:0e:74:ea:c9:11:
         83:0b:01:c0:fb:b0:78:cd:5a:c1:61:5a:48:e0:8f:fc:83:e1:
         df:90:dd:ec:97:5f:43:1f:65:da:83:23:f5:b1:d3:2b:c7:88:
         a5:20:5e:f7:5e:63:b4:ce:58:4b:b5:95:79:df:ae:d5:aa:b0:
         b0:4c:ec:aa:78:32:20:96:d1:da:30:de:02:a8:af:a2:18:e0:
         c6:15:52:74:00:57:0d:f7:cb:bf:ba:d7:c4:b2:a6:49:38:dd:
         a8:cc:93:df:99:9d:80:b3:4f:c4:e8:0e:ed:bf:d8:4a:50:f0:
         3e:98:43:54:96:fa:09:55:ca:e6:51:28:6b:ea:73:84:98:3f:
         c0:7c:79:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:56:28 2026 by rpki-client