This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
File:                     H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json)
Hash identifier:          QEIW2Jwrs5IxJAuQTpybjaQ7kEahbngXk2lCbMdtroE=
Subject key identifier:   27:36:7B:82:67:92:C6:48:FE:E4:F5:94:F9:DA:74:9D:34:D0:7F:48
Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
Certificate issuer:       /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
Manifest number:          020F
Signing time:             Sun 25 Jan 2026 01:35:56 +0000
Manifest this update:     Sun 25 Jan 2026 01:35:55 +0000
Manifest next update:     Sun 01 Feb 2026 01:35:55 +0000
Files and hashes:         1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: UqAHQzt5e53jiLib1fzjEpGeqBxyj3C/Ub0HDJXXkOQ=)
                          2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: bednLb1aavoMryTZu6a+ZITB3tAwjB8YeG5P5A+FHwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
                          rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
        Validity
            Not Before: Jan 25 01:35:55 2026 GMT
            Not After : Feb  1 01:35:55 2026 GMT
        Subject: CN=6975737c-7197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:83:66:23:38:f6:44:c8:92:3a:49:f5:82:6a:
                    33:e5:16:58:8c:23:d6:28:fe:66:76:8f:0e:06:13:
                    36:eb:25:47:c1:d7:8c:78:9a:db:4e:02:57:9c:dc:
                    7b:9b:36:14:5f:82:0b:08:b7:51:1c:e3:f0:37:3b:
                    27:03:cd:93:b7:f3:4f:02:d3:71:4c:03:ea:c7:e7:
                    25:6d:32:ea:fe:0d:10:5f:7c:9d:22:83:d6:7d:88:
                    56:9f:75:60:b0:f7:b6:a1:f8:b7:d3:87:0d:6c:2b:
                    da:89:b6:bb:8b:bb:dc:70:59:31:61:98:03:f4:99:
                    4b:66:61:eb:f3:34:11:3c:6f:0d:2c:78:7e:14:e8:
                    2d:04:53:a7:7c:be:2f:72:72:ca:e8:29:73:84:1f:
                    1b:fb:55:18:76:41:42:88:5c:a4:85:01:6c:ca:c9:
                    0d:23:84:28:35:8e:6f:49:07:a1:b7:1c:9c:c3:13:
                    5f:7e:2d:fc:a0:1d:ae:c5:d6:4f:6d:32:49:66:09:
                    69:e6:81:a9:2f:25:8a:e4:c5:71:e3:9e:73:6e:ab:
                    8c:a8:73:3f:e9:27:07:e5:2e:61:83:6c:eb:9b:f3:
                    a3:6c:17:b3:4f:fd:56:e3:00:c3:b1:43:03:0a:83:
                    b9:0c:b9:2c:02:63:96:c3:18:09:5e:04:ce:49:24:
                    d7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:36:7B:82:67:92:C6:48:FE:E4:F5:94:F9:DA:74:9D:34:D0:7F:48
            X509v3 Authority Key Identifier:
                keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:de:c2:12:4b:a7:84:65:e7:d7:5c:03:1e:aa:49:64:dc:4c:
         d5:28:e8:ea:97:58:c7:66:82:9c:1f:be:8e:e0:82:7d:8c:97:
         14:c1:51:69:14:1b:5e:f0:ad:76:ba:a6:1c:dd:7f:18:7a:fa:
         33:aa:74:3c:bd:70:bd:0e:f7:12:1d:d2:0a:37:18:20:c2:40:
         bc:bd:cc:cc:d9:9b:94:2e:a3:f5:24:11:d6:39:0b:b9:30:e8:
         46:cd:c9:4a:44:1c:da:55:b6:ed:fa:95:93:dd:b5:47:29:b0:
         8a:60:64:26:bf:ce:c1:64:7c:82:7e:03:e7:b2:cc:09:83:f5:
         9a:6a:c1:d9:09:37:54:ee:1b:89:2f:16:6b:4d:9e:33:b8:16:
         f5:7d:bb:2d:b5:c2:a4:81:10:03:6a:fb:d6:d6:7b:83:1c:22:
         79:24:e4:b0:88:57:2e:ca:f8:d6:9e:75:36:ca:a5:7e:45:fe:
         dc:2b:ce:98:be:05:7b:6b:ec:9b:02:ef:0d:8c:9c:26:3d:c4:
         25:ed:61:d5:a7:8b:27:e2:9c:0a:0c:73:62:ae:a7:0e:71:fc:
         42:3b:73:44:df:30:41:cf:3c:ea:3d:bb:74:80:ca:3b:4e:8b:
         7d:79:1b:b2:e1:3a:2e:33:aa:df:75:a9:97:49:f6:b6:34:8f:
         f3:12:29:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:13 2026 by rpki-client