This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
File:                     HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json)
Hash identifier:          WWjH0sYJhTRzz61krtF2KP+b8ixOeEXVXdR9Mh5RdKE=
Subject key identifier:   8C:8B:1C:34:98:B2:75:64:1E:7F:DE:E7:A0:58:63:88:14:7C:3D:7A
Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99
Certificate issuer:       /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
Manifest number:          014F
Signing time:             Fri 23 Jan 2026 03:29:40 +0000
Manifest this update:     Fri 23 Jan 2026 03:29:39 +0000
Manifest next update:     Fri 30 Jan 2026 03:29:39 +0000
Files and hashes:         1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: WcYCnP1LaqTtx+KZLN+Ay/V89ab8QyoYaahtx6bGNqU=)
                          2: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: rMJAoxoS++kNzcCP2pW17iqc9CzolSJB2caGijczQIk=)
                          3: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl
                          rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
        Validity
            Not Before: Jan 23 03:29:39 2026 GMT
            Not After : Jan 30 03:29:39 2026 GMT
        Subject: CN=6972eb23-d768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:97:62:bd:03:b4:c5:08:c1:72:da:df:e1:
                    47:ae:2b:aa:ed:65:5f:d6:d1:e3:3f:97:c1:ea:be:
                    c7:39:bd:f3:59:5b:3d:33:49:1e:91:11:a0:2a:d8:
                    3a:01:03:3f:7d:37:35:25:d5:c9:6c:c3:b8:e6:9f:
                    19:37:86:9b:d6:a4:15:dc:63:a2:65:6a:d7:03:6f:
                    2e:24:5e:b9:cb:c0:e4:71:db:10:af:ac:ae:25:fb:
                    94:93:2e:c9:87:32:10:b4:20:a7:c4:66:6a:ac:89:
                    d3:e2:f2:31:41:25:c4:79:7b:07:f7:d2:42:d7:0f:
                    3d:5f:f3:4a:25:28:ce:0b:ca:57:0a:7d:0f:a8:e0:
                    db:21:f4:3b:c3:ca:fa:d2:d4:5c:6f:08:7e:0e:02:
                    82:46:39:9e:34:23:2c:25:10:3b:5c:0c:aa:6d:1d:
                    5e:7d:77:05:21:aa:33:3f:25:48:38:dc:f3:24:24:
                    15:4e:25:db:5b:dc:1f:42:21:52:5b:e5:e4:cf:68:
                    c8:5c:e8:4f:4f:fb:ee:b1:9b:a6:5f:64:20:a8:7b:
                    58:40:ec:b0:3d:a4:ad:f7:51:0b:0e:39:2f:4b:c4:
                    d0:04:fa:56:d9:40:c1:e5:23:33:e0:05:9a:ce:5a:
                    4b:35:85:08:ce:ef:71:23:64:d1:9a:b4:e1:98:43:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8B:1C:34:98:B2:75:64:1E:7F:DE:E7:A0:58:63:88:14:7C:3D:7A
            X509v3 Authority Key Identifier:
                keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:31:19:e0:e6:bf:cd:fc:43:bb:9c:37:b2:c4:58:99:1c:b8:
         e8:f3:9b:b8:f3:2e:1b:2a:cb:be:4f:85:87:14:6e:0f:83:7d:
         e5:2d:a4:f4:16:92:1b:d7:07:1c:75:e4:59:89:de:38:a2:3f:
         cd:1c:b4:12:a0:52:94:50:99:fe:34:a2:89:e2:03:39:f8:b2:
         06:31:36:1c:f7:94:7a:4d:2a:42:2f:2c:18:e8:61:3f:e5:22:
         c0:40:f5:61:98:89:33:5a:be:75:b4:44:b8:bc:a9:41:cd:72:
         2f:4e:55:d2:92:0e:7b:ef:6a:05:73:ae:fd:4f:06:9a:68:4c:
         f8:04:4d:9e:ba:8e:53:8f:f7:0e:a8:33:a7:1e:7b:a1:57:3e:
         76:8f:75:64:70:b1:0f:5f:93:ed:70:5d:62:b7:27:4f:18:ce:
         20:bb:72:7a:ab:22:8b:84:ac:da:8d:38:41:f3:3e:53:9c:b9:
         63:a2:6c:ed:92:31:f4:a2:4f:8e:b7:27:24:47:8c:57:a0:26:
         76:5f:94:8c:77:33:91:e1:1c:53:96:a1:a6:45:9a:c9:11:02:
         fe:b1:6b:2c:34:96:22:a7:5c:64:29:9e:69:f0:68:dc:bf:4e:
         23:90:21:66:bd:17:7a:73:09:43:3e:98:fb:49:46:ee:42:f3:
         bd:5e:1b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:33 2026 by rpki-client