This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
File:                     H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json)
Hash identifier:          L5rhGrNzAq6hIs8zwu1KKcKVYMmshiRHcSUNA/RL6Vo=
Subject key identifier:   2B:AB:7A:EE:20:4F:66:FB:35:CA:F4:D2:3C:7F:0A:54:59:3D:CC:A4
Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4
Certificate issuer:       /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
Certificate serial:       047A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
Manifest number:          0474
Signing time:             Sat 24 Jan 2026 23:18:09 +0000
Manifest this update:     Sat 24 Jan 2026 23:18:08 +0000
Manifest next update:     Sat 31 Jan 2026 23:18:08 +0000
Files and hashes:         1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: bVmuktb0HeP0s7UVOztSRL56ufUFLqr5sPmd8Y1v0Zg=)
                          2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: 3YCl3ruDz9pGROpd+e7K4Njtxira0+jtHnGSU4G+bG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl
                          rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
        Validity
            Not Before: Jan 24 23:18:08 2026 GMT
            Not After : Jan 31 23:18:08 2026 GMT
        Subject: CN=69755331-aa80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:eb:79:b2:70:43:16:32:0d:d5:79:b4:e0:ab:
                    5d:69:1c:5f:13:d9:e1:e2:54:84:45:c3:a9:4b:14:
                    ef:7c:5d:7c:64:f3:af:fa:b0:05:a3:bd:f7:c8:be:
                    1f:9f:22:25:b3:c4:da:14:34:f5:90:d4:76:9c:77:
                    5a:b3:41:21:6a:d5:e2:66:1b:de:fb:20:72:4f:1c:
                    d1:fe:2c:7f:4c:11:3b:9e:ba:52:b3:a4:84:06:ec:
                    9c:19:ec:0c:77:3b:f4:65:2b:ea:df:a2:09:2e:6b:
                    81:16:8e:be:37:8b:89:58:99:fa:48:d5:8f:c9:12:
                    ed:d8:1c:ce:4f:01:d9:30:38:90:25:0e:9c:1b:0c:
                    01:eb:72:02:d5:0a:65:71:11:21:55:f6:1a:bb:0f:
                    5e:81:75:f9:00:34:d4:df:ce:17:7a:80:7f:d8:bd:
                    b2:61:bf:a8:3a:7e:ae:5a:28:17:f7:39:d5:bd:bf:
                    45:fc:74:9f:71:02:73:a6:d2:b6:d9:c6:1f:b0:1b:
                    16:84:ed:5c:3f:e5:e1:e9:b3:29:89:33:d9:1d:bd:
                    d2:2b:88:98:22:0b:b1:f3:c6:ba:f3:76:c9:3c:a5:
                    bc:14:b9:62:f2:e3:61:78:8a:e9:73:08:cc:08:8a:
                    8a:d6:d7:62:59:33:7e:5a:5d:0e:b6:74:f0:41:d2:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AB:7A:EE:20:4F:66:FB:35:CA:F4:D2:3C:7F:0A:54:59:3D:CC:A4
            X509v3 Authority Key Identifier:
                keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b2:9f:db:79:a9:f3:8d:26:4c:58:2a:16:9e:24:22:64:05:
         46:4b:61:a0:73:80:2b:8e:1a:1b:18:6c:d7:67:d3:4b:e7:8b:
         91:e1:69:7d:f9:12:42:ba:55:32:f3:e1:6b:ea:aa:15:40:94:
         1d:5b:ed:a0:ca:0a:95:b2:b4:ab:18:bb:df:f2:3d:70:2b:54:
         4f:f7:e6:47:b3:13:5d:f0:f5:2a:cf:0f:f4:23:6d:62:1a:aa:
         4f:e8:51:93:f4:33:a5:07:91:8d:e9:c5:f6:6f:b7:9c:d5:23:
         85:ff:a7:20:d1:be:55:e9:ff:7c:6c:2f:94:a0:ce:1f:f2:6a:
         24:27:ba:3d:66:06:6a:4a:8b:37:05:de:40:73:12:18:28:bd:
         f6:92:2e:a8:8f:64:d4:80:ce:ad:e1:df:38:10:75:db:cb:b0:
         2a:ca:e7:01:69:6e:22:c7:78:9f:e9:08:24:79:94:56:7f:c7:
         c3:a4:db:c3:28:42:27:62:f8:4e:99:01:98:37:36:e0:f3:07:
         ef:51:8a:f2:3e:61:31:95:24:71:70:08:9e:ab:8e:4a:c5:26:
         ce:02:d0:e1:20:40:eb:db:a3:4a:4d:15:a5:91:65:1b:22:91:
         ac:e4:7f:c9:36:39:d9:2e:21:8c:92:c9:2e:02:f2:09:22:45:
         1c:1f:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:53 2026 by rpki-client