This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
File:                     Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json)
Hash identifier:          R0o0Pj4UvBf4Bp+BC38RCN7OF2t2k5fBrAApXTVrn5Q=
Subject key identifier:   73:47:FC:76:87:0F:0C:A9:36:08:AB:D6:72:85:8C:30:25:53:BD:D2
Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2
Certificate issuer:       /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2
Certificate serial:       3507
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
Manifest number:          3500
Signing time:             Sat 24 Jan 2026 15:01:46 +0000
Manifest this update:     Sat 24 Jan 2026 15:01:46 +0000
Manifest next update:     Sat 31 Jan 2026 15:01:46 +0000
Files and hashes:         1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: G7dDyWiZ8rV6lTynke1TQ6WwTBeT6Jw/c+oS0lzVsYo=)
                          2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: mU82c9UsN7aMzC4DMeuqqygQy0O+yLmNqhxj9poHsyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl
                          rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13575 (0x3507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2
        Validity
            Not Before: Jan 24 15:01:46 2026 GMT
            Not After : Jan 31 15:01:46 2026 GMT
        Subject: CN=6974deda-ac70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:d2:46:9d:da:7c:91:73:89:2d:9a:e9:c7:
                    93:d4:7c:c3:51:38:9b:fb:ba:bc:80:11:0d:8e:21:
                    8f:ac:38:04:df:b7:91:0c:a6:cb:04:da:11:7b:b9:
                    4c:cb:09:7a:53:3a:21:7b:19:5f:6b:8d:82:04:c5:
                    92:ac:39:cf:33:24:9b:00:9b:6a:37:3e:31:0d:47:
                    5c:08:17:11:0a:df:82:20:15:7a:7e:b3:1b:6f:66:
                    d2:ae:ad:ae:4c:09:dd:83:5e:53:9d:5a:e5:d9:eb:
                    19:66:98:83:53:06:1c:6a:d2:ea:e4:cf:54:f0:3c:
                    43:d0:fc:f3:29:d3:16:46:6e:d7:9c:06:bf:89:e2:
                    a7:bc:9c:cd:4e:36:0b:51:6f:76:4c:e1:33:70:0c:
                    03:59:17:e3:0e:81:dd:43:12:8e:aa:2a:a1:f7:b8:
                    cf:54:25:a4:d6:27:3e:8d:f9:84:62:3d:d8:35:70:
                    5f:0a:9a:ac:47:8d:7d:3e:d4:f4:0b:2a:64:8c:61:
                    55:66:89:6a:c7:c2:1f:cc:78:23:a7:37:e5:5d:83:
                    c1:81:21:6e:c0:a9:8d:d5:d8:cc:e1:48:87:15:cf:
                    56:b2:8f:e9:97:e6:69:68:a7:a2:12:b2:55:fc:12:
                    e5:7c:e1:04:be:c0:ba:7e:d7:e2:c5:2f:23:bf:a4:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:47:FC:76:87:0F:0C:A9:36:08:AB:D6:72:85:8C:30:25:53:BD:D2
            X509v3 Authority Key Identifier:
                keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:58:b7:f0:16:30:87:75:28:2f:5f:54:03:87:ab:ef:44:8e:
         73:fa:d7:40:21:4d:42:91:4a:fd:64:64:10:74:f7:d2:09:da:
         4c:7d:1d:24:56:95:30:02:d0:da:e1:cb:20:a5:a6:16:3a:83:
         e1:29:92:e4:c4:c6:8d:c4:01:c7:98:e5:5f:fd:fc:b1:40:e5:
         0b:96:66:82:b1:0d:ea:82:ce:a5:56:9c:41:97:ee:d1:c2:e6:
         27:9e:81:6e:9e:69:f3:06:54:b7:d1:33:d9:c1:e5:45:06:17:
         c3:ae:cd:d7:d6:1e:65:8a:8f:80:8e:8b:ba:ca:00:b4:8c:49:
         69:b8:96:f6:ea:94:9e:7b:86:e0:d4:9e:2d:76:18:8f:f5:ce:
         f7:3b:9e:a9:5a:c4:68:c7:9c:38:73:ec:e3:f9:4a:5b:75:60:
         3c:0c:fe:30:69:20:40:7e:e4:64:62:a0:16:20:9d:11:0b:c3:
         92:78:60:de:ed:60:05:70:16:b3:0c:56:15:c2:5f:1d:8e:1b:
         96:9e:48:21:67:20:1d:6b:bc:12:0b:53:fe:2e:a5:65:3d:54:
         84:17:b5:02:46:4c:3d:34:09:64:da:8b:df:8d:1b:2a:4a:a2:
         79:e1:de:10:4a:fb:ae:c5:40:7f:1c:f2:b7:9f:a7:33:c8:de:
         2e:2a:93:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0
RjE5QzQ3QjIwHhcNMjYwMTI0MTUwMTQ2WhcNMjYwMTMxMTUwMTQ2WjAYMRYwFAYD
VQQDDA02OTc0ZGVkYS1hYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxFrSRp3afJFziS2a6ceT1HzDUTib+7q8gBENjiGPrDgE37eRDKbLBNoRe7lM
ywl6Uzohexlfa42CBMWSrDnPMySbAJtqNz4xDUdcCBcRCt+CIBV6frMbb2bSrq2u
TAndg15TnVrl2esZZpiDUwYcatLq5M9U8DxD0PzzKdMWRm7XnAa/ieKnvJzNTjYL
UW92TOEzcAwDWRfjDoHdQxKOqiqh97jPVCWk1ic+jfmEYj3YNXBfCpqsR419PtT0
CypkjGFVZolqx8IfzHgjpzflXYPBgSFuwKmN1djM4UiHFc9Wso/pl+ZpaKeiErJV
/BLlfOEEvsC6ftfixS8jv6R5dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNH/HaH
DwypNgir1nKFjDAlU73SMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE
QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt
WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUWLfwFjCHdSgvX1QDh6vvRI5z+tdAIU1CkUr9ZGQQdPfSCdpMfR0k
VpUwAtDa4csgpaYWOoPhKZLkxMaNxAHHmOVf/fyxQOULlmaCsQ3qgs6lVpxBl+7R
wuYnnoFunmnzBlS30TPZweVFBhfDrs3X1h5lio+Ajou6ygC0jElpuJb26pSee4bg
1J4tdhiP9c73O56pWsRox5w4c+zj+UpbdWA8DP4waSBAfuRkYqAWIJ0RC8OSeGDe
7WAFcBazDFYVwl8djhuWnkghZyAda7wSC1P+LqVlPVSEF7UCRkw9NAlk2ovfjRsq
SqJ54d4QSvuuxUB/HPK3n6czyN4uKpMn
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:01 2026 by rpki-client