This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
File:                     HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json)
Hash identifier:          56kzN2Ot4wa7qor1KA7cXfPSUb9AGcnWdixRa8DgBWw=
Subject key identifier:   1B:95:49:EC:F5:31:89:3B:22:A6:A2:42:6B:B6:9A:51:EF:DE:49:8C
Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
Certificate issuer:       /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
Manifest number:          01A7
Signing time:             Fri 23 Jan 2026 02:37:27 +0000
Manifest this update:     Fri 23 Jan 2026 02:37:27 +0000
Manifest next update:     Fri 30 Jan 2026 02:37:27 +0000
Files and hashes:         1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: tFf4muzUAlwZzOMuB7L0t+2Ua8gk4VC7qy8Z4LNIOfU=)
                          2: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: yNwCoBcUmJkx0Dg6C0NAAjwW8Tj0R/YRWYCllrG7iU4=)
                          3: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: z19Lw1ifKHATlQNFXKCGQM6zcrtQMC9QNy8RwHAudr0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
                          rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
        Validity
            Not Before: Jan 23 02:37:27 2026 GMT
            Not After : Jan 30 02:37:27 2026 GMT
        Subject: CN=6972dee7-1b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9d:2a:93:8e:0c:2a:c7:48:a5:9f:f9:0b:a8:
                    c5:57:93:96:95:c1:9e:a7:4b:4b:c3:f9:2f:db:9c:
                    e4:67:ac:c6:1d:4f:71:1d:7f:86:3a:e7:66:a0:a3:
                    af:14:1c:85:34:56:26:37:01:49:0b:5d:d0:f4:6d:
                    f2:e3:3e:81:c2:47:64:73:9f:6f:df:f5:e5:3d:e9:
                    34:45:6c:de:44:bc:af:77:cd:ce:4a:2b:91:0f:e2:
                    c8:8c:4f:5e:7f:d0:de:28:95:bc:53:ae:5c:f8:15:
                    a4:61:68:3a:81:b9:20:ef:61:64:da:0e:47:a6:fb:
                    23:48:bd:32:0f:4e:f0:47:7f:72:73:fa:e9:2f:c5:
                    4e:07:b2:62:64:06:9a:86:8c:d5:76:68:94:6d:0c:
                    ce:53:2e:4b:ec:70:4d:39:ec:22:ea:44:55:9b:6c:
                    de:ca:f3:da:7e:ea:92:71:ba:08:71:fe:73:06:32:
                    59:94:7e:bf:34:25:2f:f3:3f:e5:bc:53:48:20:dc:
                    d9:b4:ef:73:26:1a:7a:58:64:be:89:34:77:1d:83:
                    b8:4f:70:cb:e2:32:e0:41:e5:c5:b6:35:0e:d7:d0:
                    08:90:db:03:13:8f:d5:f4:41:78:b6:2d:a9:9b:f7:
                    ff:3b:26:c8:62:9b:9c:ec:bd:c7:a0:13:a5:52:31:
                    40:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:95:49:EC:F5:31:89:3B:22:A6:A2:42:6B:B6:9A:51:EF:DE:49:8C
            X509v3 Authority Key Identifier:
                keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:73:4d:d9:27:67:fb:ae:22:87:c3:be:38:8f:96:2b:89:90:
         7e:3a:b0:d6:7a:3a:28:91:f5:c3:f3:de:92:bd:f3:ef:cf:a0:
         93:f9:9a:a5:99:7a:14:de:23:e3:b2:d7:d3:3b:ca:cd:3e:f3:
         39:25:04:59:cd:f6:0c:d2:e6:32:ad:f7:87:59:cc:85:7d:b8:
         25:36:f6:7b:c4:7e:bd:05:8c:59:99:af:1d:0b:a9:52:d5:be:
         58:84:4f:f9:95:c2:72:79:08:fc:35:7d:ae:cd:3d:bf:90:4d:
         4c:48:3b:8d:ea:8e:fd:bd:a9:36:87:fe:ef:01:27:99:23:8c:
         78:53:d3:e8:c1:07:b9:e2:2a:af:64:65:42:ba:66:29:65:36:
         c0:7a:61:d3:d5:92:f9:79:dd:ac:b3:5b:de:e1:99:48:9f:22:
         18:38:82:35:56:26:cd:d2:87:5d:81:2f:42:ba:d8:4d:3b:2c:
         dd:82:8a:42:ca:6a:80:23:9f:3e:18:e5:77:0b:d5:c3:58:38:
         71:a2:ec:dc:69:77:59:46:14:97:9a:70:e7:27:58:ff:2d:e3:
         2a:5e:dd:53:d5:d5:53:8c:18:1e:ee:bf:72:62:b6:1a:3d:18:
         b8:ad:91:3b:72:bd:3c:c8:ee:0d:97:f9:c4:83:e8:1e:74:ba:
         9d:eb:26:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx
Q0Q0NEZCQTcwHhcNMjYwMTIzMDIzNzI3WhcNMjYwMTMwMDIzNzI3WjAYMRYwFAYD
VQQDDA02OTcyZGVlNy0xYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyp0qk44MKsdIpZ/5C6jFV5OWlcGep0tLw/kv25zkZ6zGHU9xHX+GOudmoKOv
FByFNFYmNwFJC13Q9G3y4z6Bwkdkc59v3/XlPek0RWzeRLyvd83OSiuRD+LIjE9e
f9DeKJW8U65c+BWkYWg6gbkg72Fk2g5HpvsjSL0yD07wR39yc/rpL8VOB7JiZAaa
hozVdmiUbQzOUy5L7HBNOewi6kRVm2zeyvPafuqScboIcf5zBjJZlH6/NCUv8z/l
vFNIINzZtO9zJhp6WGS+iTR3HYO4T3DL4jLgQeXFtjUO19AIkNsDE4/V9EF4ti2p
m/f/OybIYpuc7L3HoBOlUjFAxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuVSez1
MYk7IqaiQmu2mlHv3kmMMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz
QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6
ekVOeG9xT0UxaXNjMUUtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQc03ZJ2f7riKHw744j5YriZB+OrDWejookfXD896SvfPvz6CT+Zql
mXoU3iPjstfTO8rNPvM5JQRZzfYM0uYyrfeHWcyFfbglNvZ7xH69BYxZma8dC6lS
1b5YhE/5lcJyeQj8NX2uzT2/kE1MSDuN6o79vak2h/7vASeZI4x4U9PowQe54iqv
ZGVCumYpZTbAemHT1ZL5ed2ss1ve4ZlInyIYOII1VibN0oddgS9CuthNOyzdgopC
ymqAI58+GOV3C9XDWDhxouzcaXdZRhSXmnDnJ1j/LeMqXt1T1dVTjBge7r9yYrYa
PRi4rZE7cr08yO4Nl/nEg+gedLqd6ybX
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:14 2026 by rpki-client