This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft
File:                     _HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft (raw, json)
Hash identifier:          wN1/9ah+UGCUDcb8g86PuSgcxvZEczk/+XyXXk+tEUs=
Subject key identifier:   BA:04:BB:39:FD:B5:75:F1:C1:20:B8:7F:0A:89:C4:D3:25:8C:C0:8D
Authority key identifier: FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89
Certificate issuer:       /CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
Certificate serial:       04D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft
Manifest number:          0609
Signing time:             Sat 24 Jan 2026 23:09:54 +0000
Manifest this update:     Sat 24 Jan 2026 23:09:54 +0000
Manifest next update:     Sat 31 Jan 2026 23:09:54 +0000
Files and hashes:         1: _HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl (hash: CElNXxR+Kvy0xxapmUuPi89tdks6PjNJP/Jj3GbiZ4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl
                          rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91316B0, serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
        Validity
            Not Before: Jan 24 23:09:54 2026 GMT
            Not After : Jan 31 23:09:54 2026 GMT
        Subject: CN=69755142-34ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:62:a7:f3:75:bf:54:90:70:96:96:23:cb:
                    13:bd:a3:81:b4:ca:6d:a9:59:e0:25:5f:5e:c4:3d:
                    b0:fb:08:4d:92:a0:d1:e0:73:f3:19:e9:d4:38:51:
                    42:40:c3:db:94:8c:05:af:12:94:5e:38:59:d0:85:
                    bc:74:4b:ed:28:81:92:36:80:b9:6b:0c:78:3a:ea:
                    66:f3:7d:9d:c6:f1:e4:61:33:6a:ef:79:99:4a:f2:
                    d0:96:25:ae:a6:db:9a:5f:98:56:ee:fe:6f:15:3f:
                    1b:43:c5:58:21:69:8e:b6:4a:30:2c:ec:33:34:74:
                    5e:e5:01:1f:f1:60:df:de:83:ab:12:86:fb:14:c6:
                    ea:a6:1f:b2:83:b5:ee:ac:4f:51:87:06:5f:18:41:
                    f1:3b:e6:6f:9e:45:db:bd:74:8e:58:95:85:70:ad:
                    d8:4a:a2:a4:12:2e:71:21:eb:80:3c:b9:11:c4:4a:
                    a1:8d:f0:7f:7a:76:6c:f1:82:3b:12:04:f1:4c:9e:
                    19:36:10:86:1d:fa:05:94:b0:04:57:c8:b0:7f:a5:
                    b6:b3:9a:3e:6e:6f:52:8c:c0:f2:c0:4e:bc:7c:a0:
                    b5:0e:27:bd:d3:2c:2d:59:49:0a:08:f3:d1:db:7a:
                    11:7d:ca:ff:20:49:da:c7:f0:44:cd:d2:e8:76:a2:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:04:BB:39:FD:B5:75:F1:C1:20:B8:7F:0A:89:C4:D3:25:8C:C0:8D
            X509v3 Authority Key Identifier:
                keyid:FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3a:d8:09:b2:f8:5a:fc:ed:e7:7d:6f:f2:51:4e:dc:b8:4b:
         c0:fd:05:ba:78:8a:3b:54:9d:41:a1:e1:3b:48:e2:9b:a1:aa:
         c9:21:e7:69:44:46:c4:43:f2:d2:4f:2c:89:9d:24:b7:5b:4e:
         53:10:12:7b:15:29:6c:38:0e:77:3d:91:c8:c4:13:01:9f:c9:
         e2:e1:b7:4c:13:8b:5b:fe:1b:81:d7:d2:fb:50:15:f4:39:43:
         f1:fd:3e:ae:63:9a:53:ad:60:50:41:28:76:4e:02:ab:24:10:
         6d:25:51:97:98:5e:ee:af:07:12:4f:15:e0:c0:bb:72:7f:f2:
         84:df:8e:0e:e5:65:43:c2:76:70:f0:c0:91:b1:c8:db:e2:da:
         56:bb:9d:62:94:62:4f:09:8b:f9:0d:b7:29:5e:88:75:71:95:
         3d:03:ab:23:f6:eb:bf:47:92:ea:ce:34:b2:f9:71:95:3b:1d:
         0f:6e:f4:58:90:a3:07:d1:c4:f8:24:6a:70:63:9b:3e:cd:7f:
         b5:5c:3b:07:8b:56:5e:1d:bb:fa:7a:98:7e:af:c8:6b:ec:7f:
         73:17:dd:20:12:44:92:79:92:b3:2a:a9:c1:df:9e:91:a4:b0:
         f0:48:b9:21:a9:c2:f1:89:6a:23:14:09:67:28:c9:fb:f2:76:
         81:6d:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:45:42 2026 by rpki-client