This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft
File:                     RhpvMegu0A9M7nmnAkijjj-Sb34.mft (raw, json)
Hash identifier:          gJ/qZC7xSXFnfAVaCWPHOpM0eLtGtymNzZ79GhsZl68=
Subject key identifier:   F8:5A:C3:76:9A:A4:A4:C3:42:3B:98:24:40:D9:D2:78:8D:37:F6:44
Authority key identifier: 46:1A:6F:31:E8:2E:D0:0F:4C:EE:79:A7:02:48:A3:8E:3F:92:6F:7E
Certificate issuer:       /CN=A9132086/serialNumber=461A6F31E82ED00F4CEE79A70248A38E3F926F7E
Certificate serial:       07C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft
Manifest number:          07B8
Signing time:             Sat 24 Jan 2026 20:46:56 +0000
Manifest this update:     Sat 24 Jan 2026 20:46:55 +0000
Manifest next update:     Sat 31 Jan 2026 20:46:55 +0000
Files and hashes:         1: RhpvMegu0A9M7nmnAkijjj-Sb34.crl (hash: p2apjhNyJh9a/MuEdWKTFEpU/Aiv0h3i6Q9BojeNocM=)
                          2: D0D950CC880C11ED9353737BC4F9AE02.roa (hash: rn5nHXASRlTZl5NW1zNqnig9TcRsh54UvkihyI0neH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.crl
                          rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1985 (0x7c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132086, serialNumber=461A6F31E82ED00F4CEE79A70248A38E3F926F7E
        Validity
            Not Before: Jan 24 20:46:55 2026 GMT
            Not After : Jan 31 20:46:55 2026 GMT
        Subject: CN=69752fc0-8789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:10:b8:bd:c8:a3:21:01:4c:b2:58:bd:6a:
                    37:12:23:6a:43:43:f1:01:6a:5e:e6:98:38:7e:fe:
                    01:c7:bd:3b:fa:19:5f:39:bd:aa:4f:fa:36:92:70:
                    ad:04:36:a2:6a:29:1d:81:9a:76:de:89:71:09:97:
                    40:50:31:49:4d:09:27:56:73:5e:d4:16:c9:f5:a3:
                    a5:72:52:c2:97:ea:a8:29:9f:b7:1e:fb:64:4a:10:
                    af:e9:fc:7c:17:7c:0b:dd:b8:5c:3a:3b:8f:0b:70:
                    f4:7d:da:98:2d:77:17:74:f6:8b:44:5c:b7:f8:5b:
                    20:63:9f:0a:ca:f7:ae:b8:e4:3d:f5:28:5e:4a:06:
                    81:59:1e:da:e1:1e:43:1d:90:a4:22:03:50:1a:85:
                    75:e8:f5:32:03:b2:2a:b7:ce:35:84:d7:64:b4:73:
                    4f:8a:88:1b:34:5f:7c:c1:d4:ed:fa:99:93:e2:e6:
                    03:b4:50:0c:42:dd:43:e4:b4:fe:9e:78:0f:ea:70:
                    40:f9:fa:70:85:ad:ab:36:1d:2e:44:26:d1:58:c9:
                    05:1d:5a:e7:13:dd:a2:95:cb:ea:41:ee:b1:f8:f9:
                    58:8b:b5:fe:c1:34:c8:40:53:69:5c:bf:97:18:1a:
                    45:e4:11:1c:8f:c3:b3:4f:9e:82:ae:1e:3f:4d:5f:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5A:C3:76:9A:A4:A4:C3:42:3B:98:24:40:D9:D2:78:8D:37:F6:44
            X509v3 Authority Key Identifier:
                keyid:46:1A:6F:31:E8:2E:D0:0F:4C:EE:79:A7:02:48:A3:8E:3F:92:6F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ed:41:b0:65:5a:52:73:d4:f8:2e:01:c1:b1:7c:49:d9:b8:
         27:78:43:85:bd:ab:3b:15:ab:f8:15:90:78:eb:2d:c3:96:6b:
         02:e7:ec:f6:29:0e:f4:b4:1f:2c:8c:50:31:55:04:4d:53:00:
         6c:36:c0:a2:e4:49:ad:92:7d:e1:05:f5:6c:b1:05:ad:44:82:
         b8:a6:6c:0b:a7:91:80:54:5d:5b:78:cb:84:4d:5c:98:b1:dc:
         52:a5:e3:2d:9b:09:c2:6c:10:74:53:f2:ec:05:37:45:44:3b:
         fb:b4:08:84:e0:39:8d:35:a9:0e:69:2c:86:d0:cc:21:1e:08:
         60:0f:c5:07:3e:aa:6c:31:82:18:68:1f:46:6e:bd:18:fe:bd:
         0c:91:70:be:ee:65:eb:b7:76:c4:ed:2b:60:47:8e:4b:49:37:
         dd:fb:70:43:2a:82:f2:6f:f0:9b:cb:af:ea:1d:a2:40:48:fa:
         c1:bd:30:da:68:f2:4a:8f:39:e0:49:9d:ae:09:a2:ed:40:df:
         ea:0c:d1:11:df:88:eb:0a:88:cf:77:31:79:68:02:60:29:8a:
         b3:0f:49:75:c3:0e:0d:20:40:f2:33:29:3b:3c:9e:21:7c:bd:
         87:ab:5a:ee:5a:04:d4:4f:04:35:54:bd:73:42:36:b4:ef:3a:
         8c:cb:5d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:40 2026 by rpki-client