This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
File:                     h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json)
Hash identifier:          4EHs1ytiTHUUaB//T0ysYjMTKZEo2VcKOZrSC40Oj4w=
Subject key identifier:   2B:36:61:58:91:49:52:A5:AB:15:A3:33:02:96:4B:60:D3:F8:77:44
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Certificate issuer:       /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial:       0586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
Manifest number:          0566
Signing time:             Sat 24 Jan 2026 22:41:42 +0000
Manifest this update:     Sat 24 Jan 2026 22:41:41 +0000
Manifest next update:     Sat 31 Jan 2026 22:41:41 +0000
Files and hashes:         1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: O0ZtaHgkqh9CdYfBm4HTfbOLYgYYKA8aUUiX9U0/jBI=)
                          2: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: OEbvp/lXJIFZKwJ6RYCbMpkBZdrcvrzjMgZm0D+27AQ=)
                          3: FAD3BBFCDA3311F08928C2DC8AD3641D.roa (hash: LSwcydcz/VwSaqcJ957C8hegY3YYcQrjojQszQrjFEA=)
                          4: DFC29B9EDA3311F0AF85FF988AD3641D.roa (hash: 6vV7bJ8KSGDEu0d7kmde9BadNfuzL/4Q+LSuLPLVsKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
                          rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
        Validity
            Not Before: Jan 24 22:41:41 2026 GMT
            Not After : Jan 31 22:41:41 2026 GMT
        Subject: CN=69754aa6-3f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:35:9b:24:89:ba:ca:f0:27:ef:7a:6c:8b:
                    a8:53:32:9b:c6:cd:24:18:67:05:fe:be:3f:6d:3f:
                    eb:c8:32:cf:81:5d:32:7e:16:45:32:39:59:65:34:
                    6b:30:f6:e7:92:3d:c8:f0:c5:b2:aa:af:e1:12:e3:
                    51:6c:22:f6:8c:89:66:58:04:61:2b:27:8e:82:ad:
                    b4:f0:bb:86:70:6f:27:3e:cc:1a:be:95:c5:1b:1a:
                    55:4b:95:e3:31:7e:c9:cc:be:36:17:b8:28:5d:97:
                    77:26:43:2f:fd:ea:74:f7:a9:27:62:76:16:02:d9:
                    82:04:39:61:8f:ca:b3:ca:8d:ae:5b:cf:38:d7:05:
                    13:09:ff:be:c1:fe:4f:f7:8f:6d:f4:9b:2f:d5:c1:
                    65:db:af:40:ad:2a:0a:ce:07:83:7a:54:78:1d:06:
                    b2:c6:ab:73:c8:d5:8f:e4:4a:51:b8:5a:c1:ae:04:
                    b1:77:2a:cc:01:bd:19:5d:d7:ff:af:71:b0:48:24:
                    46:d6:64:41:02:b5:e7:65:9e:a4:7a:8e:0e:d0:da:
                    1c:6e:71:04:e7:20:df:21:b2:e0:c4:f9:b6:48:c1:
                    03:57:7c:9a:f1:d6:94:de:74:f2:f4:d0:94:ff:a9:
                    40:68:c8:bb:7a:9a:a9:51:d8:57:7c:3e:ce:43:84:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:36:61:58:91:49:52:A5:AB:15:A3:33:02:96:4B:60:D3:F8:77:44
            X509v3 Authority Key Identifier:
                keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:45:18:f0:bf:6f:02:93:97:5f:7e:8d:d4:10:6e:77:c7:f7:
         7c:25:83:ec:12:e5:e1:fd:3f:70:f1:1e:c8:61:0e:ab:d6:1d:
         86:17:0f:3f:4d:d9:fa:5c:68:d4:60:a6:5d:b0:19:fd:15:9d:
         1c:a5:9d:5b:cf:12:58:99:67:2e:94:21:86:33:62:86:7d:de:
         d3:fd:ce:cc:66:1b:f9:3a:c2:9a:2c:3e:03:8f:45:ab:6b:19:
         38:9e:b2:22:6b:49:8a:08:e6:a6:fc:09:42:a5:43:2c:f0:67:
         63:50:a2:1a:5e:4d:ef:90:93:a7:6e:fc:0c:24:cb:eb:83:22:
         3f:61:ad:ab:55:61:8d:a1:5e:1d:47:2e:ea:13:0a:6d:ca:70:
         3c:f2:41:a2:e3:1a:26:b7:3f:61:c9:7b:08:fc:c4:be:04:f8:
         9e:4c:46:ce:a9:62:f3:9e:a1:4c:ab:5e:fb:61:16:18:3d:dc:
         71:91:88:2e:aa:b4:50:fc:f7:b5:74:12:bd:81:46:18:55:72:
         8b:de:1d:2d:1e:86:d2:27:69:83:3c:9c:21:69:5f:30:1a:4c:
         18:21:45:ee:20:c0:1f:6d:df:39:24:c9:77:e4:fb:b8:44:5b:
         37:69:b3:55:df:e7:c0:e4:16:01:1d:60:70:f2:6d:79:7d:16:
         5a:af:60:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE
OTU0MDFGN0YwHhcNMjYwMTI0MjI0MTQxWhcNMjYwMTMxMjI0MTQxWjAYMRYwFAYD
VQQDDA02OTc1NGFhNi0zZjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtO01mySJusrwJ+96bIuoUzKbxs0kGGcF/r4/bT/ryDLPgV0yfhZFMjlZZTRr
MPbnkj3I8MWyqq/hEuNRbCL2jIlmWARhKyeOgq208LuGcG8nPswavpXFGxpVS5Xj
MX7JzL42F7goXZd3JkMv/ep096knYnYWAtmCBDlhj8qzyo2uW8841wUTCf++wf5P
949t9Jsv1cFl269ArSoKzgeDelR4HQayxqtzyNWP5EpRuFrBrgSxdyrMAb0ZXdf/
r3GwSCRG1mRBArXnZZ6keo4O0NocbnEE5yDfIbLgxPm2SMEDV3ya8daU3nTy9NCU
/6lAaMi7epqpUdhXfD7OQ4SYaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCs2YViR
SVKlqxWjMwKWS2DT+HdEMB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2
RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUUxMy84OTM2MzU3ODI2RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJs
Q2V1RnJHdWxsSW5aVkFIMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAxRRjwv28Ck5dffo3UEG53x/d8JYPsEuXh/T9w8R7IYQ6r1h2GFw8/
Tdn6XGjUYKZdsBn9FZ0cpZ1bzxJYmWculCGGM2KGfd7T/c7MZhv5OsKaLD4Dj0Wr
axk4nrIia0mKCOam/AlCpUMs8GdjUKIaXk3vkJOnbvwMJMvrgyI/Ya2rVWGNoV4d
Ry7qEwptynA88kGi4xomtz9hyXsI/MS+BPieTEbOqWLznqFMq177YRYYPdxxkYgu
qrRQ/Pe1dBK9gUYYVXKL3h0tHobSJ2mDPJwhaV8wGkwYIUXuIMAfbd85JMl35Pu4
RFs3abNV3+fA5BYBHWBw8m15fRZar2BL
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:15 2026 by rpki-client