This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
File:                     H9I4pw6sem_8a5CrMM77dzkhb0o.mft (raw, json)
Hash identifier:          DHm+R7guWhfUCym0Rc+sU6sp5OQyc26t+lnxjrNhhpg=
Subject key identifier:   2F:6A:C2:78:82:7D:92:01:81:C8:C0:AF:62:E2:D9:39:50:DB:57:45
Authority key identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A
Certificate issuer:       /CN=A913DD09/serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
Manifest number:          64
Signing time:             Fri 23 Jan 2026 06:07:03 +0000
Manifest this update:     Fri 23 Jan 2026 06:07:03 +0000
Manifest next update:     Fri 30 Jan 2026 06:07:03 +0000
Files and hashes:         1: H9I4pw6sem_8a5CrMM77dzkhb0o.crl (hash: EY+1pZus9FzdNDQe+jkEgTz8Y9anVYD9/zGA1lI/sEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl
                          rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD09, serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A
        Validity
            Not Before: Jan 23 06:07:03 2026 GMT
            Not After : Jan 30 06:07:03 2026 GMT
        Subject: CN=69731007-fb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:f8:60:89:01:2c:ca:cc:27:f9:f1:19:9a:
                    20:f3:27:4f:e4:21:83:3b:22:0e:e7:2c:a9:b1:a3:
                    03:d8:36:4a:25:08:48:13:88:e9:b8:03:65:a9:3e:
                    ac:bf:c7:4f:47:20:f4:8c:25:47:b5:d2:94:58:82:
                    3a:d1:c4:ac:f2:32:15:a4:86:99:d0:60:02:6b:68:
                    ea:bf:f4:7b:72:21:5c:1d:eb:28:af:2e:c4:d9:3c:
                    e5:5b:22:9b:d2:b9:09:16:1e:f2:00:a1:e4:da:66:
                    c7:03:a9:3e:43:3b:74:91:f1:74:a2:45:b9:27:05:
                    e6:9e:6c:75:47:fd:0a:b0:00:49:3e:97:29:51:4a:
                    3d:9a:4b:8c:47:12:f1:a6:2d:ff:cc:cf:dc:5a:bc:
                    2f:63:33:73:ae:ff:7c:66:ef:11:40:57:62:b4:d2:
                    49:71:0c:da:bb:11:bb:bd:3c:04:b8:bb:75:5b:d7:
                    90:1a:73:8f:d5:ad:7d:30:e7:97:59:13:74:2f:ad:
                    79:40:97:77:54:29:9d:2f:06:25:b1:64:b5:79:02:
                    74:e3:5d:6b:33:42:e5:40:c9:8d:a3:ca:44:c1:4e:
                    34:4e:1f:25:b0:cd:96:bc:ed:7b:76:d6:6f:02:3a:
                    c2:3d:a7:56:67:c5:ce:3d:94:88:06:35:bf:a9:61:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6A:C2:78:82:7D:92:01:81:C8:C0:AF:62:E2:D9:39:50:DB:57:45
            X509v3 Authority Key Identifier:
                keyid:1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:7b:70:01:38:05:6c:1a:5c:d2:b2:ff:26:90:e0:17:39:35:
         2d:f6:9d:85:57:c3:90:b5:f8:80:d0:ec:8e:2e:ed:73:34:d8:
         f6:41:5e:b7:f1:d6:df:36:15:06:81:c3:16:1a:6f:b7:c2:76:
         33:10:41:e6:35:37:6e:2c:0d:28:be:5a:24:90:89:11:c0:bc:
         4e:d6:81:48:76:6d:83:50:b1:08:17:d8:24:f6:d7:56:f5:db:
         b9:af:8a:6e:47:75:7f:ed:d1:61:6d:43:bd:ce:5a:09:1a:7c:
         96:02:b5:b7:fe:07:ae:50:37:97:d6:28:88:7b:67:2e:1a:96:
         1b:88:0e:84:77:37:5f:24:da:db:ce:50:8b:53:22:0c:5d:20:
         d1:16:a7:66:8a:85:0a:45:ce:bf:c6:85:6e:34:91:32:c3:b6:
         3a:2b:b9:0d:12:4c:f8:38:70:9e:90:54:75:69:ed:4c:7f:13:
         04:ac:89:0a:3c:e7:92:5f:13:84:89:0a:c1:02:ed:0a:6c:0a:
         eb:f7:80:6c:20:6d:eb:2e:cc:b7:a1:e8:64:36:80:22:8e:cb:
         51:8e:e2:31:1a:ca:42:ef:c8:09:5d:a4:d2:89:58:aa:8e:2b:
         dc:a8:57:c1:52:fc:38:47:b1:5d:2b:24:77:18:00:c6:73:01:
         c2:30:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:16 2026 by rpki-client