This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File:                     dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier:          tp+qql9VodQokj+Pb3cBPTi8ktDSvb0ZAfL7KkXz4XE=
Subject key identifier:   36:9B:16:E8:A9:3D:FB:C9:70:39:0C:9A:4C:0D:2E:BD:98:14:A6:8F
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number:          01D4
Signing time:             Sun 25 Jan 2026 02:09:16 +0000
Manifest this update:     Sun 25 Jan 2026 02:09:16 +0000
Manifest next update:     Sun 01 Feb 2026 02:09:16 +0000
Files and hashes:         1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: YsibrVGvObHPzZYTgo7XBl4X44Y4c2LcvpBX2gSBq7k=)
                          2: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: pvpEbEfqZdjndo8RBto5eKruE3bPcyFLbyyWJ+EWD5A=)
                          3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: XVtV3NO49JrPSfLphj8CdUoavYWmfkFqZk0gohfrU5A=)
                          4: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 8C0fcjEA2IcfNRUG4kX2e0bXX39iEcsL5wzsa0/yvL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Jan 25 02:09:16 2026 GMT
            Not After : Feb  1 02:09:16 2026 GMT
        Subject: CN=69757b4c-2305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:45:db:49:c8:fb:6e:f4:3d:0c:03:a6:98:
                    37:83:76:c7:38:44:e9:2d:90:f5:1d:af:cc:79:73:
                    16:17:ce:25:e5:0f:26:32:a7:1b:ec:ec:02:b6:a8:
                    0f:cb:38:51:8d:ea:44:c8:55:df:00:86:a1:bc:d9:
                    61:04:88:89:55:60:7f:da:46:75:bc:41:8e:15:23:
                    79:de:61:87:ff:46:a0:67:ed:7f:e0:fd:ba:62:73:
                    66:4a:39:37:05:07:03:b1:bc:ca:c0:df:1b:cb:a3:
                    1c:6f:77:31:10:33:74:ce:85:76:ea:fd:ba:6a:7e:
                    3c:65:6c:c7:65:26:55:04:c9:c8:f7:5a:9d:5d:4e:
                    47:74:59:f6:35:20:e6:7f:a8:a3:02:55:c2:b4:c6:
                    2e:6c:24:7f:05:a6:f7:ad:46:4a:b4:df:28:69:77:
                    c3:aa:70:54:c3:3e:41:b7:06:b1:7c:68:ad:09:b2:
                    8c:a5:58:11:a5:14:50:d4:eb:62:f5:cd:1e:29:00:
                    b1:e2:28:89:42:ac:cf:a0:48:00:54:ea:e4:d0:52:
                    68:d8:6c:3e:48:4c:9a:b5:70:cf:75:5f:9f:0d:60:
                    a2:47:bf:ba:34:20:28:82:4b:ab:ec:b5:46:6e:84:
                    1b:8e:75:ca:64:42:e6:ea:c1:0c:40:fa:d8:47:e7:
                    ab:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9B:16:E8:A9:3D:FB:C9:70:39:0C:9A:4C:0D:2E:BD:98:14:A6:8F
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:24:46:28:3c:e1:03:74:24:c8:86:9f:54:94:56:1e:6d:c1:
         ba:79:09:41:ea:15:1b:d3:64:2c:1d:68:c9:b6:a1:05:7d:56:
         99:6b:66:ed:12:58:e6:f4:ca:1d:62:b9:b6:93:16:18:f0:5a:
         79:66:19:6d:e3:67:a4:4e:6d:4c:24:72:15:a5:1a:18:cc:be:
         7f:10:ae:44:c3:8d:d8:b3:94:11:dd:74:90:bc:56:2f:18:09:
         98:e9:07:ae:a9:13:1f:09:99:00:98:8f:09:b1:54:58:ef:5b:
         7e:6c:3d:b5:04:6a:74:ca:cc:41:56:39:54:23:de:1f:4b:f3:
         17:9b:f2:b0:a4:f6:f8:28:b3:03:46:f6:02:0a:eb:f5:d7:39:
         83:ca:b1:3c:91:6b:88:0b:c3:1d:13:30:22:00:54:97:7d:1c:
         45:20:e4:76:b6:25:75:92:6f:9f:da:89:02:5e:e1:38:39:a7:
         a7:7f:0e:d3:69:f9:0f:0a:ad:ac:2e:65:e6:79:29:cc:62:cd:
         ce:11:e9:ae:c0:56:93:20:03:99:33:0b:b5:06:3c:fb:41:a8:
         68:b4:ad:81:13:c4:fe:26:df:55:e2:3c:98:9b:29:8c:06:8c:
         89:7d:af:b6:a4:ae:5c:bf:0d:7a:58:2b:62:bf:e0:c0:2b:45:
         f7:74:0a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:14 2026 by rpki-client