This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File:                     H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier:          y7CMLDqnO7Wnov/i0rzxgLHIAXm3SmtUhl4zt/hgJ1A=
Subject key identifier:   AB:F8:DB:98:37:D3:DD:90:C4:58:C1:A5:E0:87:1D:5C:61:98:18:43
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer:       /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial:       0CB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number:          0C9F
Signing time:             Sat 24 Jan 2026 18:04:01 +0000
Manifest this update:     Sat 24 Jan 2026 18:04:00 +0000
Manifest next update:     Sat 31 Jan 2026 18:04:00 +0000
Files and hashes:         1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: ojXm4G63WvzMHRKFsDjUya1C3yDehXzxXs4kGfaFIno=)
                          2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: jjQzstnlPYenRZWamhU8+OP/S56HuWE5rPwPEoYqLOI=)
                          3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: FwxCipQAsBk9UBv8EDrb+Vo/Shz8I+uuiBIqO9LmFMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
                          rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3248 (0xcb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
        Validity
            Not Before: Jan 24 18:04:00 2026 GMT
            Not After : Jan 31 18:04:00 2026 GMT
        Subject: CN=69750991-702e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:74:ff:80:66:0f:6f:fa:e4:2e:45:17:0c:
                    75:fc:38:01:be:1a:7f:5b:85:c6:df:42:22:d1:d6:
                    b2:a4:5b:24:5a:78:f1:db:89:99:c9:87:d8:f1:65:
                    2e:76:3d:20:08:39:b0:2e:7c:55:4b:f5:16:be:d4:
                    d6:7b:d3:68:49:95:2d:cc:39:7e:12:12:d9:a9:0e:
                    e9:21:e3:9e:a6:f5:fa:c4:16:57:6b:77:a0:8a:e1:
                    20:30:3f:1b:b4:66:23:46:c7:da:d4:02:15:95:b2:
                    30:21:0e:69:4b:9c:7d:a9:c0:9a:cf:18:db:02:72:
                    39:38:15:fc:76:b2:b1:ac:b9:81:6c:e5:82:a7:5f:
                    ed:8e:ed:db:f3:19:d6:9b:8c:b1:43:80:b1:00:36:
                    c0:65:9f:3f:91:4e:30:76:f8:58:1b:1c:05:6e:98:
                    d7:93:4c:90:d9:07:14:33:f5:ce:53:33:62:46:fe:
                    5b:3a:e2:0d:50:f6:6c:cf:58:e3:15:b6:2a:9e:fb:
                    37:64:3a:12:3e:f6:2b:40:39:1e:ed:3e:a6:48:84:
                    5f:93:13:3f:8b:04:ae:e4:e6:8a:b8:55:b4:11:75:
                    da:b3:2c:d5:0f:b0:eb:2c:6c:16:2a:0c:49:68:b9:
                    d0:28:9e:a0:73:ae:1f:7d:38:70:dc:7d:42:79:e7:
                    c3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F8:DB:98:37:D3:DD:90:C4:58:C1:A5:E0:87:1D:5C:61:98:18:43
            X509v3 Authority Key Identifier:
                keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9b:41:72:8c:ae:71:da:f3:dc:44:4f:0b:ce:58:f9:68:65:
         07:83:c4:64:b2:d3:11:c7:2d:45:31:06:31:87:40:08:7a:ec:
         e1:e2:21:19:41:09:43:cc:be:16:4f:c2:d6:61:cf:51:76:c4:
         8a:79:72:e4:6e:f6:5a:83:e3:4b:fb:9b:ca:c8:e7:01:15:3b:
         2d:ea:10:af:7b:35:f0:8e:ee:14:12:2f:f1:86:f0:73:93:8e:
         34:9a:47:61:09:93:4a:ac:59:f1:41:b9:d0:06:15:43:10:db:
         93:c6:72:c7:97:bd:9e:05:d2:1c:60:e9:2e:d8:df:fa:53:b0:
         4b:d7:05:fb:7a:7f:62:f4:eb:5c:d1:81:b5:d0:cd:6d:14:af:
         15:87:86:4b:e2:68:54:47:72:30:c5:3c:3f:e5:93:76:66:73:
         61:fb:7f:b0:f5:ca:30:51:5b:d2:06:77:47:c1:d0:b7:b7:dd:
         03:01:5e:75:6f:6b:0e:8c:d8:28:be:87:1f:8d:f7:12:84:a6:
         9d:39:d0:0a:0b:3f:9a:58:81:46:a7:84:4f:95:22:f2:cc:d3:
         78:e4:8e:01:e5:30:6b:fe:9c:9d:6e:44:1c:14:df:cc:f6:13:
         b6:78:11:fa:88:86:e7:93:ee:25:87:bc:0d:33:da:bc:5e:3b:
         bb:7c:e6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:04:07 2026 by rpki-client