This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
File:                     FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json)
Hash identifier:          BcXSVz4muUrcUCZ6DkzTKfbylH+uE1jg1bFc5g2ugpI=
Subject key identifier:   C9:95:E2:0E:CF:C2:FF:EA:6D:FC:44:EB:5E:FD:37:DA:37:57:9E:6E
Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
Certificate issuer:       /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Certificate serial:       0CB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
Manifest number:          164A
Signing time:             Sat 24 Jan 2026 17:58:47 +0000
Manifest this update:     Sat 24 Jan 2026 17:58:47 +0000
Manifest next update:     Sat 31 Jan 2026 17:58:47 +0000
Files and hashes:         1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: oU6bicVWxgbJF/+7X4Yyb3dFgcWHQN7h/NYZsTbnm0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
                          rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3251 (0xcb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
        Validity
            Not Before: Jan 24 17:58:47 2026 GMT
            Not After : Jan 31 17:58:47 2026 GMT
        Subject: CN=69750857-4bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6d:ce:01:b4:9f:bc:ac:ee:c5:7b:c9:ed:a5:
                    8b:15:a9:17:4e:38:f2:d3:68:24:20:1f:28:76:47:
                    99:de:a1:6c:95:3a:3e:9a:26:14:3d:65:e8:7a:50:
                    b0:c9:ae:af:0d:d3:4c:c6:50:93:75:19:90:02:82:
                    37:fd:36:1f:b0:f1:d7:73:c8:69:33:7f:65:4e:c7:
                    08:5c:4a:e2:49:c8:85:82:cf:4a:fc:f9:9e:a6:21:
                    48:76:5d:e7:b1:68:40:bc:f0:f4:7e:3b:d4:8c:d7:
                    1f:ba:de:fa:79:d2:30:e0:6b:f2:99:9a:2e:33:45:
                    bc:61:fe:c0:73:7c:1c:c7:c5:1f:3c:a0:7f:e0:ce:
                    1a:a0:95:f9:e7:e7:7c:72:41:dc:9f:28:34:4f:c5:
                    2f:eb:2b:8d:a5:3a:6d:9f:3c:84:66:31:d8:21:d1:
                    4a:db:7c:da:40:82:4c:85:63:b6:2f:e7:94:5a:5e:
                    1a:80:b1:49:27:2c:d2:f7:df:e6:f5:88:4d:13:55:
                    7e:71:74:b2:e0:e9:9b:16:28:b9:ac:5e:f2:a1:a1:
                    57:6f:5e:69:af:3a:2a:a5:7d:41:ee:17:3d:db:d6:
                    46:12:90:91:f4:f1:22:07:1d:96:12:3e:3f:f3:5e:
                    e3:98:ab:21:87:51:e5:36:f9:b3:c5:fd:58:82:23:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:95:E2:0E:CF:C2:FF:EA:6D:FC:44:EB:5E:FD:37:DA:37:57:9E:6E
            X509v3 Authority Key Identifier:
                keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d4:85:5c:37:f0:aa:70:43:ab:c9:c2:76:68:d3:c4:78:bd:
         47:13:de:9e:25:e2:e0:ff:75:37:63:fd:95:d6:48:8d:b0:54:
         6a:09:a0:42:44:5b:74:0a:02:1e:dd:3c:bd:87:ef:f2:a7:94:
         02:86:23:36:50:76:b2:3f:c5:bc:5a:f0:f4:39:94:b6:de:4e:
         64:63:7f:36:d9:aa:9a:3b:ca:e6:6e:23:50:30:aa:69:54:15:
         d7:a5:56:bb:e1:26:91:2f:43:9d:91:62:6d:4f:05:05:08:66:
         93:db:4a:bc:0c:af:b0:d7:52:ab:2b:9a:d3:b4:e7:d9:2f:14:
         f7:b9:91:5e:97:1d:8c:9c:ca:42:80:aa:f8:33:d7:d1:e2:94:
         56:81:4e:36:45:dd:9f:95:32:f3:3d:6e:51:62:c8:20:33:93:
         65:ce:8e:31:90:06:84:98:c5:32:22:d6:31:08:50:81:85:ab:
         54:5f:be:f6:46:b1:2d:9b:17:19:b7:70:96:01:d6:6b:84:4c:
         d8:fe:fc:ce:d8:f1:be:75:66:ab:1e:e6:c8:bf:c7:f3:8d:e4:
         26:d5:0b:30:16:15:8d:dc:e2:86:44:39:5d:8d:c9:e7:98:78:
         ea:47:37:fd:6a:83:9c:7c:8d:e1:fd:45:97:1e:02:2c:8c:6d:
         7f:87:de:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThGMDgxMTAvBgNVBAUTKDE2MTNEMTE1RUQ4M0EwNkU5N0E3M0RBRTU1MTZCQTFC
Njg0RUVDMDkwHhcNMjYwMTI0MTc1ODQ3WhcNMjYwMTMxMTc1ODQ3WjAYMRYwFAYD
VQQDDA02OTc1MDg1Ny00YmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkG3OAbSfvKzuxXvJ7aWLFakXTjjy02gkIB8odkeZ3qFslTo+miYUPWXoelCw
ya6vDdNMxlCTdRmQAoI3/TYfsPHXc8hpM39lTscIXEriSciFgs9K/PmepiFIdl3n
sWhAvPD0fjvUjNcfut76edIw4GvymZouM0W8Yf7Ac3wcx8UfPKB/4M4aoJX55+d8
ckHcnyg0T8Uv6yuNpTptnzyEZjHYIdFK23zaQIJMhWO2L+eUWl4agLFJJyzS99/m
9YhNE1V+cXSy4OmbFii5rF7yoaFXb15przoqpX1B7hc929ZGEpCR9PEiBx2WEj4/
817jmKshh1HlNvmzxf1YgiNxlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmV4g7P
wv/qbfxE6179N9o3V55uMB8GA1UdIwQYMBaAFBYT0RXtg6Bul6c9rlUWuhtoTuwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3
RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9HNlhwejJ1VlJhNkcyaE83
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZoUFJGZTJEb0c2WHB6MnVWUmE2RzJoTzdBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9H
NlhwejJ1VlJhNkcyaE83QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAn1IVcN/CqcEOrycJ2aNPEeL1HE96eJeLg/3U3Y/2V1kiNsFRqCaBC
RFt0CgIe3Ty9h+/yp5QChiM2UHayP8W8WvD0OZS23k5kY3822aqaO8rmbiNQMKpp
VBXXpVa74SaRL0OdkWJtTwUFCGaT20q8DK+w11KrK5rTtOfZLxT3uZFelx2MnMpC
gKr4M9fR4pRWgU42Rd2flTLzPW5RYsggM5Nlzo4xkAaEmMUyItYxCFCBhatUX772
RrEtmxcZt3CWAdZrhEzY/vzO2PG+dWarHubIv8fzjeQm1QswFhWN3OKGRDldjcnn
mHjqRzf9aoOcfI3h/UWXHgIsjG1/h94p
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:56 2026 by rpki-client