This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
File:                     HIAVCsljCYTTjMb1nD7MdRsl8-c.mft (raw, json)
Hash identifier:          FxTcBGMStoPpV5coZgDN3yS6iO8t4UN+92GY5C21Fxk=
Subject key identifier:   49:CB:04:72:48:B1:D3:33:25:41:D0:6B:A9:3A:51:44:84:81:51:FA
Authority key identifier: 1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7
Certificate issuer:       /CN=A915A549/serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
Manifest number:          C1
Signing time:             Fri 23 Jan 2026 05:03:55 +0000
Manifest this update:     Fri 23 Jan 2026 05:03:55 +0000
Manifest next update:     Fri 30 Jan 2026 05:03:55 +0000
Files and hashes:         1: HIAVCsljCYTTjMb1nD7MdRsl8-c.crl (hash: maV6q3mxTsYjBjXNqTSr0I8TQwMBECEmgyYOy+eXRqo=)
                          2: E9B51C0AD24411EFBD747915C4F9AE02.roa (hash: h7LkbeKD0rtGSmQTm/4/z1tqrdfuxl9pJq7z33t/Gys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl
                          rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A549, serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7
        Validity
            Not Before: Jan 23 05:03:55 2026 GMT
            Not After : Jan 30 05:03:55 2026 GMT
        Subject: CN=6973013b-84e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:d5:ce:f8:00:2a:4a:ad:6e:2e:41:60:6d:
                    54:d1:10:c6:34:d3:44:8b:37:df:8b:e7:84:b6:77:
                    e6:75:ae:8c:56:ef:87:b6:24:3a:55:ae:b8:5f:67:
                    ab:e0:2d:56:3f:49:58:36:56:35:e0:7c:bf:24:77:
                    a4:91:67:1b:86:c0:35:60:b1:61:bf:95:a5:7c:87:
                    49:90:9c:46:d8:3f:99:e4:2f:b4:b3:e2:78:4d:cf:
                    08:a7:ed:fa:f8:5f:dc:3d:05:4a:a5:1c:27:ef:6a:
                    8a:07:16:2b:91:a4:b5:e8:0c:0a:5f:4d:3a:0f:c0:
                    bb:57:dd:fa:c6:a6:f9:a0:32:f1:a1:00:82:76:cc:
                    38:a3:1f:0f:f1:92:0f:0e:78:2e:a9:8b:a8:01:e7:
                    ad:73:1d:fc:11:32:9b:65:0d:c7:4b:23:aa:db:fd:
                    ad:40:c9:58:25:6a:ae:38:48:84:09:ba:f5:05:de:
                    68:d2:c9:ce:a8:e6:eb:5e:5c:32:58:b4:4d:05:7c:
                    aa:93:4f:3b:e9:07:36:42:76:e7:ad:cd:2f:31:34:
                    74:5c:8b:20:66:50:18:72:77:fc:dc:f4:4c:53:3e:
                    d2:61:a1:f0:69:28:78:bf:70:4a:d7:fd:e2:dc:0a:
                    c1:c5:ac:1f:ba:6b:2d:29:12:15:ce:4a:76:c7:d4:
                    08:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CB:04:72:48:B1:D3:33:25:41:D0:6B:A9:3A:51:44:84:81:51:FA
            X509v3 Authority Key Identifier:
                keyid:1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3b:d0:71:da:08:bb:38:88:8e:be:f4:0f:bb:2c:27:af:cb:
         4c:37:7a:93:b2:75:a9:2a:cd:9a:3f:26:bb:fb:bf:a6:e8:26:
         40:c5:f7:ec:e7:f9:13:7d:b4:f8:ea:30:3b:69:53:f1:2f:20:
         e9:e9:4f:12:57:ac:9d:61:a6:2a:4d:82:2f:ba:9b:09:92:53:
         0d:62:b5:a0:79:3d:f2:4b:5c:5d:08:0f:58:9c:0b:e3:03:1b:
         6f:f1:2b:eb:68:1f:fb:30:47:ef:be:fc:d4:4f:c3:47:72:4b:
         0d:cb:32:d1:4d:25:d1:9b:52:58:80:d4:71:1d:4a:fe:48:e6:
         cc:42:6f:f9:11:bb:37:90:44:43:88:55:d2:9e:46:ba:aa:b1:
         ab:4a:1c:45:01:4d:ae:9a:e1:b8:a7:86:f5:06:3e:a3:9e:49:
         07:9f:7d:d4:c9:42:22:cf:1d:cb:42:83:6a:5c:7d:b9:10:5f:
         f0:74:ce:f4:21:52:c1:af:5f:08:4e:a5:72:0d:b1:41:5d:6a:
         35:12:38:6c:0a:ce:a1:8e:68:75:11:90:71:af:82:d5:82:0f:
         96:08:e0:26:7f:79:d9:1b:37:2d:d1:8e:80:fa:bd:a9:fa:71:
         4e:db:48:85:7a:0a:e4:48:9f:a4:e5:79:29:8d:6c:7a:5d:da:
         75:df:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:03 2026 by rpki-client