This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
File:                     hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json)
Hash identifier:          9iioh1s2KUkYNAkt/bM0qW3IeWpss0yxWyEm0TlbcKU=
Subject key identifier:   5E:52:78:89:9B:15:FB:EE:06:9A:02:92:78:60:1E:32:17:44:03:F6
Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
Certificate issuer:       /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
Manifest number:          01EB
Signing time:             Sun 25 Jan 2026 01:58:29 +0000
Manifest this update:     Sun 25 Jan 2026 01:58:28 +0000
Manifest next update:     Sun 01 Feb 2026 01:58:28 +0000
Files and hashes:         1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: HzfwgxrmF4a5hzIB9KARMuozUzAoGHoBV7yjjz0G3ZM=)
                          2: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: CrmsjWdSH1dRX4gtIVoZxCTBPv++0Trwf39jICU/c/M=)
                          3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: 5/eMUVmevequFuGJFSqiqzgHPak9nF5vFMfMZWfmlQA=)
                          4: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: 3AQgtCiu1AvELGcQ0dN/q4SITzh5GfFFMFmGHpirqhw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
                          rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
        Validity
            Not Before: Jan 25 01:58:28 2026 GMT
            Not After : Feb  1 01:58:28 2026 GMT
        Subject: CN=697578c5-2a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:aa:66:5d:f8:a7:c7:1e:24:fe:ca:9c:64:
                    20:a3:38:86:d4:24:c3:46:a6:3e:b3:c4:06:ed:a1:
                    2b:78:70:97:d2:02:b0:0d:35:0d:6e:c3:41:26:79:
                    81:c4:c5:8a:28:5b:53:33:8a:eb:2c:ea:40:e4:a4:
                    82:a8:7e:0a:d8:f8:e1:45:54:e3:33:b1:3e:a0:5d:
                    fb:f3:07:ea:58:55:66:75:d2:78:66:65:3d:e1:e3:
                    ca:82:c7:8f:9a:45:7c:87:60:04:a4:96:d1:68:74:
                    54:0e:19:1b:1e:2a:03:bc:32:7a:39:4d:ce:3a:1e:
                    3b:7c:8e:a8:84:47:f7:4c:ef:fb:aa:c4:5c:b9:1e:
                    4d:5b:e4:e5:02:78:dc:a3:04:5a:91:8a:db:74:23:
                    fc:a8:7f:09:f8:66:75:5b:55:0b:5c:f0:54:37:6b:
                    8d:a8:4d:25:86:5c:7d:1d:46:71:b6:d5:ef:20:8b:
                    6d:ab:ee:de:48:07:87:34:bb:07:dc:55:ea:1e:7e:
                    e3:8d:63:c0:10:82:fc:0a:53:54:5c:92:60:2a:17:
                    6a:3c:e2:80:ca:89:0d:f2:a0:47:38:5d:7b:e1:f6:
                    52:53:3e:aa:fa:29:33:8a:92:95:ac:c0:f0:3f:7c:
                    38:4b:ac:d7:5b:61:ee:b0:10:9e:16:85:d5:b4:0e:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:52:78:89:9B:15:FB:EE:06:9A:02:92:78:60:1E:32:17:44:03:F6
            X509v3 Authority Key Identifier:
                keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:37:b6:f8:b0:db:87:99:92:47:5b:3f:50:3a:82:7f:82:eb:
         27:f4:31:a8:67:14:77:e5:b2:22:52:32:8b:6c:28:e9:a0:a2:
         42:55:d7:14:84:a0:d3:8a:e7:bd:1f:b5:dc:31:9e:5b:f4:87:
         f0:4f:35:cd:6b:77:4a:4b:a4:ef:4b:a3:b9:11:2f:bb:dc:fd:
         b8:26:3a:f6:2b:13:12:86:3d:60:97:e4:33:89:1b:dc:bd:cb:
         ef:88:5f:95:cf:de:33:4f:4c:6d:92:9d:d7:03:ad:d8:1d:7b:
         c6:e1:cb:62:5d:26:a5:8e:12:ad:61:80:4f:10:5a:fd:17:9e:
         16:5d:b8:e4:a8:11:4a:6f:51:b9:53:fe:2e:e1:7c:2f:b9:bd:
         b3:00:e8:e0:4c:3a:82:3e:6d:66:c1:91:fe:ba:aa:34:6a:cc:
         43:5f:3e:5a:59:d1:f1:bb:ab:6e:9b:5a:3a:a5:50:d7:9b:28:
         52:c5:b1:ef:60:95:16:53:30:63:1a:5b:df:f4:25:7a:18:cc:
         a7:94:7b:40:85:4c:70:bb:6c:60:67:67:3a:0d:e1:81:d9:79:
         31:bd:34:50:bf:66:bf:ab:df:00:cc:8c:be:91:9a:47:2c:05:
         d7:ba:43:df:3e:34:9e:cc:9a:c3:0f:56:fb:05:5a:7a:fd:dd:
         1f:ea:74:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:04:14 2026 by rpki-client