This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
File:                     huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json)
Hash identifier:          EYmgo02M+xY/o7I9MFdefTsM0qg9+Jd0gvGCKgcyZ18=
Subject key identifier:   2D:45:1C:2F:36:81:7A:A5:43:8C:82:2F:F5:1D:59:93:9F:F9:95:4F
Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
Certificate issuer:       /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
Manifest number:          0115
Signing time:             Sun 25 Jan 2026 04:07:37 +0000
Manifest this update:     Sun 25 Jan 2026 04:07:37 +0000
Manifest next update:     Sun 01 Feb 2026 04:07:37 +0000
Files and hashes:         1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: 5aM27+REBus7YqhJ9DJhlteQqfZFbGuWs0DrQjz+w9M=)
                          2: D0E3A43EABCF11F0B7733310C4F9AE02.roa (hash: MsUqurlHcW9/f7ZtraQEQ/2qpmD+6AtSK2TKciX51Yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl
                          rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
        Validity
            Not Before: Jan 25 04:07:37 2026 GMT
            Not After : Feb  1 04:07:37 2026 GMT
        Subject: CN=69759709-6d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:90:00:43:e6:27:ca:b1:04:87:de:d9:16:d3:
                    4c:c3:1c:45:62:ab:f5:2c:25:a2:4a:75:f7:d9:92:
                    1b:bb:fd:b0:da:d3:6b:2c:de:c3:95:ee:6b:94:8d:
                    d5:09:b1:f6:dc:bf:d6:c9:8e:25:01:1f:8b:77:52:
                    23:c8:4b:f3:d4:9e:11:72:75:ff:6a:88:bf:63:7c:
                    a8:c3:08:f6:a1:33:e1:49:37:cb:39:03:96:b8:c0:
                    db:9c:26:71:22:1b:77:ad:27:6d:01:34:e2:17:95:
                    2d:64:89:a1:4c:b6:a0:84:a5:77:c0:d0:21:34:58:
                    c4:08:15:93:69:1b:cd:61:a1:ca:96:c0:bc:2f:e1:
                    39:e9:19:88:3e:59:32:82:14:88:74:7f:42:bf:ce:
                    57:e2:f1:49:6a:17:40:5a:b2:46:51:87:af:75:29:
                    41:74:59:1b:06:ea:d9:5d:62:62:9c:bd:0b:4c:8e:
                    5d:af:3f:1e:07:42:fa:d4:5c:c6:2d:f5:17:99:ae:
                    7a:e4:46:7c:af:09:3a:5f:1e:6b:3d:d0:3a:14:a9:
                    22:dc:21:6a:cf:4d:c9:e5:2f:0d:4e:8d:34:4e:26:
                    35:5a:5d:ff:c3:7c:8e:6e:45:75:83:1a:64:ca:c4:
                    38:5d:c8:fa:d7:d3:6f:fe:d4:74:73:7c:09:3e:58:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:45:1C:2F:36:81:7A:A5:43:8C:82:2F:F5:1D:59:93:9F:F9:95:4F
            X509v3 Authority Key Identifier:
                keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d2:c2:14:f2:0f:b2:7a:a6:62:9b:d2:eb:f3:41:4c:e9:ef:
         fb:af:33:01:8f:ff:89:cf:61:bb:3c:ce:1d:21:75:0d:1d:37:
         95:be:48:cf:81:bc:de:12:bc:02:4e:5f:b3:92:9c:fa:a9:f9:
         1d:54:20:19:db:00:76:7c:a6:91:97:f8:b4:c3:98:69:14:fb:
         bb:88:81:76:2d:49:30:2a:fb:69:12:08:99:f9:06:c1:17:cc:
         e7:c9:4c:31:d4:4b:09:98:90:7c:99:4b:6c:c4:06:67:bc:4e:
         ac:e6:a8:df:2e:88:54:43:eb:9a:3a:c4:db:df:77:1f:01:7f:
         66:87:32:92:6c:63:3b:44:9f:60:cc:04:40:b7:bf:50:cb:c0:
         36:00:70:5d:97:c1:5c:f1:91:ab:6d:2f:12:ad:ce:ff:a9:22:
         d3:87:82:04:0d:6d:87:92:31:ee:cb:21:7c:29:2d:74:de:4e:
         7c:8f:57:77:92:1f:60:67:84:b2:a8:1f:df:08:a9:02:d8:86:
         fb:f4:46:ae:76:cb:23:69:68:d8:49:22:fb:01:98:da:36:9c:
         13:9b:12:33:10:f6:f1:dd:57:68:51:38:d5:ec:8b:95:33:9f:
         09:2d:6e:d6:a6:34:eb:bf:ae:fd:45:38:88:0d:8a:b4:94:22:
         6f:7a:18:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx
Mzg5NUUyOUEwHhcNMjYwMTI1MDQwNzM3WhcNMjYwMjAxMDQwNzM3WjAYMRYwFAYD
VQQDDA02OTc1OTcwOS02ZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5JAAQ+YnyrEEh97ZFtNMwxxFYqv1LCWiSnX32ZIbu/2w2tNrLN7Dle5rlI3V
CbH23L/WyY4lAR+Ld1IjyEvz1J4RcnX/aoi/Y3yowwj2oTPhSTfLOQOWuMDbnCZx
Iht3rSdtATTiF5UtZImhTLaghKV3wNAhNFjECBWTaRvNYaHKlsC8L+E56RmIPlky
ghSIdH9Cv85X4vFJahdAWrJGUYevdSlBdFkbBurZXWJinL0LTI5drz8eB0L61FzG
LfUXma565EZ8rwk6Xx5rPdA6FKki3CFqz03J5S8NTo00TiY1Wl3/w3yObkV1gxpk
ysQ4Xcj619Nv/tR0c3wJPlgviQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1FHC82
gXqlQ4yCL/UdWZOf+ZVPMB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB
REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r
bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQ0sIU8g+yeqZim9Lr80FM6e/7rzMBj/+Jz2G7PM4dIXUNHTeVvkjP
gbzeErwCTl+zkpz6qfkdVCAZ2wB2fKaRl/i0w5hpFPu7iIF2LUkwKvtpEgiZ+QbB
F8znyUwx1EsJmJB8mUtsxAZnvE6s5qjfLohUQ+uaOsTb33cfAX9mhzKSbGM7RJ9g
zARAt79Qy8A2AHBdl8Fc8ZGrbS8Src7/qSLTh4IEDW2HkjHuyyF8KS103k58j1d3
kh9gZ4SyqB/fCKkC2Ib79EaudssjaWjYSSL7AZjaNpwTmxIzEPbx3VdoUTjV7IuV
M58JLW7WpjTrv679RTiIDYq0lCJvehhO
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:44 2026 by rpki-client