This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
File:                     hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json)
Hash identifier:          roTHLx9QLDaeiUTyEH3qt93q/az7g+y14Vj3z/KDtD4=
Subject key identifier:   98:2C:C5:A9:DF:A5:2C:18:3E:95:AC:12:27:05:3C:D4:08:34:37:F1
Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF
Certificate issuer:       /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
Manifest number:          0BDE
Signing time:             Sat 24 Jan 2026 18:40:19 +0000
Manifest this update:     Sat 24 Jan 2026 18:40:18 +0000
Manifest next update:     Sat 31 Jan 2026 18:40:18 +0000
Files and hashes:         1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: A0yJFH/MOXmNBhRanKPtApjH553EOoqKaL61dYFiyGo=)
                          2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: rsXupeO8EVGQ/M7qesQZfS0Ho6k/jy/+B1i/0dc3Rfs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl
                          rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
        Validity
            Not Before: Jan 24 18:40:18 2026 GMT
            Not After : Jan 31 18:40:18 2026 GMT
        Subject: CN=69751213-33ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:8c:83:f4:6a:34:95:47:f1:18:8d:df:3a:
                    d4:f6:91:76:4c:4f:52:12:d3:f5:67:72:d4:c2:57:
                    9d:32:da:dc:e3:b8:2a:d3:3f:8f:b2:95:d5:c2:11:
                    7a:16:8d:1d:e9:7c:75:8f:9e:9d:fc:54:16:f9:12:
                    2a:e3:54:80:f4:90:bd:a2:d9:7b:5a:17:1d:cb:04:
                    ad:61:b3:f9:bf:8c:07:b3:16:07:b4:81:39:25:11:
                    fb:8a:85:cd:bc:b6:7e:2b:1c:10:0b:c9:b3:4d:38:
                    1c:3d:2b:bb:fb:5a:44:d5:dc:2a:83:53:72:99:6b:
                    b5:79:d4:79:57:da:d6:69:46:50:b0:6d:0b:91:e7:
                    1e:87:6b:96:63:b2:12:45:4e:9c:ec:ac:46:10:9b:
                    6d:65:20:9b:fd:b4:06:21:bc:2a:de:2f:19:9a:46:
                    f9:25:f2:dd:4c:3a:c7:2b:bd:ff:b7:b4:f5:63:41:
                    76:96:79:e6:1c:5a:a4:e0:6b:2b:c5:02:f3:bd:97:
                    38:c4:a3:6f:e5:16:a0:1b:80:3e:16:83:b6:ba:b7:
                    38:b9:8b:75:f9:3a:86:fd:cf:2d:33:66:11:d3:c5:
                    ac:88:29:28:e8:40:28:19:69:ff:d7:6b:56:d5:f7:
                    8a:f2:a5:70:e8:85:32:61:26:79:6b:41:ca:3d:a8:
                    12:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2C:C5:A9:DF:A5:2C:18:3E:95:AC:12:27:05:3C:D4:08:34:37:F1
            X509v3 Authority Key Identifier:
                keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9d:51:08:47:c1:19:58:04:18:9d:3c:d5:7d:6e:67:c4:a4:
         1a:a8:ef:75:9c:51:3d:48:9d:05:30:4c:ac:c5:69:23:8b:ee:
         68:eb:8f:b5:a1:cd:b4:60:17:95:1d:b6:83:98:b5:78:b0:8d:
         ca:22:54:f4:f0:63:13:66:5d:1e:54:15:f7:92:8d:d7:27:97:
         4d:a8:51:05:39:4e:b1:e5:25:11:2a:c0:4c:1e:6a:40:52:8b:
         18:59:f3:a9:41:e3:d2:3e:3a:07:57:44:91:76:17:df:04:07:
         2b:3e:11:a3:02:ed:b2:63:4a:81:03:ad:d7:ad:0b:d4:39:d5:
         76:da:f8:1c:4b:87:ea:80:8e:37:19:30:bd:b5:b9:62:9f:e4:
         c0:1f:de:90:6a:a8:2d:fe:31:d9:14:b8:62:7b:e8:df:1f:51:
         f8:cc:b4:a7:c0:81:93:49:4d:cf:e5:30:24:7a:bc:8a:a5:2d:
         25:09:90:32:a2:0c:d3:6c:23:f3:5d:6b:8e:56:62:ac:d3:4e:
         a4:25:0e:3f:87:d1:6b:4a:15:35:21:03:6b:b6:3d:84:b5:6e:
         06:a3:72:01:7b:fa:67:fb:92:ae:87:98:43:9c:5f:80:c1:fa:
         3e:ce:07:e4:d5:ec:ab:7f:76:ea:6b:56:79:81:62:08:f7:71:
         56:b5:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:15 2026 by rpki-client