This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
File:                     hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json)
Hash identifier:          6I4VONf49J6ByPAdXu2J6vOPgorJetbfA/8WImhyfG4=
Subject key identifier:   50:A7:6D:50:77:D3:E1:2B:F3:D1:23:64:98:70:98:4D:AD:EA:95:26
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Certificate issuer:       /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial:       02F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
Manifest number:          02EF
Signing time:             Sun 25 Jan 2026 00:27:14 +0000
Manifest this update:     Sun 25 Jan 2026 00:27:13 +0000
Manifest next update:     Sun 01 Feb 2026 00:27:13 +0000
Files and hashes:         1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: wNVkA0qF/dEOjFzkW1sJ1wWJ+BStINN4fyzBF+blwfw=)
                          2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: ev+YjLUEFuV9synNnilJkgFER39S40N1zyX1CzULmag=)
                          3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: Ia6tlVbLIeqz/TCnxF60wA233bLpbVn+2ya+t4NGuKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
                          rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
        Validity
            Not Before: Jan 25 00:27:13 2026 GMT
            Not After : Feb  1 00:27:13 2026 GMT
        Subject: CN=69756362-72fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:b2:0a:8a:78:88:6a:d3:88:6b:2c:ef:ab:
                    22:fa:36:70:0c:a6:a6:14:5b:f1:eb:a3:e6:a9:c5:
                    6c:68:d5:66:81:cb:95:63:92:13:64:b6:a5:f6:a5:
                    f1:b5:64:1f:96:b7:1a:d9:4c:16:bf:96:5b:ae:4c:
                    ec:3c:2f:dc:3b:05:b1:e9:73:62:1b:65:33:02:f8:
                    c9:15:e1:50:5e:80:8d:9b:63:3d:10:95:d0:07:b0:
                    26:6c:87:18:a9:4a:89:a5:40:2e:30:75:ef:e7:07:
                    47:4b:8c:1c:09:94:9c:2a:b3:57:f6:5a:50:a1:51:
                    cd:6b:6c:d2:63:59:f3:a5:d7:7e:52:c3:eb:f8:5c:
                    b9:26:c5:52:2d:b7:20:d8:74:c9:41:d1:f2:8b:26:
                    68:64:77:80:7b:0c:10:19:22:3a:ff:e1:ba:ff:94:
                    07:ab:5f:e5:b1:92:2d:09:fb:90:c5:e8:c1:d5:77:
                    5e:cf:00:74:30:61:96:d8:be:41:41:b3:3e:a8:07:
                    a0:1b:20:c3:f9:56:92:55:21:ce:b1:6c:b8:f6:c3:
                    f9:9c:3a:f1:8c:d1:e7:b9:f7:b5:48:dc:36:d6:27:
                    e4:ba:8f:c6:6c:b2:c6:cb:96:ed:f0:ae:08:5d:cd:
                    20:aa:5d:07:c9:bc:1e:3b:5e:0d:26:9a:3d:96:ed:
                    48:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A7:6D:50:77:D3:E1:2B:F3:D1:23:64:98:70:98:4D:AD:EA:95:26
            X509v3 Authority Key Identifier:
                keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:bf:19:59:62:1e:2d:b5:61:0e:03:e9:44:f7:3e:b4:51:
         3f:31:36:cd:3c:93:6d:e2:ee:eb:db:9a:0a:fd:d2:11:57:8f:
         24:71:c2:91:05:b4:24:e2:dd:50:fe:be:cd:b5:05:d0:7c:3d:
         f2:b4:d9:7a:41:34:09:9b:61:c9:3a:2d:76:ed:24:16:ed:4b:
         a1:cd:57:90:54:13:73:d6:87:67:91:b8:a3:cc:7b:7f:95:aa:
         2b:00:6b:cf:c5:2d:ef:35:d0:5d:1c:dc:2b:4c:87:42:5b:4b:
         32:1c:3d:e8:b9:ae:7a:d2:34:cc:e0:8f:8e:7a:d9:32:b7:e4:
         96:f1:34:0d:5f:a7:b8:a6:31:09:89:61:2f:0c:4a:fa:ee:e0:
         7c:91:cd:a4:73:7b:1a:5c:cd:71:14:6b:6a:24:8f:58:e3:b1:
         da:d8:ac:56:77:84:a5:a5:be:a3:15:a8:91:c0:07:0b:30:e7:
         19:6c:df:75:09:8c:ae:99:10:b1:e8:6d:6b:4b:1b:32:65:85:
         cc:90:dc:8e:82:57:85:37:0a:e1:5a:a8:de:3e:64:24:0e:f3:
         1c:12:7f:4b:77:08:2f:64:a9:86:40:2a:e2:0c:16:a0:d7:6d:
         f8:0d:a0:ba:f5:38:68:88:03:1d:db:8e:b7:d6:2e:3f:b5:26:
         c5:f8:f4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:10 2026 by rpki-client