This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
File:                     HgqTik3H07rU9fll3NVeCymMQts.mft (raw, json)
Hash identifier:          nxkjaHBItpAbdd0w8iiAOmeuaDkNwrQ18mbGCUSDOiI=
Subject key identifier:   8C:EA:35:51:41:E9:2E:29:B2:AA:CD:88:B9:BF:7C:EC:B0:E4:72:C9
Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
Certificate issuer:       /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Certificate serial:       0E77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
Manifest number:          0E6B
Signing time:             Sat 24 Jan 2026 17:26:07 +0000
Manifest this update:     Sat 24 Jan 2026 17:26:07 +0000
Manifest next update:     Sat 31 Jan 2026 17:26:07 +0000
Files and hashes:         1: HgqTik3H07rU9fll3NVeCymMQts.crl (hash: 2pWTqY5nfA3KmGdbWlXV7/7X6azfEM/eJKvSLV0Q/RQ=)
                          2: 7592203EB1B111E999187E66C4F9AE02.roa (hash: cxpNUxvjjUcenOfHXLOefCP2oAgYFBDBd3CzBohvfz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
                          rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3703 (0xe77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A4F, serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
        Validity
            Not Before: Jan 24 17:26:07 2026 GMT
            Not After : Jan 31 17:26:07 2026 GMT
        Subject: CN=697500af-d2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:6a:79:5d:df:67:0a:84:6c:21:54:f5:1d:
                    47:07:cc:da:43:54:12:da:e1:66:cb:9e:44:50:18:
                    eb:97:85:d1:63:39:77:3f:09:2e:4c:81:3b:a8:a1:
                    dd:22:91:50:88:1b:03:ab:df:d7:a2:43:38:b7:b7:
                    da:fa:f2:c1:2c:b0:f7:e4:09:ae:31:6a:3b:c9:bf:
                    38:3c:7b:24:3c:6e:d1:57:e5:cf:93:fd:bf:fc:17:
                    80:df:b3:5b:e4:42:71:43:5d:bc:5d:9c:5e:03:8c:
                    87:04:34:84:bd:db:fb:dc:33:0c:01:5b:90:e0:b8:
                    58:cd:97:4b:d9:be:98:f7:ed:74:f6:ef:0e:15:d6:
                    92:8b:d7:9c:dd:1a:07:16:ba:7b:b3:0b:a6:2c:34:
                    62:13:4b:9c:95:55:75:08:a4:9b:23:0c:bb:66:76:
                    e1:1c:f9:ef:39:3f:c2:bd:51:86:59:b1:c8:cd:11:
                    e5:90:c9:4a:f3:0d:80:37:1b:c7:3d:b1:d3:08:d9:
                    01:61:e3:b8:0f:3e:d4:8b:94:09:71:d5:f7:3f:09:
                    08:da:e7:55:8a:a2:e7:fb:50:a0:d5:62:00:65:23:
                    0a:ad:6b:60:47:11:80:3c:79:73:fa:e6:1b:38:c2:
                    71:79:73:a4:06:35:61:21:5c:5b:83:57:f7:38:14:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EA:35:51:41:E9:2E:29:B2:AA:CD:88:B9:BF:7C:EC:B0:E4:72:C9
            X509v3 Authority Key Identifier:
                keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:5c:6f:d4:a1:da:c2:51:89:f9:35:cc:f6:96:0b:0f:e2:
         4a:20:f8:9e:ce:b5:ff:4f:ae:2c:b7:ce:89:a9:ba:ba:21:df:
         23:ad:a7:29:a1:21:23:88:e5:30:10:d7:d6:7e:af:f3:c2:57:
         54:3d:27:e2:a3:97:c5:93:f8:a4:1f:4c:06:bf:94:dc:4e:bd:
         d3:77:58:58:83:16:75:89:c9:b6:2b:92:4e:c9:26:51:1a:31:
         73:a1:1b:fb:b0:32:e1:ff:e0:0f:8d:1d:dc:96:45:c1:00:d1:
         95:f0:68:86:61:b7:90:f6:27:2a:19:0a:a4:87:72:36:2f:a2:
         94:4d:99:4a:b3:ce:db:22:1c:4c:36:1b:e9:da:b1:af:fb:13:
         2e:3f:40:ca:6e:d4:30:0a:92:1d:23:b2:b8:95:9f:b1:b2:61:
         e3:d1:49:b4:8a:20:af:09:33:23:4b:bb:83:79:18:29:c3:ca:
         87:66:79:5d:3e:33:3f:fd:35:c9:40:40:35:32:88:52:ac:4b:
         6e:83:af:a9:b9:6d:f7:8b:57:d8:b7:f3:4e:72:8c:e5:d7:8e:
         6f:e2:d6:17:90:06:57:32:54:5b:dc:b2:27:9e:fb:70:6d:a2:
         c1:b8:32:fc:1f:b3:9b:ce:66:7b:f9:f6:57:ee:9a:af:e4:20:
         0b:b6:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:19 2026 by rpki-client