This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
File:                     hDGOgbLln2EUsQL6RQgzfekVw5M.mft (raw, json)
Hash identifier:          cXoUenfTtYFr4N5R6jhDxUvvZnyXNGwcJlYreH3xB0U=
Subject key identifier:   76:1E:E3:70:9C:02:4A:FD:99:8B:42:30:12:D9:D7:1D:0D:A1:E8:05
Authority key identifier: 84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93
Certificate issuer:       /CN=A9176632/serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
Manifest number:          65
Signing time:             Fri 23 Jan 2026 06:04:19 +0000
Manifest this update:     Fri 23 Jan 2026 06:04:19 +0000
Manifest next update:     Fri 30 Jan 2026 06:04:19 +0000
Files and hashes:         1: hDGOgbLln2EUsQL6RQgzfekVw5M.crl (hash: 3lBdst6dYrFleHdzjjBNgJX38grSKPuH/t96xfNAK2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
        Validity
            Not Before: Jan 23 06:04:19 2026 GMT
            Not After : Jan 30 06:04:19 2026 GMT
        Subject: CN=69730f63-75e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:70:2c:d3:86:b0:42:5f:f0:ce:9e:9d:2c:
                    ae:ba:37:b1:6f:da:6d:af:7c:bb:d5:90:1c:bc:2c:
                    1c:6e:62:bd:0e:8a:46:3f:40:73:23:32:f4:2c:c1:
                    5c:6e:6a:47:36:17:68:6c:68:c4:e8:64:2f:40:b5:
                    3a:1e:50:a3:11:d2:92:3e:88:3f:e9:d7:0d:58:33:
                    a4:c3:4d:6f:ec:7b:27:b6:2d:7d:c8:f1:0f:27:6b:
                    78:93:ad:d6:fb:6a:ce:e4:08:d6:ed:b2:61:b1:86:
                    92:72:20:cd:7f:df:9e:69:1d:a9:83:dc:bb:cb:31:
                    10:f9:80:3e:ea:70:7e:b4:e1:24:62:c8:ca:40:e2:
                    a1:d0:d6:83:aa:27:84:d2:0b:05:86:3a:f8:10:1e:
                    b5:ef:03:43:31:be:77:2d:07:c9:79:7c:7f:53:92:
                    e3:c3:bd:a0:98:5d:6c:5e:62:1f:77:43:e5:ec:67:
                    b9:bc:6a:cd:d1:b3:b8:78:50:d0:f1:c8:1b:07:49:
                    2a:30:fd:ff:bd:eb:dc:78:53:db:60:93:f4:bd:66:
                    04:24:28:f3:a4:08:37:96:6b:7e:30:e0:01:04:16:
                    48:54:b0:6b:3d:fc:26:84:f2:09:db:0e:25:45:a8:
                    4e:63:20:df:41:8c:0e:2e:b1:c8:dd:5e:e3:32:89:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1E:E3:70:9C:02:4A:FD:99:8B:42:30:12:D9:D7:1D:0D:A1:E8:05
            X509v3 Authority Key Identifier:
                keyid:84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:43:9d:a1:d3:f6:be:62:f0:da:c6:87:eb:42:d0:c0:a2:54:
         a8:20:00:a9:7d:3b:34:81:aa:5f:69:2c:c2:f5:9e:5a:af:8a:
         9a:46:9b:ea:f5:e1:7c:44:45:29:28:18:a8:fb:5f:80:64:eb:
         a8:81:1e:70:f0:cf:92:1c:2d:db:35:dc:0b:7e:0b:fd:65:65:
         d0:75:a7:d2:e6:3e:3f:e1:12:7f:7d:dc:fd:73:80:d1:be:5e:
         3e:c6:db:2e:9e:58:46:e1:df:0f:40:80:94:7b:ab:7d:8d:1a:
         00:98:a8:59:09:1f:9d:b4:6a:94:79:12:7e:70:5f:21:21:51:
         d8:7b:75:3b:bc:93:7b:51:3f:59:09:89:5c:35:50:26:95:ed:
         2e:dd:67:bb:60:b3:5f:e6:5c:c4:e3:ee:b8:0b:d8:80:0f:0e:
         d4:20:86:8b:c2:73:e7:bf:41:39:ec:59:db:4a:87:1e:84:3a:
         2f:ea:15:b6:e4:1d:9f:41:e9:c6:ec:f8:b2:20:36:ce:86:c1:
         1b:71:c5:6a:9d:2c:5b:de:d8:b7:47:77:7b:24:c3:73:46:12:
         ba:e1:35:38:7b:6b:20:16:0e:5a:9d:d3:dd:43:af:1b:e7:94:
         31:8c:c9:ae:88:fe:d5:f3:12:1b:13:94:7f:db:a6:f9:85:0a:
         e7:bd:74:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:39 2026 by rpki-client