This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
File:                     HhI4RWNx50SJRiLpisHuVbQUXhA.mft (raw, json)
Hash identifier:          t0us0dMnX/dt0RywyfxmwQM/EWTO03WM5shrzeqK/cs=
Subject key identifier:   D4:E1:42:BA:C0:79:63:44:D3:C9:4E:02:0A:B1:F6:23:C2:B3:22:CB
Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
Certificate issuer:       /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Certificate serial:       15F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
Manifest number:          15A0
Signing time:             Sat 24 Jan 2026 16:35:30 +0000
Manifest this update:     Sat 24 Jan 2026 16:35:29 +0000
Manifest next update:     Sat 31 Jan 2026 16:35:29 +0000
Files and hashes:         1: HhI4RWNx50SJRiLpisHuVbQUXhA.crl (hash: yokTe7YCmEC/W0qHIxtncf6XCZ12R15RshIzm3o5mRs=)
                          2: C8C8D4F2F04611F087BCEF76546F56BC.roa (hash: aDZzOnL6bB5Pw8lIIbt5jQWRrI0yAlcGG4yB2u9uTSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5625 (0x15f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
        Validity
            Not Before: Jan 24 16:35:29 2026 GMT
            Not After : Jan 31 16:35:29 2026 GMT
        Subject: CN=6974f4d1-0706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a0:c6:6c:eb:74:0d:a0:ff:6d:5d:2d:75:bf:
                    25:2d:e7:a8:f8:65:c6:58:73:ca:52:be:c2:2b:67:
                    f2:46:34:2b:e0:9f:dd:26:20:fa:e6:d4:db:86:3b:
                    c8:69:b7:13:63:f0:69:00:2d:30:c3:a9:90:0d:ef:
                    a5:e7:80:d3:19:73:26:ba:a4:52:1a:35:47:19:f4:
                    54:b8:e8:7d:c0:29:64:51:7f:fc:54:8d:9e:b6:7a:
                    0e:1a:b0:22:5c:42:c8:ef:1a:ea:00:78:2a:72:11:
                    57:38:64:44:17:3e:7f:00:16:e8:6f:36:12:38:19:
                    03:ab:bd:75:a9:1a:17:53:36:06:9b:17:15:70:82:
                    5e:0b:5e:01:92:9f:d6:f2:cb:45:6d:09:07:11:fe:
                    29:1d:96:a6:12:76:92:b4:96:18:8d:0b:ed:80:b6:
                    36:6a:3d:91:f6:02:6e:74:44:18:fb:2f:b8:9e:41:
                    d6:10:00:b8:75:56:cf:78:ce:82:cf:2f:4e:95:26:
                    cb:91:bf:78:61:4d:dd:1c:bb:c9:39:08:07:fc:82:
                    1d:14:c9:be:09:e5:97:45:48:62:39:9a:94:9f:3a:
                    ea:57:17:d2:7c:8b:6a:9c:e4:68:e1:46:4a:0a:2b:
                    4e:68:c1:1c:e0:9c:16:58:0d:bb:5e:f9:7d:cd:ca:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E1:42:BA:C0:79:63:44:D3:C9:4E:02:0A:B1:F6:23:C2:B3:22:CB
            X509v3 Authority Key Identifier:
                keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ec:b0:80:ea:77:04:69:e2:b3:07:bc:21:34:56:fa:d5:15:
         4c:ff:8a:c4:46:4e:b9:da:d6:7f:9b:f1:e7:5e:2f:bc:89:a8:
         b4:15:69:48:00:aa:3a:60:a5:f2:2d:3d:33:8a:ae:20:67:db:
         58:9b:86:be:47:53:05:61:fc:4d:2c:d1:1c:b0:e1:5f:22:c0:
         ae:7e:29:9b:02:79:dc:0b:20:6d:28:e5:11:80:a5:a5:b9:96:
         1b:b9:84:8a:23:8f:27:a6:b2:42:78:77:0b:b0:40:b3:7c:70:
         fa:07:23:08:f0:cd:27:03:0f:b4:db:aa:09:90:9e:63:02:88:
         39:53:6c:47:c6:47:f9:11:e4:38:f9:66:63:b9:87:f7:70:3a:
         00:60:e2:1d:1e:d6:2c:ee:29:15:69:6c:7e:2b:61:bd:43:57:
         64:af:d3:18:15:13:df:64:f1:b5:1b:85:70:18:97:c2:da:db:
         db:f3:ee:fb:85:37:7e:c0:d1:f6:71:43:47:ee:38:47:81:6c:
         72:a3:ad:cd:12:b2:5f:6a:4d:9a:cb:05:ca:62:b9:30:0d:9a:
         b1:87:e3:42:71:b8:b5:10:10:1a:c1:29:6e:c6:16:00:19:33:
         f8:8c:14:cd:54:a7:ce:83:ac:a1:7c:6d:83:b8:76:4d:9e:8e:
         73:3d:c0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:17 2026 by rpki-client