This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
File:                     HSpVFaipmzCyHRhxvPr9J-saEyo.mft (raw, json)
Hash identifier:          FObBVg/PkRiV32v7TwJMNyp7bwId2RstNfDORmsiIYQ=
Subject key identifier:   3A:04:FE:1A:17:15:73:72:A6:34:DC:61:D1:C1:EF:B9:FF:2A:87:D6
Authority key identifier: 1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
Certificate issuer:       /CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Certificate serial:       02D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
Manifest number:          02D4
Signing time:             Sun 25 Jan 2026 00:33:11 +0000
Manifest this update:     Sun 25 Jan 2026 00:33:11 +0000
Manifest next update:     Sun 01 Feb 2026 00:33:11 +0000
Files and hashes:         1: HSpVFaipmzCyHRhxvPr9J-saEyo.crl (hash: N4hF3kEqB7GfZ/peMj1i+9Wcn++WN9wiSFgWpyTO1bI=)
                          2: D6E7D65C192E11ED927BF512C4F9AE02.roa (hash: AYJESnvrL0xf2cFi0STIbVetOH/3woitG40ANaAhl6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
                          rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B30, serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
        Validity
            Not Before: Jan 25 00:33:11 2026 GMT
            Not After : Feb  1 00:33:11 2026 GMT
        Subject: CN=697564c7-b6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ec:da:4c:74:6c:e4:a7:b9:26:ff:7e:29:94:
                    98:32:a6:1c:bc:22:70:5c:6f:f7:96:8f:ca:c2:ab:
                    86:31:d9:56:3e:49:7b:a2:42:17:50:ed:f8:d2:ba:
                    f9:50:1e:bd:14:77:cb:63:2e:6e:e7:2e:d5:5b:8f:
                    57:23:3d:e6:fc:89:4f:29:fa:43:a0:bb:22:b8:c6:
                    a4:42:7e:ab:b9:68:8b:b8:6f:00:d3:31:86:6e:59:
                    2f:53:2e:c1:27:95:09:12:41:84:20:69:27:2d:3d:
                    10:4d:64:2f:7c:b6:b7:81:48:dc:59:25:9e:c4:25:
                    ec:98:95:9c:b0:52:28:6c:29:06:ae:bf:f6:42:2e:
                    e2:db:e6:fc:65:f9:73:22:3e:9a:d7:a3:7f:49:61:
                    2a:62:ca:3b:d9:9f:c7:27:f9:1a:af:ff:cb:63:ba:
                    f7:02:6b:b9:66:47:6b:87:bc:50:e4:48:c6:1b:7c:
                    63:17:59:99:8f:33:8e:ef:9c:ad:c0:b6:e2:94:7d:
                    76:93:2b:e0:96:b9:1b:af:7b:98:e7:26:c6:49:f0:
                    9a:a9:d5:fa:1a:4a:20:b7:b1:59:fa:eb:68:ff:5b:
                    ef:26:5b:cf:8f:c9:b1:93:d0:69:68:40:2b:fb:07:
                    8f:0c:e4:d9:fd:54:79:ea:d0:21:06:39:4c:9c:2d:
                    f9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:04:FE:1A:17:15:73:72:A6:34:DC:61:D1:C1:EF:B9:FF:2A:87:D6
            X509v3 Authority Key Identifier:
                keyid:1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f9:58:5f:a3:24:14:08:2e:16:48:97:2a:85:50:69:eb:06:
         41:32:e8:3f:aa:4d:81:62:89:ee:e2:5e:9a:bb:02:44:b6:3d:
         6c:0d:9d:a1:2a:41:a5:cc:a7:2d:4b:a0:1a:59:b4:79:2f:22:
         d4:03:15:10:c6:1f:6d:4f:dd:91:8b:5a:5f:59:4f:d8:d8:c9:
         71:93:15:09:13:a8:20:b8:23:e3:12:2b:c2:e3:68:e5:34:3c:
         68:9d:59:97:6d:4a:5c:40:64:28:36:67:38:0d:20:1c:ee:01:
         b1:c2:68:ae:2c:1e:6f:80:61:92:c1:81:49:e5:01:75:10:2e:
         b3:5b:50:31:81:f6:2d:43:37:ba:4b:a7:b1:5c:b4:85:44:49:
         7b:61:75:dc:73:2c:a7:aa:f6:69:f9:18:bb:3a:ee:57:3d:a5:
         1e:ae:0f:a5:96:2f:fb:77:0c:4d:8b:70:a6:16:e6:b8:28:9e:
         3b:bc:d2:ea:88:1f:de:2d:19:44:aa:48:49:da:16:26:bb:f4:
         8f:a6:dd:ca:4c:86:b7:7d:ae:f0:8a:5c:54:24:c8:20:2a:e7:
         59:2e:f4:a6:19:ba:38:a6:65:e2:39:06:f1:5f:a5:b0:93:1a:
         34:05:56:0f:85:61:51:f8:5d:bd:ce:50:90:fe:31:6c:71:ed:
         99:52:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:58:10 2026 by rpki-client