This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File:                     SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier:          5WI7pDEUI6bm5oLojeyiE1Quehv5jq0mZs6VweD9DNM=
Subject key identifier:   08:09:68:4F:9F:19:7B:D2:0D:BF:06:F2:04:78:33:2D:9B:9D:10:8D
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       026B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number:          0255
Signing time:             Sun 25 Jan 2026 01:06:57 +0000
Manifest this update:     Sun 25 Jan 2026 01:06:56 +0000
Manifest next update:     Sun 01 Feb 2026 01:06:56 +0000
Files and hashes:         1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: gf6x3KCpaFn2ItTDBcSq7amKypROVvIqUglB+5RPhZM=)
                          2: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: 0z6iR0/Nf6gfC8rbqmZz5PCa77f0ROs0qKsJTlSdGLg=)
                          3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: QHxe/wWqzwNVIDLAM9edUwMUGE9Cp2KpjH57VB1iuhs=)
                          4: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: OxFOcvwColoaxplUUzeWODF1QwobCLhtGfjV874lFQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
                          rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: Jan 25 01:06:56 2026 GMT
            Not After : Feb  1 01:06:56 2026 GMT
        Subject: CN=69756cb0-2873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:ea:13:40:44:f6:dd:57:21:99:a6:60:4c:
                    96:16:bb:7d:34:e1:fe:06:ba:4c:b3:f6:3a:8a:42:
                    76:06:29:83:9e:7d:59:6f:c3:c4:ca:97:f9:d5:90:
                    b9:c1:51:c6:c2:43:e8:0f:70:6d:f0:a2:90:57:64:
                    cf:c1:07:49:9d:6d:89:7b:63:e1:fa:8b:8e:ea:fe:
                    80:31:91:81:a8:5d:40:11:fb:38:62:71:1f:95:d3:
                    f2:c9:8b:20:e0:b9:22:b2:88:88:0f:82:01:f2:f7:
                    bd:3f:99:34:84:50:71:79:4a:0f:f8:38:8d:f9:0f:
                    de:d9:92:bb:28:b7:8d:71:b8:8e:d8:46:49:d1:e2:
                    17:d2:52:a0:e1:ec:05:4a:a6:92:83:4b:42:12:b2:
                    2d:e2:60:58:23:0f:37:ce:21:69:f0:76:ec:d9:0d:
                    4a:fa:4c:6e:e7:ed:92:2e:0a:75:b3:14:98:fd:71:
                    5d:e2:df:68:0f:0b:68:f0:0b:84:7a:9d:f8:72:60:
                    bb:cc:36:de:4d:88:5d:79:c7:10:56:19:ea:b4:49:
                    04:76:c2:c4:27:5d:32:af:83:b4:4e:56:a0:da:f9:
                    04:0a:a1:29:03:a6:0e:89:ae:cf:9d:1e:38:71:43:
                    2e:66:e5:5e:23:d7:c8:1e:3a:c7:9c:38:01:4b:db:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:09:68:4F:9F:19:7B:D2:0D:BF:06:F2:04:78:33:2D:9B:9D:10:8D
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:71:e6:f3:89:f2:32:54:81:19:95:46:16:61:39:e0:e3:41:
         09:3d:cb:da:29:3d:38:36:d3:fb:c1:98:e2:6c:8c:ad:0d:cf:
         3d:92:d4:b1:92:57:8b:db:8f:31:49:3d:d7:24:6c:41:36:d5:
         2d:24:30:fc:af:d7:1f:c8:32:79:e6:67:c5:ac:87:4a:14:e5:
         ff:64:92:bb:e7:fc:f1:96:f2:72:fc:28:45:4c:8b:3e:c3:01:
         fe:93:68:7f:19:d5:ce:f2:a2:5c:72:fb:3f:a9:e5:b7:bc:fb:
         9b:67:ca:0b:6c:ef:08:10:24:68:33:00:8c:8b:58:13:4b:2e:
         84:80:72:1b:2d:46:09:3d:65:25:26:b5:bb:ea:61:a9:75:a3:
         7f:e6:e1:ed:cb:b5:89:1b:a8:51:d1:24:bd:99:e9:58:ab:8f:
         ff:55:cf:07:47:9c:3f:a2:93:98:06:4b:60:61:2f:29:9c:7d:
         4f:db:9f:3c:0f:94:ea:e5:20:46:77:34:b9:32:e9:fc:9b:80:
         d4:29:f3:ec:44:54:9e:05:1d:33:83:da:a7:2a:f0:75:55:b9:
         71:a8:e8:af:cd:cd:ff:6f:0e:40:c5:ab:3e:1d:2f:3e:27:5a:
         60:7e:2e:33:d9:df:22:c0:de:b1:e0:52:e7:7a:04:44:dd:68:
         7a:1e:f3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:18 2026 by rpki-client