This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
File:                     6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json)
Hash identifier:          QoSRmZwdH7UeJT5Jw00xMqmvs3GUsN+LpC5xiW30GXs=
Subject key identifier:   36:A2:CC:D1:37:11:03:7D:99:2E:4B:4E:78:28:E9:AC:E9:7C:8D:9D
Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
Certificate issuer:       /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
Manifest number:          0181
Signing time:             Fri 23 Jan 2026 02:59:04 +0000
Manifest this update:     Fri 23 Jan 2026 02:59:04 +0000
Manifest next update:     Fri 30 Jan 2026 02:59:04 +0000
Files and hashes:         1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: LrOhu7J2hgT2p0enUID5vqdCfV1YpX/ipjhhqbSPcJg=)
                          2: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: mmnKRzADdUtTw4VmsGLhIVSlPWWBTV3WpIwjaGz074o=)
                          3: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: AjCWJRf1pyNSDTmNTLHKQ7pMNPuKph2bckFtkBvPnvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
                          rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
        Validity
            Not Before: Jan 23 02:59:04 2026 GMT
            Not After : Jan 30 02:59:04 2026 GMT
        Subject: CN=6972e3f8-62f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:be:ac:b5:a1:d4:34:d8:c2:ca:01:e3:42:05:
                    84:6f:0c:b9:32:e6:07:e1:f6:8f:5c:d6:11:c3:0c:
                    e6:3f:a4:c0:d9:45:83:7e:54:b4:b7:ab:4a:56:48:
                    33:dc:7a:51:ef:a0:cf:77:30:c7:28:c6:5a:12:14:
                    1d:d1:bf:d2:27:de:8e:23:c6:3d:64:87:01:9d:45:
                    5c:38:cb:28:a5:86:2d:e2:3e:20:9e:32:91:a7:ac:
                    1e:54:19:41:c1:36:ff:ca:94:3b:14:59:2a:48:77:
                    8c:34:e1:8a:4e:57:49:9e:de:64:c8:f4:f0:fe:5a:
                    21:c7:73:25:a3:0f:71:6e:1c:a7:05:f4:8d:19:9a:
                    e4:54:73:bd:3f:8c:7c:69:cc:a2:f1:3f:9f:cf:6b:
                    77:14:f0:72:8d:b4:df:51:d9:78:c4:06:2d:6d:16:
                    9e:7e:33:bf:ca:dc:b7:fc:3d:f5:5f:0b:5f:77:7b:
                    66:7a:48:03:9d:27:ba:02:09:a0:ae:ac:80:88:dd:
                    4e:12:cf:ed:f1:c9:58:d1:70:b8:33:ef:6a:2b:da:
                    30:6a:98:9a:5e:b4:c1:61:25:d1:7b:a6:cd:a2:30:
                    96:37:d1:49:e3:71:f9:d0:96:e8:9c:17:47:3c:ab:
                    32:bf:22:46:3b:c4:08:8e:44:3a:dc:13:e8:de:4b:
                    50:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A2:CC:D1:37:11:03:7D:99:2E:4B:4E:78:28:E9:AC:E9:7C:8D:9D
            X509v3 Authority Key Identifier:
                keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:26:45:c2:2c:28:2f:14:ae:f7:db:e6:95:7c:a4:c8:1f:4b:
         21:0d:73:58:79:b8:51:ac:ac:1b:a8:4c:8e:0b:5f:4f:0b:9d:
         d1:36:f0:34:d4:a5:d3:69:a4:40:9e:22:10:2c:12:3f:97:6e:
         1f:f8:38:24:7d:55:86:19:a7:71:46:3a:ae:54:d3:5c:66:b6:
         e9:59:3f:df:b1:41:1f:5c:93:84:55:f5:56:5e:ef:58:fc:de:
         a4:2d:e3:9a:e6:09:4b:f4:3b:7d:84:df:dc:0d:f4:d1:1c:20:
         47:ec:44:0e:f6:43:de:63:d6:c6:33:82:74:84:25:d3:55:a3:
         8d:b3:99:3b:d4:12:f3:e8:99:63:6b:dc:f6:ec:82:dc:2a:0e:
         05:3a:27:d2:15:ca:d3:94:45:a9:19:e4:b9:bb:0e:c1:b2:0d:
         5b:1e:47:64:6a:60:3b:35:d9:0e:05:51:08:79:21:8a:ee:54:
         4f:df:cd:bf:77:6f:fb:f4:19:c4:98:0d:05:9d:7a:d6:b8:05:
         7f:ca:fd:32:12:9a:cc:b8:24:8c:73:c3:4a:f2:bd:06:7a:04:
         3e:ef:65:36:4c:cd:c7:dc:65:de:f0:df:23:ea:f6:8e:59:c3:
         33:6b:7c:2f:a8:0d:d8:70:1b:15:d9:e3:a1:60:18:09:93:c9:
         f2:57:e5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:49 2026 by rpki-client