This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
File:                     r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json)
Hash identifier:          pmkJ4ZHmUpkx31yeOMxPGPwlX4gBypLtVQwVPbogtYY=
Subject key identifier:   70:48:21:FF:0F:B8:96:1A:B9:AA:59:8A:69:40:5F:11:3E:39:45:D4
Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
Certificate issuer:       /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Certificate serial:       088F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
Manifest number:          0881
Signing time:             Sat 24 Jan 2026 20:00:41 +0000
Manifest this update:     Sat 24 Jan 2026 20:00:41 +0000
Manifest next update:     Sat 31 Jan 2026 20:00:41 +0000
Files and hashes:         1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: 8VOW40e7eaTtpM4IqESMDRppTQB6AVd4X7AcZHKgUKA=)
                          2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: 6NwFc4G6kbW7IIFb4mldHTmS90zuZDDfhVsh0xYOrRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
                          rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191 (0x88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
        Validity
            Not Before: Jan 24 20:00:41 2026 GMT
            Not After : Jan 31 20:00:41 2026 GMT
        Subject: CN=697524e9-c0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:68:9a:e1:6d:45:74:27:3e:09:ce:22:5e:
                    04:6e:08:10:3e:05:5b:0a:9c:0e:62:a8:8b:4e:62:
                    ad:fc:98:c9:a4:87:5f:fc:f8:27:52:3a:40:46:91:
                    27:ef:34:fb:ff:dc:37:b4:63:d3:91:ce:e2:80:f6:
                    2c:dd:89:1b:5f:a5:00:49:a0:35:b2:76:06:d3:15:
                    ce:ab:0e:03:ba:3c:95:2f:fb:3d:4d:99:4c:3d:b4:
                    67:eb:aa:d0:41:47:95:4a:d1:f5:56:4a:d9:db:ce:
                    2f:34:c3:09:52:f3:93:43:24:32:fe:99:3a:9c:d7:
                    99:11:fa:b0:c4:33:c3:07:34:84:c2:c6:b9:a7:42:
                    b2:ec:d5:c8:19:6f:e0:7f:1d:cd:89:e6:12:3d:9b:
                    42:7a:e6:09:52:db:57:89:b4:3f:9a:eb:32:33:eb:
                    95:5d:0c:cb:72:fa:36:e7:3c:f2:cf:7c:83:07:8c:
                    74:c9:30:c6:b2:e2:1b:c0:36:1e:cb:73:cb:64:28:
                    c6:e4:5e:78:58:8c:02:4c:89:92:23:5a:d4:9d:66:
                    95:32:30:44:15:88:6d:e0:37:3d:f3:81:a0:6c:ea:
                    7c:a2:8a:9d:c4:94:18:f9:64:8b:23:66:68:e9:51:
                    f7:df:d9:9d:9a:98:3a:8c:86:53:59:b3:bd:a7:ff:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:48:21:FF:0F:B8:96:1A:B9:AA:59:8A:69:40:5F:11:3E:39:45:D4
            X509v3 Authority Key Identifier:
                keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:c4:7a:b3:59:4c:3a:1d:da:c5:20:0d:3b:d7:e5:bd:a8:
         92:36:82:40:dd:cf:51:ec:76:bc:92:31:6c:8c:8a:17:55:d2:
         bf:3c:0c:59:9a:f8:db:af:eb:4b:27:db:80:de:e6:e2:b7:7a:
         c8:ad:ed:36:3c:ac:e9:5f:1c:2c:62:1c:b5:fa:d9:fb:ab:59:
         9c:24:32:80:43:1a:cf:8a:b4:cb:89:2e:13:ee:45:6a:6d:23:
         20:43:2c:5b:76:5d:ad:6e:96:83:8a:65:58:55:ea:37:6e:dc:
         fe:18:ea:83:82:88:ea:1c:05:51:97:73:65:be:10:4e:40:78:
         94:e4:c3:6c:70:c8:45:a0:30:58:cf:be:db:b8:4a:00:ac:de:
         7f:19:f7:5c:59:d1:34:dd:ea:b2:b3:57:ee:ce:a7:2c:63:3d:
         1f:be:86:97:16:e8:9f:8c:4c:7a:27:d7:a6:25:45:03:b5:3f:
         ab:63:60:f2:0b:36:41:64:50:96:33:12:03:e8:d2:56:11:87:
         29:7e:b4:60:46:81:c3:76:5c:73:d1:57:59:45:90:27:dd:a4:
         0d:41:11:29:39:76:48:e8:7e:dd:83:69:31:c4:51:78:83:87:
         36:e6:02:08:e1:43:6f:18:e6:66:e9:2b:98:a2:ae:79:55:c8:
         2c:b1:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:47 2026 by rpki-client