This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
File:                     HNyP8SmsVhBgxHINdUk_12hGxhU.mft (raw, json)
Hash identifier:          kbI3rJNRti53aqdrmx4xUQsokyayc6q6e2sqXRO3bE8=
Subject key identifier:   CF:3F:E0:A3:1D:8B:63:D5:8F:A0:AC:99:52:78:B2:17:4D:57:2F:FB
Authority key identifier: 1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
Certificate issuer:       /CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Certificate serial:       0BEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
Manifest number:          0CBA
Signing time:             Sat 24 Jan 2026 18:26:34 +0000
Manifest this update:     Sat 24 Jan 2026 18:26:34 +0000
Manifest next update:     Sat 31 Jan 2026 18:26:34 +0000
Files and hashes:         1: HNyP8SmsVhBgxHINdUk_12hGxhU.crl (hash: nXagpodYYBEEw8iLY5wURuE72YWQzE18jhCVRhNYs9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3054 (0xbee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
        Validity
            Not Before: Jan 24 18:26:34 2026 GMT
            Not After : Jan 31 18:26:34 2026 GMT
        Subject: CN=69750eda-7c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:9d:f0:c0:2e:18:2c:ad:ca:5f:9a:2d:83:
                    e5:ef:7f:e4:2e:7b:50:eb:1d:38:74:94:bd:6c:e0:
                    32:a5:a2:b3:a9:79:eb:62:f3:6c:5d:4a:e1:52:5a:
                    e1:9c:83:aa:a1:a1:2c:c3:ef:70:cc:81:27:74:84:
                    5b:ac:30:b8:73:63:22:1c:05:4b:39:0a:6f:de:0b:
                    be:68:5f:52:ba:10:38:4c:d3:8f:43:91:a0:a6:53:
                    14:d9:eb:88:16:30:4b:69:f7:7b:d9:c6:ed:05:1a:
                    67:66:3a:34:d6:40:8c:c3:b9:02:43:c5:1a:e7:2e:
                    ba:8e:24:a3:3b:af:8a:92:74:10:0f:65:8d:7b:36:
                    7c:14:d9:7e:b4:83:93:c0:f3:2f:ea:ba:79:ea:83:
                    36:70:60:ce:88:9f:96:93:95:08:c5:f7:b0:9f:96:
                    0e:1e:b5:fa:95:c2:1b:e9:d6:9d:86:5f:e7:55:1a:
                    d6:e4:12:4e:3c:a0:21:ee:d6:d4:ca:d3:8c:3d:10:
                    16:f9:4c:76:a8:73:a6:2c:fc:22:90:26:a1:80:39:
                    0b:fc:ef:ec:6b:b4:0f:b8:60:9c:18:d7:2d:10:f8:
                    74:ef:62:18:e4:37:0c:a3:d4:ea:22:d1:8a:99:10:
                    5e:20:5f:97:ca:8b:97:21:73:11:90:04:5e:d2:99:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3F:E0:A3:1D:8B:63:D5:8F:A0:AC:99:52:78:B2:17:4D:57:2F:FB
            X509v3 Authority Key Identifier:
                keyid:1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3d:0a:a1:43:d1:4f:88:03:87:93:fb:19:6b:92:5e:f5:23:
         54:f2:6e:b1:8a:2a:6b:67:8c:00:ff:70:17:3e:92:b0:e7:df:
         c5:b9:39:6a:1c:f7:b1:54:5b:f2:58:39:a6:54:d9:41:88:e8:
         c6:d5:68:90:cc:f1:cf:a4:6b:26:0d:7b:e9:68:c1:bb:4e:1d:
         5b:64:5b:0c:8c:c9:57:c3:ba:89:8d:01:16:28:dd:e6:07:b8:
         e2:d3:aa:56:e1:ce:9a:3f:9f:8b:85:79:1c:c5:70:93:96:2d:
         61:2c:19:3b:d8:b5:b9:a7:43:9f:1f:b1:88:59:2b:16:25:6c:
         64:d6:8e:22:5d:89:28:dc:18:9f:93:b1:6a:d9:75:0d:68:8d:
         6a:ab:d5:3a:e0:ad:92:44:5e:26:37:4b:82:a4:8b:a3:9d:7e:
         0c:a0:67:e0:6a:cd:6d:41:4b:03:ff:dc:13:b6:3d:1a:b2:77:
         10:cf:7b:82:06:48:e7:42:ed:b9:ae:1b:ad:d5:4d:22:c1:4d:
         05:f8:6c:d7:1a:43:43:ef:02:cf:c6:fc:c3:0e:52:36:ab:48:
         ca:14:56:9b:67:ff:03:63:ff:fe:d2:a8:61:c0:b0:65:b8:c7:
         1d:13:c1:ff:62:27:8a:48:03:bd:28:a2:3b:e9:d0:c9:9f:56:
         70:f2:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:14:53 2026 by rpki-client