This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
File:                     hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft (raw, json)
Hash identifier:          Z7TUAhFC02+YSW4+1ATx0O00y+2NnghokSRInYFl6KE=
Subject key identifier:   CB:B7:4C:50:33:96:D9:B3:96:82:94:43:36:4A:11:AC:8B:82:FF:40
Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Certificate issuer:       /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
Manifest number:          4C
Signing time:             Fri 23 Jan 2026 06:19:30 +0000
Manifest this update:     Fri 23 Jan 2026 06:19:29 +0000
Manifest next update:     Fri 30 Jan 2026 06:19:29 +0000
Files and hashes:         1: hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl (hash: VkYmQGpKFv0glEeJg0VUku57KhXYQg8wWz97RjQaEy4=)
                          2: 675D716092EE11F0990BEA65C4F9AE02.roa (hash: 4QCa8Wv6sDtZDWi9ABDwu1xQIu9iLo9GAI+6YdZfu04=)
                          3: 3014B5BC86D011F08795B91FC4F9AE02.roa (hash: FD/7U7XSmgg6Fwdvyfw/wFBPedO+DNiEk5bwRU3tAxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
                          rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
        Validity
            Not Before: Jan 23 06:19:29 2026 GMT
            Not After : Jan 30 06:19:29 2026 GMT
        Subject: CN=697312f2-ff68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:27:46:da:e4:f3:93:28:61:0c:82:6b:0d:
                    61:fb:ce:60:80:23:b4:28:f0:f2:16:96:7c:b8:b7:
                    cc:17:80:53:c3:cb:7c:62:08:bc:d2:a1:b9:14:78:
                    03:63:78:2d:6e:78:48:6f:2d:4a:34:88:23:9d:1b:
                    db:52:68:3e:77:d5:d0:75:40:22:6b:2d:04:91:ef:
                    6e:53:bc:6f:11:e3:63:49:aa:a0:1e:94:be:97:de:
                    13:60:e9:34:cd:76:19:fa:08:ab:07:7b:7a:4a:87:
                    70:92:36:96:41:12:f5:87:84:da:38:b9:1e:d1:be:
                    83:cb:f8:20:08:a9:74:0b:64:33:5f:7b:0a:2d:5a:
                    59:3f:9a:76:9b:7e:c4:81:4a:2a:17:72:a7:17:23:
                    e5:b6:33:ab:fb:1e:1c:b4:b9:83:e4:cd:fc:b0:bc:
                    01:68:26:69:60:7e:d1:95:35:1d:ae:de:94:f9:4c:
                    a6:13:93:db:46:17:1f:a6:4a:bd:6e:6d:d7:fa:a7:
                    46:9b:7a:02:41:21:db:b9:bb:ae:84:e6:9b:09:67:
                    2c:a4:04:cc:c3:3c:5b:e2:02:e0:e9:11:e5:73:92:
                    56:8d:55:1b:1b:e9:a0:42:98:ab:89:da:f6:38:7d:
                    15:c2:08:02:dd:03:16:26:51:90:b0:fe:cc:bc:93:
                    54:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B7:4C:50:33:96:D9:B3:96:82:94:43:36:4A:11:AC:8B:82:FF:40
            X509v3 Authority Key Identifier:
                keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:51:03:4e:3f:c6:d1:f0:6e:5f:55:ac:f2:0b:61:c0:b9:
         32:3b:35:71:63:5d:55:e7:ea:5d:7a:61:98:b6:b8:97:b6:45:
         8a:be:4c:bb:f1:94:fb:05:ec:92:e5:2c:f6:9b:3b:72:63:3f:
         dc:bf:8f:1d:d4:da:cf:ec:cd:98:f5:a9:6a:fe:66:a6:6d:ae:
         df:8f:0c:0b:1e:3f:39:92:0b:98:92:b5:4e:e8:57:c1:74:7e:
         74:84:34:b4:75:0c:08:e2:3d:df:5d:a1:26:96:d1:d4:bb:ed:
         42:3c:ad:01:3d:97:3d:82:08:ec:d3:4f:03:3a:40:dd:66:64:
         18:65:4b:82:36:54:2b:f6:27:70:8e:33:fb:32:6d:6c:0e:dd:
         03:cd:9a:8e:4a:12:fc:1c:03:6e:39:8c:9c:25:dd:f0:d4:dc:
         93:94:be:c9:cb:08:e7:6c:5e:dc:68:4f:c8:03:c7:e3:d4:3a:
         56:92:89:33:63:0c:15:2d:d0:55:b4:39:c9:2e:b6:52:21:60:
         87:f3:c2:ce:da:70:82:81:f1:c0:52:df:84:cb:5c:8a:58:3e:
         0d:53:65:6c:d1:c6:00:49:9d:89:6a:b0:76:df:98:f2:41:00:
         ed:19:73:44:ce:ed:d5:14:3f:5c:64:28:94:78:e8:8a:9b:ca:
         e0:d0:5e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:25 2026 by rpki-client