This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File:                     HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier:          o5IrlTiDWntGOtok7Szaq3Dmm3ezH68LvWSsHBnKU04=
Subject key identifier:   5E:B7:20:98:8A:5C:3C:C5:9A:8D:54:63:45:20:86:D5:E5:60:A3:93
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer:       /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 07:08:15 +0000
Manifest this update:     Sun 25 Jan 2026 07:08:14 +0000
Manifest next update:     Sun 01 Feb 2026 07:08:14 +0000
Files and hashes:         1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: VqN2vo5VwjxjTKLkb9gYhwUweSbErVajVq5BcrFu2UA=)
                          2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: aL9mpzSLdVdL5Ni8kcknF+vvh2ZNflEf3wU+HZuzkto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
                          rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
        Validity
            Not Before: Jan 25 07:08:14 2026 GMT
            Not After : Feb  1 07:08:14 2026 GMT
        Subject: CN=6975c15f-3161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bd:72:2f:ba:c3:68:ee:a3:24:1f:3f:32:a8:
                    64:6d:0f:d7:d6:55:47:d1:aa:3f:86:46:b5:a3:e4:
                    63:49:3b:78:ef:8d:f8:62:b7:6a:ba:2c:bd:85:a3:
                    61:f4:2d:5d:f7:2d:83:4e:bb:b6:48:d3:94:9e:93:
                    d1:92:3c:b3:40:f9:3e:03:8c:62:03:98:15:10:26:
                    14:bb:9c:aa:3b:27:30:23:fd:0c:c4:6e:81:44:f1:
                    50:7f:a0:b4:7f:8f:e9:49:e2:86:68:c4:92:20:7d:
                    79:ce:9a:3d:40:55:77:ed:60:33:99:71:ff:69:7b:
                    2f:a3:42:39:82:2f:0a:81:eb:1d:26:17:de:11:b9:
                    30:de:e2:97:3c:63:3e:c7:af:8a:7a:82:4b:b0:40:
                    3f:25:b5:08:ec:b3:ce:e0:b1:5f:89:b4:93:90:06:
                    8c:de:84:a9:74:27:09:ef:7b:b1:9b:1b:3d:52:c6:
                    ee:ce:1c:10:ef:f1:96:fd:13:30:94:41:ce:af:bf:
                    d9:50:a1:63:54:b9:74:d5:ab:53:c4:62:52:a7:08:
                    72:d9:08:1f:de:e2:5f:c9:35:ff:89:82:b3:e0:df:
                    c7:98:1e:34:1e:b4:03:86:4e:57:a6:bc:d1:76:ff:
                    10:75:72:00:63:6d:89:9a:70:53:3e:bf:5f:52:a4:
                    c0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B7:20:98:8A:5C:3C:C5:9A:8D:54:63:45:20:86:D5:E5:60:A3:93
            X509v3 Authority Key Identifier:
                keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:45:21:0a:56:2b:75:b6:41:b5:d5:b8:46:88:cf:3c:5e:
         f3:ba:9c:fa:56:6e:81:03:50:0e:1b:69:e2:af:18:02:6b:9a:
         11:70:c6:5a:f8:72:04:9d:e6:3d:51:2c:95:a1:1d:df:2a:68:
         ec:11:42:27:ad:b4:a0:6d:09:14:6a:37:a9:a7:8c:5a:83:6b:
         65:f2:ac:91:5d:2c:ce:46:0a:dd:1a:c9:02:72:75:6f:a6:1e:
         46:82:6d:d9:55:f2:5e:78:c6:de:b5:7d:98:15:6b:9c:fc:8b:
         c1:bc:b5:77:0e:fd:66:ff:04:78:48:e8:48:dd:39:aa:0d:82:
         a3:ad:ad:fb:20:8f:c1:bc:16:16:79:8c:fc:b3:75:b0:a3:65:
         94:47:37:5f:9f:f6:1c:ad:8b:3d:f6:a7:e0:65:24:41:eb:de:
         d7:39:b7:99:81:06:45:0e:61:40:97:d7:82:fa:aa:3b:a2:9d:
         02:b0:1c:92:1e:59:53:fb:6f:9c:d9:6d:4e:b5:1a:20:7a:06:
         ba:c6:8d:05:11:d6:41:5e:c4:a3:72:0c:77:d7:51:b4:ae:26:
         6c:0e:07:ac:20:29:d3:4a:50:1e:d5:c6:03:c4:77:4c:de:da:
         55:4e:b1:ff:52:3f:25:95:cb:80:da:e2:33:73:19:b6:6e:2c:
         36:61:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:01:27 2026 by rpki-client