This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
File:                     hRAOWh-65f4aZcvxVzQTCo5UG7I.mft (raw, json)
Hash identifier:          g7lKdrO4Z5Ye66cLegCFu2AgL5xepXyhF2Fdk/agK/s=
Subject key identifier:   06:0D:CF:64:1A:B8:96:B0:DB:58:A2:28:19:0C:34:D2:A9:AD:31:07
Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
Certificate issuer:       /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
Manifest number:          4E
Signing time:             Sun 25 Jan 2026 06:24:43 +0000
Manifest this update:     Sun 25 Jan 2026 06:24:43 +0000
Manifest next update:     Sun 01 Feb 2026 06:24:43 +0000
Files and hashes:         1: hRAOWh-65f4aZcvxVzQTCo5UG7I.crl (hash: SVukw6fEYQOahIlqWtJez8zNaBvi27gsSkKxxi263/8=)
                          2: 1F578DB08F0111F0BF750433C4F9AE02.roa (hash: LczUr77JgvxHIuqoELCyex8mBKm8am+vXeaFZ97FdZQ=)
                          3: 3D51EF7C8F0111F087307F35C4F9AE02.roa (hash: kGXFH8n6QfG+BvHqc1nKCy9yOgjS/7C0SlvW+QNDSlw=)
                          4: 8F35765ACF5811F085DD836EC4F9AE02.roa (hash: Tw5k9/cuQwB71OFXRXiv/bwE46v5T5qgIQMcMfV+JV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
        Validity
            Not Before: Jan 25 06:24:43 2026 GMT
            Not After : Feb  1 06:24:43 2026 GMT
        Subject: CN=6975b72b-12df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5b:4d:4a:97:33:cd:30:9c:53:ff:57:77:2d:
                    dd:c7:b2:7e:4b:b0:fe:a6:4d:c4:e8:9a:71:c2:c2:
                    6c:f5:20:63:dc:93:4a:35:10:ef:e4:02:bc:ac:b9:
                    59:4e:43:f5:19:e7:cd:f4:ce:32:52:47:e3:92:68:
                    3c:d5:22:b7:28:8d:71:8c:20:a3:6a:e4:a5:3a:b3:
                    b4:12:b7:a2:d9:4e:cd:10:af:0f:ea:ef:24:93:d4:
                    3d:90:02:f7:59:59:dc:9b:92:82:55:31:0a:38:3d:
                    5f:63:91:2b:8f:51:9b:58:96:da:4c:4a:49:bd:9b:
                    5c:bc:a5:c4:e8:67:9c:0e:c2:6c:da:c9:ca:1d:d1:
                    11:70:91:c8:fa:d8:0e:02:12:7e:a2:0b:8e:a7:f4:
                    79:1b:fd:73:8f:18:59:e1:73:40:6c:13:bc:0e:2a:
                    17:a1:26:6d:f0:df:1d:31:01:dd:29:56:4c:0b:64:
                    6c:a1:93:96:16:fd:85:d7:63:8b:86:33:77:43:0e:
                    44:32:20:2e:b1:9e:15:a5:0f:52:83:3a:32:b1:d4:
                    f3:00:65:fc:2a:1d:58:a3:2c:da:64:e0:fc:81:0b:
                    50:da:68:40:f9:52:4d:79:03:d3:1e:be:2e:38:7a:
                    87:6d:a2:44:77:e7:49:71:98:23:46:5b:04:77:c5:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:CF:64:1A:B8:96:B0:DB:58:A2:28:19:0C:34:D2:A9:AD:31:07
            X509v3 Authority Key Identifier:
                keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:34:0e:06:e5:0e:36:7f:01:0b:ac:b4:c0:17:1d:ee:ba:ea:
         da:50:9b:46:10:22:aa:a8:5c:4e:13:f5:9c:02:56:e0:d1:51:
         2e:6f:fe:56:25:70:71:a4:f1:fc:12:a7:8e:61:65:c3:86:17:
         93:00:a0:b7:12:2e:82:3f:23:ed:02:e2:7e:81:56:eb:4b:99:
         7c:0e:e7:35:97:5c:ad:0e:28:f2:b8:ed:c7:bf:f5:b3:d4:b0:
         86:24:35:5f:60:e6:c6:76:5b:0f:24:2b:1d:40:bf:90:19:48:
         40:a5:f0:2e:8a:fa:b2:a1:ad:25:eb:e1:7f:2f:d5:02:3c:c6:
         41:57:66:c6:c5:1e:f2:8d:63:b4:9f:ea:f7:ed:5b:03:3b:ce:
         e2:99:b7:ed:24:f6:ed:71:65:a9:24:20:29:ba:38:25:fe:ab:
         e2:c4:37:88:55:f1:38:12:8f:ae:10:6c:27:38:af:88:1e:bc:
         c7:df:b2:55:ed:c2:be:7c:ec:03:e3:3d:23:46:08:36:a5:4c:
         7e:b6:13:e7:46:93:63:ae:d9:8a:53:7d:30:29:b3:6c:d1:84:
         c9:a0:5a:0d:f3:8a:4c:43:a1:d2:b5:14:e6:d6:89:87:50:d7:
         36:fe:b0:c5:f7:c7:6d:04:d2:4e:d8:e8:37:bf:4e:31:fd:0e:
         49:79:c8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:15:25 2026 by rpki-client