This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
File:                     hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json)
Hash identifier:          xDds7tkLnzybBBR+AXrZJyAzFt9zM69ZoGL7kFYufNI=
Subject key identifier:   64:EA:07:12:3F:DF:1E:90:F6:CB:9F:95:D8:42:CC:E4:EE:A4:51:C9
Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6
Certificate issuer:       /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6
Certificate serial:       081D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
Manifest number:          0819
Signing time:             Sat 24 Jan 2026 20:20:04 +0000
Manifest this update:     Sat 24 Jan 2026 20:20:04 +0000
Manifest next update:     Sat 31 Jan 2026 20:20:04 +0000
Files and hashes:         1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: 47h6faxjC7yO8AVr9szCkrD0027NJGzx7hxQMHW3GrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6
        Validity
            Not Before: Jan 24 20:20:04 2026 GMT
            Not After : Jan 31 20:20:04 2026 GMT
        Subject: CN=69752974-8866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:03:93:b1:bb:9b:ea:13:d8:3c:e1:aa:0e:
                    25:5b:5a:4c:61:83:dd:cc:f1:1a:da:b7:3d:b4:01:
                    62:84:c0:56:c0:6f:b4:3e:13:3a:44:8b:b5:15:30:
                    5d:a1:9f:15:a9:a6:ab:60:ba:ea:d5:f1:f8:fb:b5:
                    90:17:04:60:2f:29:66:24:b4:f2:5c:41:40:7e:6a:
                    d0:56:2b:74:02:f8:c9:1f:d3:a8:76:97:bb:5e:26:
                    61:37:23:52:a8:1d:f1:27:38:a7:18:c9:d3:eb:75:
                    56:32:84:bb:06:8c:84:77:fe:e2:b8:55:aa:62:cf:
                    17:fd:ec:ea:de:f3:fe:bd:36:5f:aa:20:37:67:07:
                    1f:0a:97:93:19:e1:f4:da:7f:ea:af:c8:06:dc:08:
                    fd:03:2e:09:99:07:6f:39:8a:28:05:eb:2e:fd:46:
                    5d:13:f2:a6:38:6e:44:6f:3f:e6:98:f5:e8:2d:1e:
                    2a:08:41:5d:f0:e6:af:7f:7c:dd:13:be:be:4a:cf:
                    da:c9:79:50:67:86:ee:c1:33:02:42:88:f0:30:d1:
                    2f:b9:08:37:f9:a5:8a:c3:ad:4a:30:6d:ac:8e:9c:
                    14:ae:7d:6c:94:17:e0:3c:01:59:ad:78:f2:ff:e4:
                    9b:94:b7:d0:70:b1:4a:d8:0d:10:8a:c4:7d:68:2a:
                    6f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EA:07:12:3F:DF:1E:90:F6:CB:9F:95:D8:42:CC:E4:EE:A4:51:C9
            X509v3 Authority Key Identifier:
                keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:e4:81:14:f2:95:32:0a:2a:3f:eb:cc:89:c9:25:94:c3:
         84:20:e8:ee:2b:b6:da:55:ac:93:01:b1:a9:34:41:99:6d:ce:
         57:04:4b:e4:3a:09:08:fa:2a:3d:17:66:68:8f:72:a6:ac:88:
         d7:f4:14:58:b8:00:f2:cb:f4:b4:48:37:d3:a3:d4:62:cb:ac:
         72:2e:40:1d:92:a7:35:6b:38:43:7d:8d:d9:8c:7a:66:86:d0:
         33:3b:b4:5e:53:70:ac:f7:dd:59:72:a0:16:46:9e:7a:6e:42:
         99:1a:47:49:fb:a8:1f:0c:0f:6c:82:96:50:07:9d:71:38:3e:
         15:da:2b:b4:78:82:8e:9b:43:c3:9d:bd:6f:0f:f9:5b:f3:e8:
         79:b9:08:00:22:73:e1:f2:71:01:7e:d5:44:33:58:22:f3:0b:
         39:aa:3c:a7:7d:94:58:ae:69:43:56:db:0e:b6:4a:84:9c:a1:
         4d:8d:ef:49:81:ef:5f:14:0e:11:df:ef:17:0a:99:56:a2:59:
         97:a5:51:0b:c6:e4:e0:67:7d:1a:43:b0:d1:71:4d:25:68:fb:
         c9:5b:f6:24:7e:de:1b:cc:90:38:5d:a0:03:53:39:1d:75:fc:
         8f:ee:78:e3:2c:cf:87:cd:ad:e1:5e:63:d0:8c:c7:c9:12:1c:
         06:4b:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:55 2026 by rpki-client