This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File:                     Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier:          Cn594xp41Chyzu4tH/0HCkjaHGvTm+O5L9eOn+I/HpU=
Subject key identifier:   A7:09:8E:FC:DE:66:F7:DA:A1:64:83:23:01:DA:DB:E5:76:5A:A0:05
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer:       /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number:          01F8
Signing time:             Sun 25 Jan 2026 01:48:58 +0000
Manifest this update:     Sun 25 Jan 2026 01:48:58 +0000
Manifest next update:     Sun 01 Feb 2026 01:48:58 +0000
Files and hashes:         1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: 4CRhDsyqGKvCjZshFKL91HFWfcM3zGq75ty9f/00AYQ=)
                          2: C369BA98260D11F082934618C4F9AE02.roa (hash: eheiIoP+DIGo6TDFauXxAmF27naEz5wcAihLZFXfuog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
                          rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
        Validity
            Not Before: Jan 25 01:48:58 2026 GMT
            Not After : Feb  1 01:48:58 2026 GMT
        Subject: CN=6975768a-f780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:f6:65:de:88:ea:08:7c:2e:97:7a:a4:46:
                    51:da:6d:af:9f:7a:90:62:2d:9b:5f:5f:d5:98:fc:
                    af:44:0b:07:d7:5a:c9:8f:e0:a1:ff:5e:a6:d2:09:
                    64:90:a2:a3:5a:d3:92:44:d0:37:b4:b8:e5:74:dc:
                    a4:39:4f:32:3b:e2:e2:54:2e:e5:00:ad:97:e6:49:
                    bd:a3:8a:83:d7:c8:b8:64:77:ff:d7:22:e7:9d:5c:
                    76:4b:85:99:84:73:fb:3a:07:48:9a:db:b4:50:bb:
                    64:df:6d:ca:23:5c:92:cc:0f:07:14:53:75:6b:66:
                    e6:ba:0a:1d:c8:e9:3f:a5:12:16:e5:03:31:07:2d:
                    82:2c:7c:27:1c:15:4f:02:35:5a:1c:c0:cd:29:cc:
                    58:a1:90:ba:2c:2f:5d:a8:c2:1b:00:5c:d0:1f:84:
                    57:ac:38:35:5b:d2:9d:8d:49:56:aa:1b:6b:11:8e:
                    a0:5b:8c:a1:ad:2e:24:12:c2:5d:d6:0c:34:77:31:
                    19:1f:a0:21:71:01:72:14:44:1b:fa:6f:46:f2:36:
                    f4:d0:d6:31:a9:26:c5:52:ca:cd:2b:0c:6e:4c:2c:
                    87:b1:ae:10:37:50:98:2d:47:4a:37:bc:b9:9b:25:
                    d2:ca:d4:59:9a:c5:17:cb:95:c9:71:84:ff:68:aa:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:09:8E:FC:DE:66:F7:DA:A1:64:83:23:01:DA:DB:E5:76:5A:A0:05
            X509v3 Authority Key Identifier:
                keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:21:3a:d5:e6:67:c4:a4:7e:ff:e2:a3:26:1b:e6:97:73:4b:
         2f:bc:b8:38:4a:ba:c2:f9:24:3b:29:4f:11:90:60:e3:5a:4c:
         0e:e3:22:2b:35:63:c9:2b:1f:98:51:14:6c:25:7f:b4:38:69:
         4f:cd:98:b8:d4:3f:61:48:73:76:70:8f:ce:2e:43:a9:d6:df:
         1f:00:c8:23:c2:f1:c4:8c:75:f0:e4:d1:d1:ac:40:d3:b8:55:
         32:d0:2a:6b:47:b0:09:da:02:e7:49:d7:c1:c9:67:0d:c1:c4:
         6f:40:e7:6c:1b:4a:36:a6:0c:c7:04:e4:59:4c:e0:ab:ac:0b:
         19:97:76:1e:ea:20:04:6d:c2:b4:79:b6:3c:2b:39:b6:b9:1f:
         96:5d:5f:36:56:f3:7a:33:59:5b:1d:a0:69:9b:d9:ef:8c:c4:
         12:73:bf:85:36:a8:22:9b:13:6a:7f:80:a3:ff:5b:e2:72:61:
         5d:4a:14:33:5e:25:b2:e0:e1:05:f2:54:04:62:1d:f5:9f:4a:
         43:10:2e:2f:e3:37:a5:07:b9:3f:1b:d0:f4:b1:31:fd:69:ae:
         96:fc:b8:0e:c2:8e:b4:81:be:90:c1:99:c1:17:fb:fa:3c:92:
         b5:ee:73:73:6c:43:62:28:b2:7c:1e:ce:8a:37:f5:81:da:68:
         10:52:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:36:31 2026 by rpki-client