This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
File:                     8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json)
Hash identifier:          tmqqwQ+93vc2Ngj74t4Q1A5B8WcdWeEwkR0sUV7LAvc=
Subject key identifier:   FA:0F:C9:25:C4:D6:87:FC:F7:7E:D5:C4:EC:8F:93:C5:08:67:21:C3
Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4
Certificate issuer:       /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
Certificate serial:       0CD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
Manifest number:          0CC7
Signing time:             Sat 24 Jan 2026 17:53:12 +0000
Manifest this update:     Sat 24 Jan 2026 17:53:12 +0000
Manifest next update:     Sat 31 Jan 2026 17:53:12 +0000
Files and hashes:         1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: yAZ8PklkGW5ZS4MBfv9BF9vcqVzgrHvdJ4yqwiEgAM4=)
                          2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3280 (0xcd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
        Validity
            Not Before: Jan 24 17:53:12 2026 GMT
            Not After : Jan 31 17:53:12 2026 GMT
        Subject: CN=69750708-9788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cd:ba:43:9e:8e:32:96:f5:45:19:59:49:9e:
                    88:5f:a3:66:98:fe:2c:76:19:c8:4a:52:55:43:74:
                    4d:34:3a:dc:04:99:c4:8a:71:11:6f:c7:6a:a6:de:
                    98:6f:34:34:82:70:af:1f:69:61:6b:1d:b6:34:25:
                    06:37:c5:14:7e:e0:f9:33:e5:d0:85:17:0f:6d:bb:
                    a1:8f:84:72:11:86:ce:a7:be:b2:8d:8c:55:9b:59:
                    93:8b:53:d5:67:6a:7e:a8:f9:6f:5e:03:cb:84:26:
                    55:d6:a5:49:99:82:f1:00:b3:46:bb:bb:f4:71:d7:
                    c0:a9:bc:15:ea:4b:84:9e:e0:db:1d:6b:bb:53:84:
                    f2:15:d1:be:b3:b0:9d:2d:ed:3d:b8:00:d9:92:74:
                    7a:9d:b3:4a:e6:f0:22:4b:fc:02:28:6b:86:b8:48:
                    e0:50:31:4d:4d:87:06:ca:6b:ed:b2:18:ed:f7:4c:
                    53:d9:31:9c:4f:12:52:37:25:3f:3f:ec:5d:90:65:
                    58:ca:f1:f5:be:16:db:c7:88:4b:ed:66:8f:22:36:
                    6f:29:91:2d:ea:45:7e:1d:b7:d6:be:cb:2b:c9:e1:
                    77:d8:1f:0b:83:2c:72:b4:59:71:21:f2:4e:9c:f2:
                    24:2e:74:c9:2e:5e:3d:da:e0:1e:96:9f:a5:a8:aa:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0F:C9:25:C4:D6:87:FC:F7:7E:D5:C4:EC:8F:93:C5:08:67:21:C3
            X509v3 Authority Key Identifier:
                keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2a:87:c8:ab:29:d0:8c:d0:52:cc:a6:37:24:bb:30:b8:e9:
         3c:35:ee:51:e4:31:d9:f4:aa:bc:0c:a7:d9:8f:80:78:db:d2:
         14:6c:68:26:78:43:fd:df:fb:10:b3:01:b0:65:ad:be:96:75:
         3a:99:9d:47:c0:58:f6:dc:07:10:3b:3a:59:e9:60:d9:ca:61:
         3f:47:ba:79:0b:ec:67:f8:93:42:12:11:1b:61:1e:ee:a6:27:
         c0:52:b1:9d:fc:e3:3f:e2:80:44:dc:bb:f8:35:03:ac:19:c7:
         22:68:5d:d2:78:dd:99:6c:ed:85:1b:8a:62:fb:7a:12:4e:25:
         7f:21:44:59:68:93:77:1b:22:86:73:b7:58:9c:9f:24:f7:76:
         94:c1:e4:1f:85:6d:46:97:01:51:6d:f6:6f:55:a9:3a:0b:33:
         85:bf:7b:95:c8:73:32:3b:56:ff:31:67:d8:d3:6d:0a:91:8b:
         16:25:7b:fe:e3:2c:ed:3e:89:dd:20:4b:8e:98:d3:2c:f9:f3:
         30:26:e1:07:31:2c:f6:58:b2:91:67:cd:47:ff:eb:99:6d:d7:
         dc:6f:e3:6a:de:f2:18:bd:6e:c0:93:82:d7:c1:eb:26:7f:0a:
         83:70:c2:1a:a2:0a:d9:e7:34:27:9b:5b:77:40:a3:35:92:cb:
         0f:2a:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:10 2026 by rpki-client