This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
File:                     hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json)
Hash identifier:          RMwM8WguQmwb+IThcY5vSLmzajZoV6QL6NvKi0LqXZ8=
Subject key identifier:   00:B9:6D:06:A9:6D:00:E4:A4:56:0F:92:D9:EA:BE:6C:52:8B:9F:B1
Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
Certificate issuer:       /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Certificate serial:       0D91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
Manifest number:          0D88
Signing time:             Sat 24 Jan 2026 17:36:13 +0000
Manifest this update:     Sat 24 Jan 2026 17:36:12 +0000
Manifest next update:     Sat 31 Jan 2026 17:36:12 +0000
Files and hashes:         1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: wjGL1pGNSSlmZcdkeRuCpTKprspWVl8jE+YCtNq982o=)
                          2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: MzWbilqvJU/bA0pbUK90+TSc+f/XjXTcVvnJOFhs0gQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl
                          rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3473 (0xd91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
        Validity
            Not Before: Jan 24 17:36:12 2026 GMT
            Not After : Jan 31 17:36:12 2026 GMT
        Subject: CN=6975030d-959b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:1f:4f:0b:75:fc:39:87:b2:43:fc:b0:1c:
                    b6:d2:aa:3c:81:51:99:5a:6b:0b:d2:1c:6b:2c:c9:
                    fc:37:a4:29:70:12:8d:a0:df:8b:19:d5:60:04:fb:
                    8d:50:61:ca:69:3a:51:31:64:93:69:8a:22:ae:6a:
                    4c:02:78:36:49:12:b8:9a:65:29:99:80:4e:d3:df:
                    22:31:3b:85:93:5e:c8:aa:59:29:04:15:b6:7d:d1:
                    1a:be:ce:f8:47:fc:e7:85:ff:ae:38:1b:b0:6d:2b:
                    09:4c:b6:c2:98:ec:07:6f:0c:03:b5:c1:a9:53:2c:
                    58:f6:41:61:36:db:0a:63:98:b2:13:c3:16:b0:dc:
                    1d:4a:2e:a5:15:47:cd:d0:7a:d3:e7:4d:de:bd:79:
                    ab:c2:1c:7b:09:41:68:1c:40:9c:f9:5a:53:1b:4c:
                    22:aa:3b:55:91:a8:05:5f:bb:fc:8f:65:42:0f:2f:
                    7e:46:89:84:ff:e3:43:2a:9f:48:8c:87:10:f8:fc:
                    ab:53:8d:b0:80:25:98:a7:d3:8e:17:dc:b3:ce:5b:
                    eb:34:0f:de:5b:18:c9:77:2c:e8:c7:4b:41:aa:7b:
                    b1:05:bc:da:21:c5:66:fa:89:ae:c1:71:7f:09:93:
                    2f:f5:00:15:68:2b:3b:4a:ba:24:d8:32:6e:74:87:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B9:6D:06:A9:6D:00:E4:A4:56:0F:92:D9:EA:BE:6C:52:8B:9F:B1
            X509v3 Authority Key Identifier:
                keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:2b:f3:d1:05:41:9f:9f:2e:be:86:4e:8b:3f:62:24:77:
         75:d4:6d:59:ec:8d:47:63:72:4d:2f:22:3b:c5:4f:f7:97:01:
         2f:4c:df:f4:08:05:5e:7d:0f:00:41:8e:10:87:d4:4c:1f:37:
         7f:20:ad:9b:7b:07:7c:2a:31:14:16:46:7c:93:5f:3e:2e:e1:
         13:fd:d0:0b:7d:23:06:3c:d7:b9:90:cf:80:cd:23:af:16:cc:
         3e:08:9f:a9:78:fe:55:ba:19:d5:30:ae:e7:34:ed:d9:9d:64:
         b9:ab:98:9b:12:eb:3b:69:6b:d8:00:96:e1:72:a8:32:99:01:
         14:a5:ec:86:d6:80:76:5d:9a:5e:63:75:d9:85:d2:50:00:06:
         17:f5:b2:f9:01:84:c0:88:51:68:09:5d:fd:5d:f0:b2:94:f3:
         1a:e8:04:cf:7b:25:8a:8a:53:75:e5:a7:93:96:28:da:aa:ac:
         06:a4:ee:78:fd:fd:33:d2:6e:64:d0:ce:00:92:c1:76:fc:49:
         95:f8:03:88:9e:b4:62:1f:db:8a:b0:9e:65:b3:d8:35:b5:74:
         51:d5:ec:b6:8f:74:ca:0a:8e:2c:10:bc:85:c1:d5:10:81:97:
         69:2d:b7:0f:6b:e3:ea:8a:09:2d:62:8b:49:2a:18:c5:3f:0f:
         cc:06:1f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:16 2026 by rpki-client