This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
File:                     h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json)
Hash identifier:          rBDbaf2I23ilGHh6qnDWYsRfuN26rTX3kGG0OATwjCM=
Subject key identifier:   30:D5:75:86:E3:B2:26:47:9F:F1:36:ED:49:48:08:31:7E:36:D6:7F
Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
Certificate issuer:       /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
Manifest number:          7F
Signing time:             Sun 25 Jan 2026 05:50:29 +0000
Manifest this update:     Sun 25 Jan 2026 05:50:29 +0000
Manifest next update:     Sun 01 Feb 2026 05:50:29 +0000
Files and hashes:         1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: ZoJGZYfDqLWDBo2339TVD6QKKEkCmluNePRivk5ET9k=)
                          2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: B3FtQDRvIinRVvF4MBjV/k6jhNbFtX5P5Ext8/M8cjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl
                          rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
        Validity
            Not Before: Jan 25 05:50:29 2026 GMT
            Not After : Feb  1 05:50:29 2026 GMT
        Subject: CN=6975af25-c463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:be:c0:24:ec:5a:37:6e:95:36:94:36:de:
                    e1:79:5b:93:4a:65:8e:c4:ef:a3:9e:87:18:97:2b:
                    de:8a:ac:39:5d:f4:da:58:94:49:52:c1:e8:7b:0b:
                    47:ad:a4:bd:b3:1b:32:1d:ea:d8:e2:10:a5:ed:e7:
                    e9:f5:f2:f2:38:f6:c2:67:a4:3d:a2:6c:9f:81:dd:
                    63:61:06:49:53:48:00:53:3d:9c:c1:94:54:a6:b2:
                    e3:29:1b:c4:39:33:ed:0f:f0:86:b1:51:13:ae:22:
                    c6:99:49:30:40:61:0a:c8:f9:b7:64:dd:d6:83:b1:
                    a5:4a:30:f7:0e:70:e7:89:4e:dc:1c:df:d4:84:18:
                    fd:81:58:b4:f6:b3:9a:d0:b6:b3:7d:5e:22:0d:92:
                    25:f2:3c:dc:bc:6e:a8:5f:cf:1a:13:0f:71:16:ae:
                    32:b6:96:67:c7:54:a6:18:3f:95:a9:13:f2:3b:f8:
                    32:a1:67:5d:6f:7d:18:97:a8:1a:14:e1:e9:94:ea:
                    c0:ff:b6:ac:fd:b9:fb:be:38:f1:6a:cc:4d:8b:85:
                    5c:2c:5b:82:6f:22:00:87:55:38:b8:10:58:2c:2e:
                    61:be:19:98:63:92:62:1d:ce:65:a8:ad:eb:92:db:
                    8e:0f:af:87:71:12:41:2c:09:e3:23:b0:53:ff:04:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D5:75:86:E3:B2:26:47:9F:F1:36:ED:49:48:08:31:7E:36:D6:7F
            X509v3 Authority Key Identifier:
                keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:19:93:aa:05:fd:d6:90:0c:5f:c7:87:f5:b6:aa:89:c4:df:
         df:99:89:1c:7a:9b:e3:a9:15:15:c6:9a:b5:0b:31:63:94:0e:
         bc:47:03:db:ac:7c:39:ab:ba:f7:b0:d5:4d:d1:73:b5:03:1a:
         1b:0c:de:21:99:ac:a6:ce:8f:76:6e:c9:8d:82:d2:36:8c:29:
         2b:eb:d3:0c:54:f0:40:35:db:45:24:6c:fd:5b:ed:1b:09:ec:
         da:c1:e1:b0:ef:29:e8:60:98:01:ac:00:45:59:55:66:31:6c:
         32:80:e8:56:62:80:18:0c:25:f2:2c:2e:60:47:f0:f3:8a:f3:
         63:6f:3a:4e:78:1c:8c:87:50:4a:03:f9:e2:78:4f:87:e1:48:
         51:a1:c0:31:8f:32:b2:b0:56:b4:92:6b:39:88:e2:54:f3:3e:
         90:96:11:5f:0d:63:6a:11:9d:ed:93:c8:ab:e0:1c:ae:5e:80:
         58:dc:60:67:a2:2a:46:70:e2:8e:77:7f:1b:6d:65:d0:62:4c:
         90:3e:92:14:5e:d8:36:a1:04:8a:26:f5:7c:60:69:f7:58:ae:
         14:d2:69:06:59:d1:e3:1f:05:1d:9b:91:e8:3f:ae:9b:34:35:
         db:47:5a:a8:04:f5:9d:49:50:73:13:a5:2b:0e:4a:6d:ea:b5:
         e7:3b:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:43 2026 by rpki-client