This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
File:                     hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json)
Hash identifier:          xvwWPcQ3bMCnhcsn/Oyoiw7u6aewDSEGJewDnjiOfRU=
Subject key identifier:   72:FA:EA:86:06:E8:CE:F8:A4:86:07:5D:F7:2A:50:99:A4:DF:21:04
Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51
Certificate issuer:       /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
Manifest number:          E8
Signing time:             Sun 25 Jan 2026 04:39:05 +0000
Manifest this update:     Sun 25 Jan 2026 04:39:04 +0000
Manifest next update:     Sun 01 Feb 2026 04:39:04 +0000
Files and hashes:         1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: CGpnZtA+Rkx9cdvhbafHCSBQnprnyqZ5G3vQHzzjap8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl
                          rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251
        Validity
            Not Before: Jan 25 04:39:04 2026 GMT
            Not After : Feb  1 04:39:04 2026 GMT
        Subject: CN=69759e69-d922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:bb:64:ed:c7:94:78:71:04:77:7e:5d:a6:
                    fb:ea:c1:a8:0c:52:4b:b1:c8:ae:b4:33:e0:1c:7a:
                    51:21:71:81:1e:f3:5d:08:ea:3f:e7:1b:b5:aa:57:
                    f2:66:b6:c2:30:15:7e:ce:97:d0:04:47:ca:df:29:
                    64:84:c4:e3:f7:d1:03:70:e0:e4:b9:28:88:09:a6:
                    2d:05:d8:18:19:92:00:50:8e:4a:0a:5f:b7:1d:54:
                    c3:5d:4d:4b:8d:69:a3:bf:fd:aa:97:3f:44:08:e0:
                    7c:87:c9:05:40:cf:23:c6:d2:f2:ea:bf:5c:45:e6:
                    0c:64:27:66:98:26:24:c1:1e:51:03:40:c9:8b:4f:
                    a3:9e:ae:7a:64:40:9c:57:61:a1:32:e5:01:62:ed:
                    8d:4f:c7:cd:a9:d4:57:61:e9:6a:70:36:2d:87:f8:
                    a7:fc:a6:11:59:40:ea:9e:01:ac:18:6f:fd:c2:2b:
                    83:6c:64:61:7a:86:36:67:5c:a1:fe:94:21:2d:b1:
                    02:d3:be:24:b0:3d:61:4b:13:34:f8:3e:f8:97:bb:
                    51:4d:2f:f7:d9:90:0a:08:55:d6:e7:fc:74:60:fd:
                    fe:21:d5:20:84:52:ec:66:a7:b1:eb:ca:1e:73:a5:
                    f9:46:29:65:19:55:27:7a:60:25:9b:4f:29:e2:53:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FA:EA:86:06:E8:CE:F8:A4:86:07:5D:F7:2A:50:99:A4:DF:21:04
            X509v3 Authority Key Identifier:
                keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a1:2c:47:be:c4:75:8c:d0:8b:ad:7a:ed:0c:bf:a1:2f:ac:
         c6:e7:c9:95:ad:64:a2:90:e3:e1:98:84:aa:ce:40:e5:22:df:
         fe:e7:b5:2d:b1:9a:5d:e8:e5:c1:73:de:18:65:3e:c6:11:ee:
         19:90:3b:d3:11:d5:03:5e:25:f2:05:d3:9d:00:30:4f:62:d5:
         9c:9f:d9:76:e0:fc:bd:51:fc:c9:8e:51:2f:78:a8:a2:82:75:
         e1:2c:ca:4e:0e:88:94:e1:a9:1d:99:ac:5f:31:7b:1b:88:ab:
         1c:b5:8b:0f:85:69:8d:07:09:ca:a5:9c:5e:13:8a:02:3c:92:
         dd:95:d3:58:df:c7:76:78:17:e2:0b:a9:7a:4f:1e:60:8d:7b:
         35:cb:ef:76:90:71:1a:e8:a3:f9:3f:53:8e:1b:89:a7:d9:ce:
         83:83:15:b8:94:0e:fd:d7:3e:4a:ec:a8:82:a8:d4:c6:fa:b1:
         a6:88:17:c7:31:cf:ee:46:0d:72:f5:b4:33:c3:1d:cf:76:0a:
         2f:6e:42:cd:22:85:3d:22:20:d6:3f:b1:36:69:75:72:5c:fa:
         a2:54:3f:78:83:7b:bf:24:c6:8d:dd:49:eb:e8:15:be:3b:1b:
         b5:52:74:d9:b5:0e:73:68:a7:fc:6a:61:9f:77:b8:e3:c6:51:
         2f:93:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:45:14 2026 by rpki-client