This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
File:                     HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json)
Hash identifier:          6sqOK3MPzfg6Y/xkHdE7vDZOVVou2pJVWEIorZ1NYzw=
Subject key identifier:   B8:E5:F4:0F:20:48:29:8B:24:DC:17:DE:B7:14:89:EC:43:49:DC:67
Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC
Certificate issuer:       /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC
Certificate serial:       0A74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
Manifest number:          0A69
Signing time:             Sat 24 Jan 2026 19:06:26 +0000
Manifest this update:     Sat 24 Jan 2026 19:06:26 +0000
Manifest next update:     Sat 31 Jan 2026 19:06:26 +0000
Files and hashes:         1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: 09OQa0jSMKCZcllcAbSLVg7na6ZkAyjd3Epbm2Z4xCw=)
                          2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: 0c8vFwsGm0y9J7tirCRPVhjPNwdGg4DZRn3e0fuJjls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl
                          rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2676 (0xa74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC
        Validity
            Not Before: Jan 24 19:06:26 2026 GMT
            Not After : Jan 31 19:06:26 2026 GMT
        Subject: CN=69751832-34d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7f:1f:e0:fe:19:d2:f0:d7:3d:c7:bd:c0:6a:
                    c3:1f:a5:3c:d3:d3:78:ca:d2:47:83:66:82:b4:53:
                    3a:f0:32:1a:dc:f3:a6:b6:51:05:07:8e:90:26:78:
                    5c:78:38:90:fb:a1:e1:52:7c:93:fc:0d:c2:90:91:
                    21:20:a1:eb:11:8e:bb:6a:a3:c9:1c:f2:a3:66:a9:
                    d9:04:1c:5d:09:d1:d5:ed:87:5b:84:e5:c2:e6:ea:
                    d5:e6:5e:18:93:ce:a3:2e:80:7d:30:49:8b:0d:57:
                    2c:6c:d7:e0:1e:bb:14:6f:1f:3c:a6:44:07:30:91:
                    f8:9f:fc:66:9f:df:10:06:b1:d9:fc:68:5a:23:e3:
                    5b:48:75:b1:ae:1c:25:9b:a5:66:5b:21:b7:57:32:
                    cd:0c:f8:7b:3a:f7:fc:67:e1:ec:0e:ea:34:e6:4d:
                    4e:09:d5:d6:66:9b:11:61:2f:37:53:f0:32:be:70:
                    4c:7b:a4:a2:d4:0c:85:4a:df:41:6a:10:c1:a8:25:
                    4e:eb:e9:87:b0:f9:c7:27:92:2c:71:f2:b5:0f:0f:
                    03:20:28:de:ce:59:7d:c4:d4:68:20:84:91:be:b5:
                    55:58:50:51:78:75:03:72:5e:47:53:8a:5a:18:00:
                    d9:bb:26:98:dc:08:e1:a2:70:ed:84:68:91:d0:42:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E5:F4:0F:20:48:29:8B:24:DC:17:DE:B7:14:89:EC:43:49:DC:67
            X509v3 Authority Key Identifier:
                keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:23:d9:8c:1a:d2:91:1f:82:e1:98:f5:3a:62:30:c2:c2:62:
         eb:3f:a4:c6:3b:e9:35:38:70:4c:28:95:07:39:3e:f2:85:c4:
         8f:83:fa:e2:50:9f:f1:a0:22:ea:73:16:a8:91:51:fa:d3:ee:
         9a:f9:ff:ee:fa:b1:21:e4:81:af:6f:1c:3b:4d:2c:b3:29:14:
         bc:63:19:c3:0e:86:57:fd:b5:c9:38:fb:2c:72:5d:8b:19:d9:
         47:49:a8:0f:8c:8b:d7:c2:c8:2d:a3:e1:59:39:c1:e1:19:a9:
         88:73:5c:5f:e2:1b:f9:c2:a0:dc:aa:ed:0b:50:c9:60:b9:5f:
         34:ac:12:93:64:1e:42:24:7a:2f:9a:62:66:67:7a:09:a7:c5:
         00:64:cd:62:2b:15:fb:6d:51:c6:6a:4c:38:78:17:08:db:56:
         8d:ad:17:aa:97:f1:43:f1:08:a1:ee:85:9f:d6:c5:4e:0f:3e:
         c8:92:af:c9:fa:8f:49:1a:ca:f6:bf:0a:26:ac:7a:ce:46:6b:
         ae:45:01:d0:d3:b0:ac:91:93:95:41:39:06:69:0e:95:e9:15:
         64:db:4b:0d:c7:d9:8c:68:91:2c:15:97:71:33:00:52:b2:86:
         35:6a:d8:bb:53:17:81:27:3e:f9:24:89:a7:d0:70:dd:a3:17:
         5b:8b:30:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjYyMjcxMTAvBgNVBAUTKDFERjM0QjlFM0Y3QTM4RDc1ODk4RUQ0QjA1RjlFRDRD
NDAwNENFQkMwHhcNMjYwMTI0MTkwNjI2WhcNMjYwMTMxMTkwNjI2WjAYMRYwFAYD
VQQDDA02OTc1MTgzMi0zNGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7H8f4P4Z0vDXPce9wGrDH6U809N4ytJHg2aCtFM68DIa3POmtlEFB46QJnhc
eDiQ+6HhUnyT/A3CkJEhIKHrEY67aqPJHPKjZqnZBBxdCdHV7YdbhOXC5urV5l4Y
k86jLoB9MEmLDVcsbNfgHrsUbx88pkQHMJH4n/xmn98QBrHZ/GhaI+NbSHWxrhwl
m6VmWyG3VzLNDPh7Ovf8Z+HsDuo05k1OCdXWZpsRYS83U/AyvnBMe6Si1AyFSt9B
ahDBqCVO6+mHsPnHJ5IscfK1Dw8DICjezll9xNRoIISRvrVVWFBReHUDcl5HU4pa
GADZuyaY3AjhonDthGiR0ELXdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjl9A8g
SCmLJNwX3rcUiexDSdxnMB8GA1UdIwQYMBaAFB3zS54/ejjXWJjtSwX57UxABM68
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjIyNy8wRDcyOEEwQTdB
M0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9OZFltTzFMQmZudFRFQUV6
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hmTkxuajk2T05kWW1PMUxCZm50VEVBRXpydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjIyNy8wRDcyOEEwQTdBM0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9O
ZFltTzFMQmZudFRFQUV6cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcI9mMGtKRH4LhmPU6YjDCwmLrP6TGO+k1OHBMKJUHOT7yhcSPg/ri
UJ/xoCLqcxaokVH60+6a+f/u+rEh5IGvbxw7TSyzKRS8YxnDDoZX/bXJOPsscl2L
GdlHSagPjIvXwsgto+FZOcHhGamIc1xf4hv5wqDcqu0LUMlguV80rBKTZB5CJHov
mmJmZ3oJp8UAZM1iKxX7bVHGakw4eBcI21aNrReql/FD8Qih7oWf1sVODz7Ikq/J
+o9JGsr2vwomrHrORmuuRQHQ07CskZOVQTkGaQ6V6RVk20sNx9mMaJEsFZdxMwBS
soY1ati7UxeBJz75JImn0HDdoxdbizCW
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:11:55 2026 by rpki-client