This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File:                     aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier:          aHzLx97mxhvGfJ8vPtLxAbK3jX7kmlw8KJfdndKkVco=
Subject key identifier:   2E:DA:61:12:F4:55:35:83:A8:6D:00:78:A7:FE:9C:2C:AF:E4:CF:27
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer:       /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number:          0118
Signing time:             Tue 03 Feb 2026 04:37:09 +0000
Manifest this update:     Tue 03 Feb 2026 04:37:08 +0000
Manifest next update:     Tue 10 Feb 2026 04:37:08 +0000
Files and hashes:         1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: /qHox+0osWJLGyQnQADrPBVGwva6YGz4pIDJp2xjTRM=)
                          2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: 4wFdAJqxj8YswLOV/tdLrHAF7d4VnFbbezC7qK8vV6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
                          rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 04:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
        Validity
            Not Before: Feb  3 04:37:08 2026 GMT
            Not After : Feb 10 04:37:08 2026 GMT
        Subject: CN=69817b75-44d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:d4:6b:50:0e:36:26:df:a9:63:29:9d:be:
                    b9:9e:47:d9:a2:dd:54:0d:87:b4:48:f3:6d:0c:d6:
                    a7:19:b2:2f:95:f8:2a:60:0a:8d:7d:62:95:6b:d4:
                    d3:a6:af:b3:7d:13:38:eb:60:96:1a:08:46:46:ce:
                    c6:db:ec:a8:3f:ac:05:ae:4e:96:bc:cb:63:16:89:
                    bc:41:1f:df:45:c2:e1:8f:70:16:1e:f2:df:66:16:
                    dd:21:3a:17:b7:11:cf:1d:89:7b:f1:8e:a9:e6:1a:
                    28:63:d0:1e:cb:86:39:51:41:ac:44:8a:99:e3:a4:
                    ae:72:ef:da:c1:76:6f:c9:4c:5b:8b:89:83:f8:7d:
                    85:c1:d0:16:69:6c:57:11:18:88:d8:5f:14:10:ab:
                    ee:77:f1:1e:1a:36:22:18:10:80:0d:c9:56:7e:c4:
                    fd:76:c5:0e:5a:85:ab:ba:06:78:d2:23:84:46:ec:
                    f8:5b:fd:78:34:ac:57:26:a4:a5:30:54:85:21:19:
                    48:20:d4:2f:b7:f9:69:dc:bf:2c:13:2e:f6:90:43:
                    9b:6f:e9:b4:28:8f:71:bf:4e:4a:01:ea:bf:42:a1:
                    6e:bb:9d:50:26:98:8e:02:33:4f:0d:19:70:6a:41:
                    a2:1d:7e:89:ea:7e:b7:1b:92:76:aa:b4:7b:f3:a8:
                    21:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DA:61:12:F4:55:35:83:A8:6D:00:78:A7:FE:9C:2C:AF:E4:CF:27
            X509v3 Authority Key Identifier:
                keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ad:4c:c4:e7:73:a8:19:6a:a3:33:85:14:54:e9:53:6e:7d:
         b7:6c:e2:99:72:d9:84:20:98:f8:12:b2:f7:56:05:39:89:04:
         63:7e:36:fc:4e:a3:50:9f:12:fe:45:19:04:de:83:dd:bc:36:
         df:96:ca:de:e5:93:30:99:58:b6:6b:0f:dc:9c:ac:df:43:bb:
         6e:d9:ba:17:3f:f2:5b:07:38:1c:b4:28:50:af:af:b8:af:62:
         16:5a:3a:ed:e0:01:03:27:7e:41:76:ba:38:1e:8f:a6:21:b2:
         26:eb:6b:80:b7:a7:ee:e9:6e:54:02:d4:1a:75:54:80:8c:c3:
         78:da:48:3a:ed:13:ed:d3:30:69:ed:20:e3:72:3d:ad:42:4c:
         e9:e2:97:bb:51:62:8b:ad:2b:4c:e0:63:43:be:f0:4a:11:9c:
         48:e6:39:79:ee:62:fe:fe:d9:0b:da:2d:67:98:9a:c5:cd:58:
         07:d7:cf:05:59:aa:09:92:bb:94:e9:d1:84:14:e6:00:53:c1:
         5b:cb:ed:a7:f3:bf:24:6c:b4:b2:3f:0b:6e:5d:d8:10:74:78:
         56:ac:a2:6d:36:bc:a7:78:86:fd:ec:c5:85:01:9f:63:b1:99:
         d0:72:3c:7d:33:a1:ed:1a:d6:c4:68:89:54:3b:fa:33:a8:19:
         1d:70:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 16:51:46 2026 by rpki-client