This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File:                     hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier:          9/ObSvtFITCZrAmuzv/MWjgx65HRv+Sc1l2Iy2Dn8Q0=
Subject key identifier:   2D:17:E7:7E:5B:C8:E1:8F:5B:C9:B1:2C:45:8F:A7:9E:3D:F4:9E:98
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       0401
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number:          038C
Signing time:             Tue 27 Jan 2026 00:04:49 +0000
Manifest this update:     Tue 27 Jan 2026 00:04:49 +0000
Manifest next update:     Tue 03 Feb 2026 00:04:49 +0000
Files and hashes:         1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: WvdUHOzVY6KH9/NgU4W0LewFWcbYamzu+13MqFIP398=)
                          2: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: CZLbLDcndy2xxG5xhFEstQ1CfMNrOMxWn16hiuaCB3A=)
                          3: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: WhQNM40PbhQEu35UK4su17rbvUJWY/mG7qX+ZTgU+w4=)
                          4: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: DtxFYEOtGQIY53GPRL1dPzv4/8AYv0bkRXV3Pqe74uw=)
                          5: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: 1GqQuY6ipOukNjcNmFCRz4aP/qgsCVml/uDhWXv7ZZA=)
                          6: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: VMFfG28SR9K0gvV1WJc79wKMQ3bg4zxW5arPOP7vJGw=)
                          7: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: 2OyyCanvq13/lef3XlgSuSBG44PottDi4GJaK+x96f4=)
                          8: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: /NnlQrY/nq8rIKszOQKAgkEH+3DZidftTKYbVxGk7FQ=)
                          9: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: a6e59gPtF+oIYCL1FfTClIwM64Rzhh/gE9NV+k4hGio=)
                          10: EA792108690E11EF9396CC48C4F9AE02.roa (hash: 6kpxPOxsj0Raf3qdIHWPGMM1EX7pSguYPkBcI1ejIWI=)
                          11: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: eDZoNBLuQcw3Wn1rO/220lw34J3dfQJ4no+D+vY9xGU=)
                          12: 218211CA68F911EF986C8281C4F9AE02.roa (hash: mHnULwgJoiFgX9ai3WggRtZIFI0XOoqJW+z2W78zhrY=)
                          13: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: z5Obs62Z4LeG64hnhJujzAwct4kvn0rbMC23ZtCEssE=)
                          14: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: q8+3jxkLjtGgAWTpN6kPoNOdBfmaZjeJ2k/PYDuVa+o=)
                          15: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: KVYDjb3LOCylq5/WVla/qjjDgT6zCAlDqXpLKrRgpFk=)
                          16: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 0Wbd0TloILo4D7y7bRvBLRW10Y2AoSQoJYvEUNn6cbg=)
                          17: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ugtcgz+OwF9hfe6CeTebPqLvH2EQn6e6HzRfBkIfJHo=)
                          18: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: 10NBPSybJ1d+q+ni3VVF3MNFnJGqTgzoq8TVIRJgedI=)
                          19: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: zw3Bw3tYxrZQpKxOUK57pZSMryzQb0S86CCh4Nq5BP4=)
                          20: BE4B3228691411EFB573C120C4F9AE02.roa (hash: 5H32B3wtPXDSZssXMxHc0JZTPyABfL6/i25/U22sL/A=)
                          21: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 2TbZWTz5MrS4pUvVlInd+ICIzajVNRsMUaqG9OLqDBQ=)
                          22: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: aOIDROQi6GkPOjEwda+oZgehrmBXac6uf9Rdo2Bd6r4=)
                          23: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: D5I1AGWIgCpGbK2ioEBWE7LhyF6lwZBdzrjdsvoMJHo=)
                          24: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: 9K/dPzFWeJ3662AXxOwpQnYP5rZeIOBTrzjoLeu+KQo=)
                          25: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: Yx63u4z9hDR8keVLNdP1xC6pEQSE/UG9aZLw+X4LwRo=)
                          26: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: 2vWk3DGkjeXEl7FbZy0aavCh6asq08aBokPfmXkrJdc=)
                          27: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: xRZTvOkzIPzpcRY24c/2u0KIcsyrTX9YYHCujB9nKyM=)
                          28: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 8u8ukooKAbnYCoCoCcqh3LJNzpT+wb7zAAtytRCCJns=)
                          29: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6WmIg/lOdQnkEvIsKV1OREBoFlxfYt6gLUjZAiHr4+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 00:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Jan 27 00:04:49 2026 GMT
            Not After : Feb  3 00:04:49 2026 GMT
        Subject: CN=69780121-fb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:67:29:b0:7a:b8:1f:25:d6:1b:c3:b4:3e:9a:
                    de:7a:60:d5:57:71:ef:c9:ec:3d:04:1d:8b:68:93:
                    3d:b1:3b:a5:02:4a:1c:a1:6c:50:a5:ea:ef:cf:2d:
                    fa:38:ba:db:f9:28:56:af:cf:a5:68:f2:2d:9b:fc:
                    8b:ef:3a:9c:8d:a3:d4:02:46:92:51:03:3b:43:e1:
                    a2:ed:2e:23:0a:4f:66:01:6b:f7:32:40:43:2d:38:
                    04:b5:33:e9:17:4b:f6:91:35:04:d8:f4:77:56:6f:
                    55:ce:4e:d5:e8:dd:e3:c0:f9:3f:5f:c5:6d:2a:dd:
                    e4:e3:8c:6d:6f:e9:c6:cc:55:35:65:cf:16:cc:21:
                    2b:62:a8:48:a8:3b:f9:19:8d:d3:c7:7a:a9:63:52:
                    98:11:a0:9c:bd:32:66:08:b5:3f:6d:7c:7d:93:04:
                    b4:74:4f:ad:b0:e5:68:e1:9d:9f:b8:f7:cb:7c:4b:
                    da:bb:ad:57:8e:7b:be:fb:06:91:09:47:88:d5:41:
                    ce:9b:76:eb:10:bb:0e:2d:88:3a:07:ae:71:48:e6:
                    e3:a4:14:d6:e1:77:cc:51:b4:1a:c1:04:f3:bc:86:
                    59:8a:1b:45:e2:a0:6c:b8:70:38:cb:2a:44:a7:7b:
                    d5:de:90:a1:95:ee:a7:ca:fe:ff:05:a7:ac:1c:27:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:17:E7:7E:5B:C8:E1:8F:5B:C9:B1:2C:45:8F:A7:9E:3D:F4:9E:98
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:bd:24:c1:a2:3a:9d:5c:21:39:b9:97:fa:40:09:81:1c:33:
         2a:af:d6:2e:3d:da:ee:90:d1:84:02:78:7c:51:19:f6:b7:c6:
         d8:0e:6c:2f:23:50:39:7b:cc:b8:5f:84:f4:68:16:d6:bf:a7:
         85:1f:a1:09:9e:1c:70:6d:5c:31:2d:2d:b2:1b:9b:75:ba:80:
         79:25:3a:1f:c0:17:9c:3d:72:22:4d:27:5e:f1:0d:0a:28:88:
         e3:8d:ea:53:c0:45:7f:61:ae:91:f4:65:8b:1d:d9:b5:8c:29:
         1c:f8:18:c4:b3:d9:7a:d6:a4:fa:4f:61:6f:e0:ce:0e:54:70:
         00:f8:30:fd:3d:f6:08:30:18:97:d8:01:8e:af:37:c1:39:18:
         aa:2f:63:47:41:24:f8:93:f7:09:90:44:1d:57:eb:60:f6:7d:
         27:64:bf:b9:2b:b5:33:f5:83:ee:bf:73:31:a0:4f:7a:30:b4:
         40:ac:58:87:ee:a7:45:08:09:d4:4e:32:d7:65:1e:8e:5d:22:
         f6:1c:a2:2a:95:5f:8b:39:bb:65:57:b1:f6:da:7a:f4:38:78:
         7d:ac:1e:b3:68:7d:c1:d1:89:89:30:ac:cb:e1:8e:df:f6:9a:
         1d:5f:11:33:41:05:c3:7f:af:88:57:6a:00:4b:bd:81:4c:6f:
         91:fb:13:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG
NUMyMDE1NzAwHhcNMjYwMTI3MDAwNDQ5WhcNMjYwMjAzMDAwNDQ5WjAYMRYwFAYD
VQQDDA02OTc4MDEyMS1mYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkWcpsHq4HyXWG8O0PpreemDVV3Hvyew9BB2LaJM9sTulAkocoWxQpervzy36
OLrb+ShWr8+laPItm/yL7zqcjaPUAkaSUQM7Q+Gi7S4jCk9mAWv3MkBDLTgEtTPp
F0v2kTUE2PR3Vm9Vzk7V6N3jwPk/X8VtKt3k44xtb+nGzFU1Zc8WzCErYqhIqDv5
GY3Tx3qpY1KYEaCcvTJmCLU/bXx9kwS0dE+tsOVo4Z2fuPfLfEvau61Xjnu++waR
CUeI1UHOm3brELsOLYg6B65xSObjpBTW4XfMUbQawQTzvIZZihtF4qBsuHA4yypE
p3vV3pChle6nyv7/BaesHCfyLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0X535b
yOGPW8mxLEWPp5499J6YMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC
OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT
anQ5UG1iTENxQkgxd2dGWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpvSTBojqdXCE5uZf6QAmBHDMqr9YuPdrukNGEAnh8URn2t8bYDmwv
I1A5e8y4X4T0aBbWv6eFH6EJnhxwbVwxLS2yG5t1uoB5JTofwBecPXIiTSde8Q0K
KIjjjepTwEV/Ya6R9GWLHdm1jCkc+BjEs9l61qT6T2Fv4M4OVHAA+DD9PfYIMBiX
2AGOrzfBORiqL2NHQST4k/cJkEQdV+tg9n0nZL+5K7Uz9YPuv3MxoE96MLRArFiH
7qdFCAnUTjLXZR6OXSL2HKIqlV+LObtlV7H22nr0OHh9rB6zaH3B0YmJMKzL4Y7f
9podXxEzQQXDf6+IV2oAS72BTG+R+xP4
-----END CERTIFICATE-----
Generated at Wed Jan 28 07:59:45 2026 by rpki-client