This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
File:                     fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json)
Hash identifier:          /LFY/sovMXyd+NtoG8YvI0z3QyFXFBYfmrQYEdJa4rk=
Subject key identifier:   09:D3:07:D2:1D:A6:F6:11:FA:73:DB:03:36:07:5D:F2:F8:F0:E6:60
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Certificate issuer:       /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial:       0869
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
Manifest number:          0848
Signing time:             Mon 02 Feb 2026 20:26:47 +0000
Manifest this update:     Mon 02 Feb 2026 20:26:46 +0000
Manifest next update:     Mon 09 Feb 2026 20:26:46 +0000
Files and hashes:         1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: lqR1urpk1rvBceBRhb0ZU7okuO70QZJpo377LxzI020=)
                          2: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: F8etYfliydabteMfbSSAIkH2xX9USHfIQD7d5Y84ryM=)
                          3: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: TWoh7LVQqQmuW9GpZzIh16PRVa2OB94FLWBuSV7i0+8=)
                          4: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: BwA8MEhqgGbAzSbHdeQ+BFQnrqqSo7A794PhNnAq0qA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
                          rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 20:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
        Validity
            Not Before: Feb  2 20:26:46 2026 GMT
            Not After : Feb  9 20:26:46 2026 GMT
        Subject: CN=69810887-b0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ae:f0:7b:8b:7f:bc:2b:64:ed:85:ea:c1:55:
                    38:c0:25:c5:e3:23:32:21:f9:ab:98:f2:fc:dc:f4:
                    14:1d:71:4b:63:82:03:42:14:b7:11:e1:fa:58:60:
                    dd:ca:ce:ee:0b:f5:54:b5:fe:52:9b:1b:94:89:46:
                    c2:93:6a:5e:fc:32:78:a5:a4:d4:18:8f:e9:e4:f6:
                    17:21:73:04:6a:1e:d8:25:ef:f9:c9:82:be:67:b1:
                    c0:bb:a0:90:b4:d6:c1:08:19:a2:ed:fe:f5:5b:f8:
                    2f:33:20:ae:6a:11:0d:4b:60:6e:a2:6c:da:f8:90:
                    83:46:0c:3c:27:ae:67:71:b4:92:d5:89:95:ce:1a:
                    ab:5e:bb:b4:6a:8e:63:94:ef:fa:e7:12:83:19:da:
                    0e:d5:16:a0:95:ab:d2:39:90:65:61:c4:8e:64:83:
                    ef:b3:a5:df:f7:1b:50:b6:33:2a:8f:cb:c9:09:1a:
                    3a:44:52:4d:44:40:dc:76:80:86:a6:9b:b9:d4:10:
                    88:0a:ec:58:ce:75:e1:36:95:66:da:a9:cb:0a:9d:
                    de:73:f1:24:de:ec:d3:01:48:6f:09:90:64:71:2a:
                    c5:9d:a5:16:86:4c:d0:d1:51:d3:15:6d:c2:d4:1f:
                    30:b9:02:0e:05:4f:06:fc:df:a5:93:e3:d3:33:08:
                    f0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D3:07:D2:1D:A6:F6:11:FA:73:DB:03:36:07:5D:F2:F8:F0:E6:60
            X509v3 Authority Key Identifier:
                keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a6:51:57:82:92:0b:ed:8a:84:6e:73:ea:72:87:b4:2c:73:
         31:47:83:b6:99:33:a2:f9:c6:83:fd:a7:b3:c8:66:f2:f5:a6:
         2b:f3:07:f6:dd:4a:da:79:1f:c8:30:72:a7:75:43:40:be:24:
         38:7f:64:19:da:dd:bd:08:51:81:87:18:5d:c6:9d:c8:f2:d5:
         7c:f9:74:24:30:77:04:05:c9:84:af:8e:03:e7:68:8d:f7:8b:
         cd:4a:ac:d4:9a:1e:a5:3c:f0:ea:32:d4:80:6f:9f:07:07:79:
         6a:b0:9f:0f:77:83:c3:dc:7b:cd:2b:bd:bf:3d:ba:d8:21:18:
         65:4e:ed:c4:d2:28:78:f2:3b:68:38:11:60:c0:de:b8:38:35:
         2f:36:9b:0f:9d:98:52:57:4a:48:77:85:93:33:49:47:d4:3f:
         e2:65:32:c7:9e:95:a5:53:ba:a7:bc:89:d2:5b:76:e0:5c:e1:
         23:9d:59:cc:3c:de:e4:86:32:0b:2e:6b:83:ed:0c:cc:30:ac:
         1b:58:19:00:d0:d7:6c:8a:ea:1b:10:30:6a:33:bb:95:49:7b:
         2c:54:b2:8a:99:4d:43:72:5a:40:f0:4a:7a:f6:d7:0a:93:72:
         12:bd:f9:bb:7c:76:e2:18:43:dd:a8:01:00:e8:5d:ed:f7:bc:
         e2:85:c0:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE
RTQ2MTI3NTAwHhcNMjYwMjAyMjAyNjQ2WhcNMjYwMjA5MjAyNjQ2WjAYMRYwFAYD
VQQDDA02OTgxMDg4Ny1iMGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAka7we4t/vCtk7YXqwVU4wCXF4yMyIfmrmPL83PQUHXFLY4IDQhS3EeH6WGDd
ys7uC/VUtf5SmxuUiUbCk2pe/DJ4paTUGI/p5PYXIXMEah7YJe/5yYK+Z7HAu6CQ
tNbBCBmi7f71W/gvMyCuahENS2Buomza+JCDRgw8J65ncbSS1YmVzhqrXru0ao5j
lO/65xKDGdoO1RaglavSOZBlYcSOZIPvs6Xf9xtQtjMqj8vJCRo6RFJNREDcdoCG
ppu51BCICuxYznXhNpVm2qnLCp3ec/Ek3uzTAUhvCZBkcSrFnaUWhkzQ0VHTFW3C
1B8wuQIOBU8G/N+lk+PTMwjwhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnTB9Id
pvYR+nPbAzYHXfL48OZgMB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC
QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK
MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx
ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGplFXgpIL7YqEbnPqcoe0LHMxR4O2mTOi+caD/aezyGby9aYr8wf2
3UraeR/IMHKndUNAviQ4f2QZ2t29CFGBhxhdxp3I8tV8+XQkMHcEBcmEr44D52iN
94vNSqzUmh6lPPDqMtSAb58HB3lqsJ8Pd4PD3HvNK72/PbrYIRhlTu3E0ih48jto
OBFgwN64ODUvNpsPnZhSV0pId4WTM0lH1D/iZTLHnpWlU7qnvInSW3bgXOEjnVnM
PN7khjILLmuD7QzMMKwbWBkA0NdsiuobEDBqM7uVSXssVLKKmU1DclpA8Ep69tcK
k3ISvfm7fHbiGEPdqAEA6F3t97zihcBN
-----END CERTIFICATE-----
Generated at Wed Feb 4 08:30:00 2026 by rpki-client