This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
File:                     FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json)
Hash identifier:          QObawewHxsHvN9CG99EgA63P/0fsfKFIwbUa/UpPuvg=
Subject key identifier:   C0:6E:E0:44:91:C8:EC:84:3A:2D:6D:AC:35:BD:BA:55:A5:0D:3D:7A
Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
Certificate issuer:       /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Certificate serial:       0708
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
Manifest number:          06E3
Signing time:             Mon 26 Jan 2026 21:33:28 +0000
Manifest this update:     Mon 26 Jan 2026 21:33:28 +0000
Manifest next update:     Mon 02 Feb 2026 21:33:28 +0000
Files and hashes:         1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: y/AZHL/2mY1fxXLP2CpogVsuCpDFJx7FIRVct0RbzSU=)
                          2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: IFa/tTeccz3DdhI2ICb9a4euH4vWZq6b1h7IXGdAF6w=)
                          3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: aC4TO7PXWK9eYs7G/JarDrAHgo7/Rab10mF41Eronv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
                          rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 21:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
        Validity
            Not Before: Jan 26 21:33:28 2026 GMT
            Not After : Feb  2 21:33:28 2026 GMT
        Subject: CN=6977dda8-6cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:10:80:fa:19:a4:4d:05:e3:d6:f7:25:98:
                    d2:a3:a8:0d:a5:2c:dd:3f:f9:df:76:e1:2d:95:dc:
                    9f:37:1a:9f:0c:72:6f:ce:75:49:06:56:80:2b:18:
                    79:d2:8e:c0:d4:e7:4e:af:61:18:3c:35:63:9b:0e:
                    bb:5a:b0:9c:60:f7:45:67:1f:4e:4a:4c:62:d5:63:
                    2b:80:3d:5d:3c:0e:5f:79:3b:5a:99:50:13:94:77:
                    6d:eb:68:0f:04:54:8e:62:94:12:cc:c9:58:ee:eb:
                    76:c9:7e:ab:04:55:00:15:d6:11:05:e4:ff:48:a6:
                    94:57:09:fb:02:6e:2c:ef:54:fe:58:7a:d0:d8:e0:
                    ff:8b:38:f6:2d:b7:bb:1a:11:53:bb:8a:00:ec:a2:
                    56:51:9e:66:6d:50:01:2e:70:a5:7f:7f:2a:ae:0a:
                    43:34:ef:68:83:e5:53:ea:c2:1d:b1:a6:fc:3a:2d:
                    d3:59:7f:d2:8d:c7:b6:70:fb:43:43:9f:a5:d8:f1:
                    6c:57:d8:05:f4:ba:d9:66:e5:0b:92:d2:ea:6e:6e:
                    f8:05:2d:d2:4f:10:bb:68:13:cf:2c:c1:7c:6d:e5:
                    9e:14:25:05:42:fa:41:bf:0b:50:16:e0:e8:67:c2:
                    69:a1:63:0f:1a:21:1f:46:8a:18:c7:56:d5:1d:2e:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6E:E0:44:91:C8:EC:84:3A:2D:6D:AC:35:BD:BA:55:A5:0D:3D:7A
            X509v3 Authority Key Identifier:
                keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:06:3f:b5:e3:64:08:2c:9f:b8:20:36:d9:b5:cd:86:20:
         c1:8c:dd:6c:71:3b:6f:1b:4a:39:c1:77:5d:ad:e7:23:8c:22:
         c7:95:3c:3e:8a:0f:eb:b5:27:46:d9:77:63:9d:fc:1a:9d:a2:
         1f:5c:8c:7e:35:23:9f:62:49:98:db:f2:47:20:cc:7a:fc:6f:
         b3:9c:2a:c9:e4:dd:4d:aa:5c:cb:3d:28:c4:0c:1e:b2:07:b7:
         a0:ff:0c:b6:c5:8d:93:b0:59:01:f2:27:49:be:cf:73:1b:40:
         69:c3:70:7d:d1:f4:da:fd:96:33:c6:88:f6:a8:0f:85:34:99:
         1d:6c:17:cd:d5:c1:4c:d0:2b:a6:f5:20:55:28:aa:eb:39:f4:
         84:f1:b7:0c:55:f1:2a:13:d6:64:82:52:71:ea:36:4c:0d:42:
         42:bd:eb:8b:3b:c9:71:71:5a:8a:9a:03:01:1c:cc:47:3d:f4:
         e5:aa:f7:1a:93:68:21:55:9e:c2:9e:42:1c:c2:cb:93:56:2e:
         25:cc:fc:cd:dd:4c:e6:65:72:00:1d:c2:23:90:67:53:e0:0b:
         8e:c6:d0:8a:61:71:00:90:9a:ca:71:56:57:73:ce:dd:ae:dc:
         bc:2b:fb:8c:82:1d:94:2c:62:8e:a9:77:3a:87:84:5e:31:cd:
         1d:d4:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:19:17 2026 by rpki-client