This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
File:                     hTkiUckhyp9RnbkRxagKd9_jVMQ.mft (raw, json)
Hash identifier:          wvsQGN/rYL0QhriflQJQxmoaroLD/YgOqcD/JHZj+0w=
Subject key identifier:   1D:80:B1:D6:D7:93:33:10:99:E3:A7:52:DE:EC:49:B2:D7:95:1E:AC
Authority key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
Certificate issuer:       /CN=A915B358/serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
Manifest number:          07
Signing time:             Wed 21 Jan 2026 07:10:51 +0000
Manifest this update:     Wed 21 Jan 2026 07:10:51 +0000
Manifest next update:     Wed 28 Jan 2026 07:10:51 +0000
Files and hashes:         1: hTkiUckhyp9RnbkRxagKd9_jVMQ.crl (hash: BuVs+C/bRvtaq1tfBCvltWe+I4ZU2mqzm/SeAGrmvFY=)
                          2: B1078FAAF1C411F0A342834F396F56BC.roa (hash: ljAj7wTLxbbfYWdIEjjCoSCbzwYEXVcu5xylhBoKUaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 07:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
        Validity
            Not Before: Jan 21 07:10:51 2026 GMT
            Not After : Jan 28 07:10:51 2026 GMT
        Subject: CN=69707bfb-d777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:8a:01:6c:6c:5d:40:cd:2f:83:3c:1a:86:
                    ef:17:09:67:ed:12:83:e9:86:0a:52:2d:f8:d5:29:
                    6b:11:e6:7c:a3:d4:84:ec:2f:df:fd:36:4f:1b:54:
                    49:75:fb:d9:f2:df:68:34:d4:00:72:d5:0c:88:8a:
                    20:65:ec:9b:87:7e:8f:81:3c:b6:fd:a2:48:4a:e4:
                    df:34:9b:3f:1b:60:61:35:df:10:dd:3e:a5:d6:47:
                    e7:d3:c7:32:a5:a7:19:6a:f5:9a:7f:43:b5:92:9f:
                    f2:bf:8c:6c:4d:e7:58:4e:bf:e2:2b:48:67:f2:ec:
                    a0:7d:41:ff:8c:98:7e:62:3c:55:2f:77:e5:c8:ea:
                    c4:77:0b:de:22:16:33:b5:75:c0:d3:14:e9:cb:94:
                    76:02:8b:16:2b:b7:94:ed:96:76:cd:d5:42:35:b5:
                    19:92:27:a0:36:c7:58:7f:0b:a2:43:d1:6c:b9:37:
                    5f:43:49:9a:39:70:e2:7d:d5:ca:94:29:01:a7:e1:
                    ba:86:9d:02:e0:9b:4d:7a:23:fd:35:24:f7:40:0a:
                    68:7b:c5:d2:88:ff:27:ec:4e:c7:46:d8:1f:04:be:
                    f6:26:8c:20:86:ca:5e:2d:61:c1:f5:5b:bd:01:e4:
                    02:cd:96:b6:98:c7:9e:a2:05:a6:01:36:27:2c:7d:
                    b2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:80:B1:D6:D7:93:33:10:99:E3:A7:52:DE:EC:49:B2:D7:95:1E:AC
            X509v3 Authority Key Identifier:
                keyid:85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:80:d7:ca:15:79:ba:34:b6:1c:df:bf:81:94:51:8c:e3:
         e3:a9:30:c9:09:00:0e:fa:f4:df:c4:83:48:af:0f:c7:5d:6a:
         52:f3:42:72:94:70:b7:80:c9:84:2e:61:b0:51:e3:10:86:94:
         8a:e5:3d:73:b0:ac:8c:1d:ad:b4:0c:35:1a:aa:5d:86:fe:54:
         78:3d:ca:4d:8f:d8:69:5d:f2:8e:fd:cb:01:47:b6:5c:ad:82:
         15:e1:40:45:84:7c:93:c2:1a:15:fb:27:d6:30:02:4e:c9:62:
         e1:2d:35:13:1a:3a:92:18:17:05:11:f1:63:e2:45:b1:3a:8d:
         97:c3:1b:73:48:dc:63:83:b8:b2:ba:9d:08:0f:e2:e5:7a:d3:
         05:87:07:3c:06:3d:9d:7a:8b:5c:73:0b:cd:ae:3c:e3:34:ce:
         a0:21:48:a1:ef:39:e3:64:65:15:d1:54:be:fe:15:a0:a5:ae:
         a9:f4:73:91:42:d5:2a:4e:b9:16:55:77:59:83:d6:7b:67:bf:
         3e:ee:84:e0:2a:8d:35:a6:8b:2b:c3:bc:24:38:9f:a1:29:c0:
         4d:04:0b:76:14:7c:7c:51:30:06:3e:67:d6:f0:2c:3d:86:04:
         df:84:7b:e4:97:58:cc:cc:28:3e:2f:9d:c3:f5:94:93:73:2a:
         80:49:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:31:51 2026 by rpki-client