This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
File:                     hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json)
Hash identifier:          GVfbX7jO2Ua4csvIWsbY2OLoDVcpcvYxsOGQ/GC0LYQ=
Subject key identifier:   33:ED:1B:02:0A:10:F3:91:1E:37:A4:34:59:F7:13:BE:05:B6:B2:E7
Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
Certificate issuer:       /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Certificate serial:       09C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
Manifest number:          09B2
Signing time:             Mon 26 Jan 2026 19:26:35 +0000
Manifest this update:     Mon 26 Jan 2026 19:26:35 +0000
Manifest next update:     Mon 02 Feb 2026 19:26:35 +0000
Files and hashes:         1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: L7xtfoth5RbnotYoTRco6FxhNqPts1tAcHV7P1dEPxU=)
                          2: 70FED13CCEF611ED9DDE0A39C4F9AE02.roa (hash: 6YMCbYV0HjEFxQW7Rqr8k/qQPvulelScO8qALM4FUVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
                          rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 19:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2501 (0x9c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
        Validity
            Not Before: Jan 26 19:26:35 2026 GMT
            Not After : Feb  2 19:26:35 2026 GMT
        Subject: CN=6977bfeb-ce55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:50:b2:90:ba:ea:ea:37:63:fb:87:3c:a0:
                    cb:37:db:2a:86:e6:f4:32:0a:de:10:38:f6:b9:ac:
                    97:d4:2b:7c:a8:bb:5a:72:f6:84:fc:67:03:7c:75:
                    a8:d0:11:e8:0f:95:af:b6:d6:9d:47:5b:11:33:65:
                    5b:cf:b7:2f:e5:68:c5:ad:30:a7:2f:4d:2e:88:42:
                    ee:61:2a:7a:09:93:1a:f0:c9:f2:04:f9:19:3a:8b:
                    28:b3:71:e5:42:fe:04:f0:d8:93:bb:b1:6a:b2:8b:
                    2c:3c:8e:0d:02:51:8d:5d:67:ab:e1:0f:53:08:5b:
                    90:7c:e8:59:ee:d6:1f:92:33:97:c3:f0:b7:f5:13:
                    4c:07:de:30:2e:12:9c:03:a4:1c:38:47:ea:1e:bd:
                    f4:29:25:2f:7b:3b:63:65:4d:3d:ac:41:fc:82:25:
                    e6:fd:cd:d4:07:d9:0c:5c:cd:75:68:1f:9a:d2:97:
                    58:cf:aa:a8:fb:7b:c9:36:ab:55:90:90:16:2e:42:
                    c8:3b:90:62:8d:f2:b0:14:46:86:8f:e0:98:14:1a:
                    0a:2e:07:fb:8f:ae:9a:2b:9a:a5:7c:e0:05:9a:39:
                    31:11:a6:ef:4e:8d:6b:32:0d:d2:da:32:5b:c8:9b:
                    51:55:5d:a5:39:27:b2:06:e6:df:aa:9d:32:49:c2:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:ED:1B:02:0A:10:F3:91:1E:37:A4:34:59:F7:13:BE:05:B6:B2:E7
            X509v3 Authority Key Identifier:
                keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:5e:1e:98:b4:43:d5:3e:c5:3f:3d:03:73:88:ea:b2:75:bb:
         95:0b:69:5c:dd:f5:25:a3:72:6a:ba:20:e0:c3:9a:95:7b:f1:
         37:d9:02:1d:da:de:15:84:1a:34:bb:8c:f2:4a:39:0a:96:c0:
         5d:f7:ee:41:56:d6:70:99:95:4f:6b:7b:f1:ea:2a:f2:d2:bd:
         8d:23:41:e3:03:53:a3:9a:b3:48:a6:6a:8d:1c:1b:33:f3:cd:
         55:78:d7:dc:b9:56:b1:46:ae:d7:05:34:f2:8d:bf:4f:ca:97:
         e9:12:1b:64:21:2f:5f:20:c5:5e:72:fb:c6:8b:bf:e4:25:cd:
         6a:08:ea:cb:33:ae:06:8c:b1:19:8d:4d:2f:6b:67:15:b5:3b:
         9d:43:86:5e:fd:b4:db:7c:c5:23:49:e4:20:91:28:d9:b8:95:
         50:73:d0:7b:24:e5:ad:97:81:c6:2e:62:b0:e3:7a:13:f5:e3:
         90:99:64:4f:2e:83:77:a7:f5:66:8f:1f:d3:1b:aa:95:b7:00:
         7f:1b:03:b7:af:e6:c3:60:9e:d7:d2:56:0a:76:82:4c:b4:37:
         41:0c:ef:45:8d:70:a7:91:4d:ad:73:1f:f9:41:f2:82:c7:20:
         66:5c:0e:d8:55:f3:9b:7a:37:71:b7:60:7c:f1:a7:97:42:9f:
         9a:7f:8b:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUNDRUExMTAvBgNVBAUTKDg2MkI3M0I5Q0UzNTA0QjBCQTI0MUQxNEZEQUMwRUM0
QjRFNEFEQzIwHhcNMjYwMTI2MTkyNjM1WhcNMjYwMjAyMTkyNjM1WjAYMRYwFAYD
VQQDDA02OTc3YmZlYi1jZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqE1QspC66uo3Y/uHPKDLN9sqhub0MgreEDj2uayX1Ct8qLtacvaE/GcDfHWo
0BHoD5WvttadR1sRM2Vbz7cv5WjFrTCnL00uiELuYSp6CZMa8MnyBPkZOosos3Hl
Qv4E8NiTu7FqsossPI4NAlGNXWer4Q9TCFuQfOhZ7tYfkjOXw/C39RNMB94wLhKc
A6QcOEfqHr30KSUveztjZU09rEH8giXm/c3UB9kMXM11aB+a0pdYz6qo+3vJNqtV
kJAWLkLIO5BijfKwFEaGj+CYFBoKLgf7j66aK5qlfOAFmjkxEabvTo1rMg3S2jJb
yJtRVV2lOSeyBubfqp0yScJijwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPtGwIK
EPORHjekNFn3E74FtrLnMB8GA1UdIwQYMBaAFIYrc7nONQSwuiQdFP2sDsS05K3C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0NFQS80MDZFRjE3OEEw
QzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJMQzZKQjBVX2F3T3hMVGty
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hpdHp1YzQxQkxDNkpCMFVfYXdPeExUa3JjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Q0NFQS80MDZFRjE3OEEwQzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJM
QzZKQjBVX2F3T3hMVGtyY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC8Xh6YtEPVPsU/PQNziOqydbuVC2lc3fUlo3JquiDgw5qVe/E32QId
2t4VhBo0u4zySjkKlsBd9+5BVtZwmZVPa3vx6iry0r2NI0HjA1OjmrNIpmqNHBsz
881VeNfcuVaxRq7XBTTyjb9PypfpEhtkIS9fIMVecvvGi7/kJc1qCOrLM64GjLEZ
jU0va2cVtTudQ4Ze/bTbfMUjSeQgkSjZuJVQc9B7JOWtl4HGLmKw43oT9eOQmWRP
LoN3p/Vmjx/TG6qVtwB/GwO3r+bDYJ7X0lYKdoJMtDdBDO9FjXCnkU2tcx/5QfKC
xyBmXA7YVfObejdxt2B88aeXQp+af4sQ
-----END CERTIFICATE-----
Generated at Tue Jan 27 08:02:39 2026 by rpki-client