This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
File:                     mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json)
Hash identifier:          Gd8OhUXzDUzskmoc5TlSu618Mv4KXfBfDYveVFJcOSs=
Subject key identifier:   4F:B1:CE:A1:B8:DF:85:15:8B:5F:93:46:A7:C4:90:DC:82:45:E2:F0
Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
Certificate issuer:       /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
Manifest number:          0178
Signing time:             Sat 17 Jan 2026 02:55:40 +0000
Manifest this update:     Sat 17 Jan 2026 02:55:40 +0000
Manifest next update:     Sat 24 Jan 2026 02:55:40 +0000
Files and hashes:         1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: Avoglyh2T4vHuqquEiFJTqigUt8tWg1PU8G4wbEUiHo=)
                          2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 02:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
        Validity
            Not Before: Jan 17 02:55:40 2026 GMT
            Not After : Jan 24 02:55:40 2026 GMT
        Subject: CN=696afa2c-ae9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:a5:20:d8:2b:6e:98:f6:e9:94:01:7a:e1:
                    59:bb:7c:68:b0:c1:3b:03:f5:5c:19:33:d9:33:01:
                    5e:d3:35:9a:35:a4:aa:50:11:a8:24:72:45:f2:a1:
                    d8:9b:fb:a0:51:b5:80:d6:63:c5:72:b1:ef:0b:63:
                    1e:69:51:35:28:ed:61:f7:d6:93:f6:c5:90:c7:73:
                    2d:db:2e:87:f8:58:c5:4a:8b:4b:8a:67:3a:16:d6:
                    dd:74:57:ba:83:7e:4b:a0:18:70:31:7d:5e:bf:44:
                    e9:d3:0d:c1:6d:ac:13:20:20:c1:af:9e:e0:fe:c9:
                    75:0f:cd:d0:1e:4c:b5:f2:7a:2b:1b:27:03:57:af:
                    06:6a:38:e0:34:eb:64:58:76:6a:58:39:a1:63:00:
                    7a:0d:f7:85:78:ae:b6:36:05:c7:33:cd:f8:ae:cc:
                    ba:a0:40:ef:4b:f9:d2:c0:2d:4a:79:fd:48:aa:ba:
                    79:6c:89:86:a2:b3:2f:22:c8:42:fa:45:d9:9f:22:
                    e0:47:20:7a:a6:5c:20:af:30:44:8c:99:f6:f7:ff:
                    24:08:86:a7:78:34:81:34:29:90:21:a0:06:95:a4:
                    14:c4:0e:dd:ce:53:1c:b7:4e:ac:73:f3:92:39:0f:
                    61:19:b6:bd:1e:45:fc:56:d7:59:fb:da:d9:f1:10:
                    60:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B1:CE:A1:B8:DF:85:15:8B:5F:93:46:A7:C4:90:DC:82:45:E2:F0
            X509v3 Authority Key Identifier:
                keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:2b:70:4c:5d:c6:16:58:65:70:6d:3f:93:75:45:cb:16:fa:
         e2:be:84:2a:95:69:63:b5:51:32:f3:bd:90:71:5a:b9:e4:96:
         0b:ef:ab:e7:c5:6c:f4:3e:4d:2f:09:cd:75:91:1b:76:26:ed:
         79:d1:4c:af:10:54:39:9d:c9:34:60:94:61:93:30:ac:46:a8:
         62:e7:79:4d:9f:bf:d4:3d:84:be:81:7e:73:04:1b:12:88:aa:
         ad:fc:e2:79:73:95:a1:8d:6f:d0:e4:4e:92:14:60:d6:fe:16:
         3f:e6:16:6e:b0:7b:2f:95:14:81:c2:c5:37:75:ac:aa:49:4d:
         fc:47:93:cb:44:26:88:7e:40:43:4f:fa:b2:df:f3:74:27:40:
         04:ec:a0:82:a3:b1:2b:60:b1:09:19:b4:b8:2d:44:20:fd:42:
         30:67:15:fd:75:23:ca:af:e7:3d:24:d1:ed:6e:52:7e:22:75:
         ac:a8:8c:1a:16:99:40:08:65:7e:6f:f5:49:5f:1c:5e:ef:8f:
         69:88:ce:ad:0c:b4:ac:f7:fd:29:5f:b8:73:93:ba:ea:d7:42:
         99:0c:ad:b6:25:35:18:ca:27:84:9a:77:37:9d:23:71:bb:40:
         c5:2c:4c:9a:96:2b:df:68:24:89:1d:ac:ff:38:dd:7c:ef:72:
         31:4b:42:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:13 2026 by rpki-client