This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
File:                     hpBNLQLbigWb7ZOPL46u88Qgb9A.mft (raw, json)
Hash identifier:          xXr6LzDAw5WCj0wTYnGM7i7BsDfuY55ZvBramHqJF/Q=
Subject key identifier:   26:58:F5:10:4B:F5:77:25:B8:1E:68:AB:62:03:2D:A0:2E:A9:A9:84
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Certificate issuer:       /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
Manifest number:          FE
Signing time:             Sat 17 Jan 2026 04:20:58 +0000
Manifest this update:     Sat 17 Jan 2026 04:20:58 +0000
Manifest next update:     Sat 24 Jan 2026 04:20:58 +0000
Files and hashes:         1: hpBNLQLbigWb7ZOPL46u88Qgb9A.crl (hash: /LyFs65u1ATCOXWnOJbw39bKiHng7ZGAWaUFN8eNB0Q=)
                          2: 388D7E38797D11EF8CA64711C4F9AE02.roa (hash: w4Rh9NpZ/IQ60xsdouCsCPn/eRzJ06RRF4GvfzZ5uwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
                          rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
        Validity
            Not Before: Jan 17 04:20:58 2026 GMT
            Not After : Jan 24 04:20:58 2026 GMT
        Subject: CN=696b0e2a-cddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:3b:7a:d5:60:ad:af:77:e1:a4:77:25:ae:
                    bc:f8:5d:88:24:5f:58:9a:80:87:11:97:b8:b4:6f:
                    e8:b1:53:ed:b3:13:19:7c:ef:2f:22:f5:74:60:37:
                    78:35:be:35:ea:43:5c:42:d5:3c:5e:96:90:1f:ee:
                    b1:08:06:47:14:3e:d2:b4:2a:c5:44:c6:a1:48:c5:
                    1c:b7:fd:03:0f:7c:03:61:18:c2:57:00:27:86:c0:
                    25:70:31:fc:97:6e:dc:92:5f:87:d4:98:8a:54:be:
                    d1:ad:5a:02:1e:74:e0:70:ca:86:d6:a1:71:66:4e:
                    9c:af:3d:e8:af:fe:76:9b:80:29:37:fc:d6:8f:f4:
                    00:f8:3f:d9:0c:08:8f:b8:73:e4:66:fa:51:ca:61:
                    9a:0d:e0:ba:fd:03:9e:f5:16:31:8e:fe:50:b3:60:
                    7b:8b:cd:14:3e:b8:fd:bf:4c:76:ce:f3:09:f9:ac:
                    05:bb:8f:24:fd:d5:fd:a0:da:08:85:b3:cf:6a:b8:
                    02:ef:46:f0:32:7f:b5:d1:ad:41:54:aa:a8:c7:90:
                    f3:dc:ee:05:ee:9a:85:1f:f6:f2:ac:db:8e:5e:e3:
                    68:bb:2d:27:e1:f5:ad:88:3d:f1:ed:86:d1:10:c4:
                    ba:b7:3c:6c:40:05:45:4c:68:3d:82:4b:b8:19:47:
                    f0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:58:F5:10:4B:F5:77:25:B8:1E:68:AB:62:03:2D:A0:2E:A9:A9:84
            X509v3 Authority Key Identifier:
                keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:56:f2:60:13:35:57:3e:9f:ee:04:48:de:ec:48:b2:55:5e:
         da:18:b6:75:24:ba:74:9a:95:83:b0:7b:3c:0d:81:29:30:df:
         6c:a6:ae:a6:b2:cb:72:38:ed:ed:42:bf:b1:63:1b:c6:73:85:
         78:cc:50:22:bf:17:96:87:0a:30:51:be:dd:31:07:05:fb:22:
         5a:45:48:b9:1c:56:23:44:2d:29:5b:0b:35:42:8e:f8:e3:f6:
         0f:dd:62:a0:9f:54:54:70:03:b6:f2:f5:3e:b0:95:12:27:ae:
         8d:74:19:cf:e7:36:89:17:93:f7:46:ab:02:a8:4c:73:71:4d:
         b0:34:92:9f:36:e2:5f:91:b9:d1:91:12:96:d8:ab:5f:07:da:
         b8:fe:24:2d:df:cb:b6:ca:d4:c0:c1:f6:5c:69:02:b4:03:70:
         86:fc:02:86:f7:61:2b:13:63:34:51:c9:e3:54:d0:ca:bc:f0:
         03:66:10:0a:16:8b:9f:cd:51:20:7c:15:fa:ac:55:bf:aa:0d:
         74:7e:1c:3a:b5:40:94:06:d4:2b:d3:33:c0:72:df:b0:55:e5:
         59:96:fa:3d:05:2d:94:04:36:d6:38:62:b4:22:eb:17:aa:79:
         77:00:11:ad:8e:71:58:16:11:14:58:08:b3:19:97:0c:0f:31:
         f0:ea:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:27 2026 by rpki-client