This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
File:                     HLS_2cCnMryPSmDIaUyR-DTKvBM.mft (raw, json)
Hash identifier:          3vZqeMajrsngDuvxxpTjUgilC3Tga9XHoZDuq9o8JI4=
Subject key identifier:   10:79:C3:96:66:3D:83:8A:15:31:7F:E3:9C:EB:F1:55:3F:C5:C2:65
Authority key identifier: 1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13
Certificate issuer:       /CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13
Certificate serial:       0965
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
Manifest number:          095E
Signing time:             Sun 08 Feb 2026 19:49:20 +0000
Manifest this update:     Sun 08 Feb 2026 19:49:20 +0000
Manifest next update:     Sun 15 Feb 2026 19:49:20 +0000
Files and hashes:         1: HLS_2cCnMryPSmDIaUyR-DTKvBM.crl (hash: dljpSOa7bNx5GUEs/oO2h4336umXXbyjpt+uaMIjLCc=)
                          2: 3C52563E781F11EE9787607FC4F9AE02.roa (hash: iGx2/OJLyjhg1Fasnl64EO8+YlI70PVJOH1c6PHse0Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl
                          rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 19:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83D0, serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13
        Validity
            Not Before: Feb  8 19:49:20 2026 GMT
            Not After : Feb 15 19:49:20 2026 GMT
        Subject: CN=6988e8c0-9acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:0b:0b:be:6e:f8:48:f1:88:91:02:9a:db:
                    c6:61:e5:d0:d4:d5:5b:bd:74:c5:3c:e2:59:f5:45:
                    50:ce:6b:27:70:d2:44:88:d5:7b:f6:7f:50:92:c5:
                    9d:39:3f:f2:d6:38:1e:8c:a1:cd:09:6c:01:be:23:
                    ad:cd:42:9d:7e:86:59:fd:6e:3c:16:43:98:96:d7:
                    8b:ae:54:80:17:d9:2c:99:62:dc:83:3d:9a:55:a7:
                    18:85:c9:56:e6:bf:93:29:09:28:ed:db:03:1a:8b:
                    db:89:c8:34:81:67:5c:22:ed:29:45:bc:f7:4f:c8:
                    02:f6:6e:4f:77:19:10:34:ec:bc:ec:e6:7c:e5:49:
                    c9:59:fb:47:87:f3:26:24:2f:ad:35:bd:7c:fe:00:
                    d4:e7:76:86:3c:ec:70:e4:92:64:b8:c8:98:f2:c3:
                    27:51:f2:da:78:f0:f4:55:a1:ef:0f:04:fb:09:25:
                    78:01:9d:3f:da:17:f4:a7:e4:9c:34:ec:4f:72:65:
                    1c:57:7d:4e:71:d0:3f:80:ea:a8:94:db:f3:94:a1:
                    30:6b:58:df:0f:84:2f:fc:54:4a:6c:e2:2f:3d:7e:
                    0f:0f:87:94:34:25:61:06:9a:a2:84:9a:8f:51:29:
                    b1:8b:88:68:41:52:b6:ca:03:6c:54:e4:26:8c:2c:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:79:C3:96:66:3D:83:8A:15:31:7F:E3:9C:EB:F1:55:3F:C5:C2:65
            X509v3 Authority Key Identifier:
                keyid:1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:9d:13:6a:20:f0:5b:9b:de:e5:e6:53:b6:cf:bf:bc:2b:
         4c:90:bd:bf:cf:04:0b:aa:6d:64:d6:c0:07:91:9d:74:ce:7f:
         e5:46:db:6c:38:ec:0e:91:04:88:f2:a9:9a:78:c2:4a:76:96:
         8e:8f:68:75:43:59:bd:6d:bc:e1:c6:ec:03:59:05:04:44:9e:
         f8:91:0c:03:75:77:82:4b:3f:d5:e9:66:3d:04:28:c4:59:42:
         fc:c0:41:bd:6f:75:4e:4a:68:09:64:bf:4f:87:f8:1c:9e:02:
         69:3d:31:86:97:64:fa:32:a4:2a:1c:10:a2:8d:22:0f:35:17:
         24:c2:1a:69:17:de:8c:e1:37:98:32:66:9b:5a:70:62:3a:a5:
         7f:ec:84:b2:2a:f2:fc:88:a6:0e:b9:18:99:4f:35:ee:df:df:
         53:d8:1b:96:81:0a:c9:04:3d:9a:31:f5:19:db:33:ee:e7:b2:
         ab:17:fd:69:dc:28:40:a8:07:90:dc:59:4b:72:70:b1:8f:0f:
         49:ee:c6:0d:5a:43:5f:32:81:8d:f1:fb:d9:1e:d5:c6:3d:1a:
         47:7a:18:4d:03:c3:d2:95:73:22:ea:26:d0:70:67:db:1b:1b:
         b1:01:31:ea:df:57:cf:ee:70:70:be:40:a6:35:50:91:74:3c:
         5e:98:2e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:34:03 2026 by rpki-client