This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
File:                     HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json)
Hash identifier:          XJWvFb5xgCJUKO9RZkkEAnTGzoW0tvxzCYzZf7jo5hc=
Subject key identifier:   38:69:01:B2:41:31:CD:6E:08:34:D6:31:CA:0B:A3:10:00:5D:03:F1
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Certificate issuer:       /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial:       1E48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
Manifest number:          1E39
Signing time:             Sat 10 Jan 2026 15:54:03 +0000
Manifest this update:     Sat 10 Jan 2026 15:54:03 +0000
Manifest next update:     Sat 17 Jan 2026 15:54:03 +0000
Files and hashes:         1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: VwenbEazpDTPXvOb4TpXKM+ZXDIlFBUXQY8P1Nu+0+g=)
                          2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: WtW7MaINV2ct1TbshV/6OrkYfiug7pmKoz4c9cKXHaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
                          rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 15:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7752 (0x1e48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
        Validity
            Not Before: Jan 10 15:54:03 2026 GMT
            Not After : Jan 17 15:54:03 2026 GMT
        Subject: CN=6962761b-64bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:1b:bb:97:9c:6f:7b:99:50:3c:8e:7e:61:
                    af:0b:65:50:b7:82:4a:5d:8f:31:c8:81:0a:5d:1f:
                    fe:15:19:fc:73:d9:47:15:c9:db:08:68:7e:8a:e7:
                    c7:7b:16:7f:cf:d9:6a:bd:16:11:bf:ea:97:c1:7d:
                    c1:13:f0:ed:a7:80:ea:75:99:24:c1:28:51:67:ba:
                    59:ae:24:67:22:09:74:dc:9b:c5:83:05:a2:60:63:
                    e6:e2:42:93:bb:c8:d8:0c:60:4f:49:f0:94:d4:15:
                    d3:1d:8f:41:db:fc:07:f2:97:56:4f:4a:b0:21:cc:
                    78:2b:2b:16:d1:ec:2f:cb:23:f5:c4:7e:05:55:de:
                    91:47:8e:b2:db:fe:9b:3c:e1:60:0c:c5:d3:fc:fb:
                    8f:5a:9a:ba:cd:12:13:09:af:5e:1a:58:3a:b3:5c:
                    f2:1c:69:ef:a7:79:0b:12:35:71:98:79:1b:35:3b:
                    d8:16:42:b3:7f:5e:82:25:24:f2:93:3d:c4:3c:85:
                    50:3c:11:85:b0:3a:f4:e1:85:0a:9b:06:3e:36:4c:
                    16:44:2a:2c:0f:2d:94:8b:89:84:0c:b5:8e:99:c5:
                    81:9a:da:85:04:0b:e5:d3:36:cd:99:4b:45:d9:7b:
                    ca:36:72:0d:1e:81:ac:d5:a5:10:9b:d0:2b:f9:42:
                    35:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:69:01:B2:41:31:CD:6E:08:34:D6:31:CA:0B:A3:10:00:5D:03:F1
            X509v3 Authority Key Identifier:
                keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fe:cf:2e:4a:03:c0:a0:33:d8:8b:07:53:0e:9e:ec:4c:3d:
         e4:bf:6c:20:b6:95:b5:77:98:f8:b5:f6:df:17:48:87:fd:a7:
         f4:11:bc:f3:a8:f7:9d:e6:95:4e:0d:69:5b:dc:ed:28:4b:53:
         1c:f6:8f:03:df:d3:5b:82:d6:5e:0c:7f:de:ef:3a:97:6c:a3:
         95:88:b5:28:0c:ea:95:49:b7:8c:ee:ac:45:4c:c7:a9:32:ec:
         17:3a:4c:c2:27:21:32:97:ce:90:be:ae:66:a2:cf:e2:a0:76:
         f3:57:a1:ae:01:b9:b3:c4:f8:48:fb:6f:3c:9c:af:0c:9a:e8:
         75:ee:62:f5:9d:37:c5:d4:28:7c:2a:f5:8c:b5:10:20:5b:14:
         e4:d2:1a:a7:20:80:d7:0b:03:03:9c:e9:97:60:4e:8a:20:86:
         d4:34:fc:94:a2:d3:6e:79:e7:91:0b:48:40:b3:57:59:b5:52:
         d5:e3:00:0d:51:29:a8:2e:b3:65:9c:4c:6c:d2:a6:4c:28:c3:
         13:e6:fb:83:e0:41:4c:d4:56:12:17:22:12:41:0f:73:f9:5f:
         3c:4d:7e:58:31:6b:6f:b8:cc:21:02:92:4f:6d:42:3c:47:d2:
         9e:0c:ac:d7:b9:be:7b:bf:08:90:3a:46:0a:1c:b0:2a:1f:62:
         b5:2f:d7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:41:52 2026 by rpki-client