This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
File:                     r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json)
Hash identifier:          tFAky1D6cfPbMQzBlyYsCc003/6eFUMnkMRrV9RtwrM=
Subject key identifier:   2C:B3:4B:22:59:53:95:51:AD:C3:BF:A7:EF:E5:EE:4F:39:0F:CE:16
Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
Certificate issuer:       /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Certificate serial:       0886
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
Manifest number:          0878
Signing time:             Tue 06 Jan 2026 20:03:49 +0000
Manifest this update:     Tue 06 Jan 2026 20:03:48 +0000
Manifest next update:     Tue 13 Jan 2026 20:03:48 +0000
Files and hashes:         1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: SROFJNdw3JghbDw3v2Z1rqEZcWBQVRoCHTpfr2iXTLg=)
                          2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: 6NwFc4G6kbW7IIFb4mldHTmS90zuZDDfhVsh0xYOrRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
                          rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Jan 2026 20:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
        Validity
            Not Before: Jan  6 20:03:48 2026 GMT
            Not After : Jan 13 20:03:48 2026 GMT
        Subject: CN=695d6aa4-98c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:8e:99:35:c4:23:22:d8:95:2b:6b:38:13:
                    21:c8:04:92:e3:e5:9d:94:8f:b1:19:7d:73:0e:26:
                    ef:a7:51:e0:49:be:fc:37:78:cb:07:2b:b1:7f:5e:
                    34:b7:47:41:96:9b:b5:6a:1f:50:21:82:2e:af:8d:
                    3d:a6:52:59:8a:6e:ff:1e:f5:85:fa:ef:e0:78:3e:
                    79:60:cf:4d:ac:72:16:a3:27:3c:f2:a3:ff:57:ab:
                    27:63:19:25:6f:2c:10:e8:35:aa:cb:9d:40:a4:97:
                    0c:a1:2a:e0:2c:0f:85:c1:b0:ee:b4:6c:6a:67:bf:
                    0a:26:9c:10:b6:90:58:65:ba:9f:49:50:17:01:fe:
                    05:14:f7:5a:a8:5f:b6:4e:01:48:e1:bb:8e:eb:67:
                    1c:ce:2b:54:68:c6:c0:5f:3d:e9:98:7e:82:c3:18:
                    da:51:cb:44:18:41:98:7e:3c:1c:77:9c:2b:c2:0e:
                    2e:b7:ae:7a:83:78:44:28:a0:84:fe:62:bf:e2:75:
                    3c:ac:44:73:a1:4d:1e:83:59:77:75:b8:b3:90:51:
                    9f:55:40:4b:e3:63:2a:ff:2a:57:fb:15:48:d5:8d:
                    dd:12:f8:fc:e3:7b:4e:55:6b:d3:3a:f3:e1:8f:11:
                    8d:d7:f8:c1:25:30:fb:94:80:03:9f:68:9f:d5:45:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B3:4B:22:59:53:95:51:AD:C3:BF:A7:EF:E5:EE:4F:39:0F:CE:16
            X509v3 Authority Key Identifier:
                keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:79:94:3f:6a:5d:8f:90:62:33:14:85:9a:50:8b:da:70:76:
         4c:d0:05:02:e6:cf:18:46:66:a6:04:12:1f:34:a3:f0:a5:55:
         cd:07:36:40:02:39:96:e1:3b:9e:06:bb:7f:75:d5:19:22:eb:
         42:51:5e:21:e0:13:fe:99:34:ab:2d:3d:aa:ad:ba:27:32:ca:
         eb:2c:b5:7c:9d:67:92:0f:08:e6:b8:b7:29:c5:79:5d:fe:f5:
         2f:99:37:e4:8e:ef:c7:e5:80:a4:14:38:eb:63:45:34:27:4a:
         dd:95:31:4e:5a:16:f9:47:9c:21:0a:e5:a8:75:2c:3c:a7:0b:
         5f:4d:20:59:03:c5:d6:3a:80:6d:fc:d3:63:19:c8:11:97:32:
         ac:77:e2:fe:63:b2:cd:2b:88:0f:1b:5c:5a:d3:98:ca:18:db:
         ad:19:4a:31:1c:17:3b:34:74:bb:3d:22:69:9a:70:93:ba:d1:
         11:10:58:72:74:93:89:6a:8c:e1:d1:91:ff:8f:da:76:89:6a:
         2d:b5:7a:91:20:24:5e:31:36:b7:8a:17:ff:8c:c2:39:b3:c1:
         0e:3b:99:e3:99:98:2c:04:b1:d6:3c:b3:6c:9b:c6:90:b8:40:
         e9:12:7e:3a:1d:12:f1:1f:e5:4c:d0:95:7a:bd:f2:75:05:ec:
         a7:9f:6c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:25:28 2026 by rpki-client