This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
File:                     hwGGtlfRGymKhLAkIO504fu1woI.mft (raw, json)
Hash identifier:          iCCkScecb0AVzmfDZFRpg9TmuVKIPKZFzxBNHSefKN0=
Subject key identifier:   6D:64:2A:AA:23:E2:E1:49:5B:23:44:30:E7:D1:31:04:5A:43:B4:D9
Authority key identifier: 87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
Certificate issuer:       /CN=A9191885/serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
Manifest number:          0160
Signing time:             Thu 01 Jan 2026 03:39:06 +0000
Manifest this update:     Thu 01 Jan 2026 03:39:05 +0000
Manifest next update:     Thu 08 Jan 2026 03:39:05 +0000
Files and hashes:         1: hwGGtlfRGymKhLAkIO504fu1woI.crl (hash: x5MSFMpy5LpmJ4+XgK2zPLuSe0MIytK1ejNu9OpZDN8=)
                          2: 8E31656CC9FF11EEA53CA25CC4F9AE02.roa (hash: WWVsNPRylFl9Oj5E0+wxXjfLrjfPmxjiDu6REzUJaLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl
                          rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 03:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191885, serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
        Validity
            Not Before: Jan  1 03:39:05 2026 GMT
            Not After : Jan  8 03:39:05 2026 GMT
        Subject: CN=6955ec59-ec60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:c5:e6:c9:1a:27:a9:e4:77:ab:18:91:61:
                    26:6a:a6:08:c7:8a:f3:56:be:47:f7:c3:2d:61:3c:
                    90:8f:39:83:02:b8:c0:2d:57:ff:a0:c9:33:07:af:
                    39:7f:4e:7a:fc:a7:8e:27:00:60:b0:35:7f:6d:73:
                    fe:f2:fc:4f:bc:11:82:41:2f:30:1e:67:a9:73:bf:
                    51:20:f4:1c:b8:67:f8:de:bd:88:32:15:cd:67:5c:
                    c3:ad:39:a1:a3:06:de:fa:2f:27:eb:b8:b3:d5:d9:
                    79:9e:9c:a1:3a:bf:05:02:2f:74:0c:be:47:8e:6b:
                    f7:30:38:f1:5b:c5:b8:81:f4:94:69:38:a2:91:29:
                    32:02:23:b8:63:ca:bd:a1:ae:2c:6d:93:a3:95:2c:
                    81:3f:94:a5:01:1a:ef:8b:61:83:1d:bf:d0:68:5d:
                    88:46:20:2c:fc:25:e3:dd:1b:1b:f8:ad:ec:4d:30:
                    4f:34:0f:79:6c:a2:15:4c:cc:44:b7:17:91:70:8b:
                    ad:fb:d6:3b:85:8b:c8:94:4d:ce:d1:d2:f0:2c:47:
                    f3:fb:8e:c9:de:67:5e:54:48:c7:88:ee:88:69:bb:
                    02:60:4d:e4:6d:89:24:68:ca:63:5a:88:77:ae:92:
                    e2:10:8f:80:f8:c0:4c:e3:e2:e8:52:92:e6:88:4f:
                    cd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:64:2A:AA:23:E2:E1:49:5B:23:44:30:E7:D1:31:04:5A:43:B4:D9
            X509v3 Authority Key Identifier:
                keyid:87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9e:9e:84:d8:71:6e:ff:71:5e:a8:fc:9b:a5:29:f6:54:70:
         f6:60:82:04:06:cf:03:7f:06:d9:db:52:6b:e7:b6:72:24:e6:
         83:c2:2e:56:a2:47:22:20:80:76:1e:d4:2d:5b:7b:e0:85:0e:
         6a:87:94:7b:f9:97:8e:13:02:f1:fe:21:3b:61:8d:d5:21:0c:
         17:24:44:b7:d4:25:ae:8d:0c:4a:f8:b4:dc:3d:c0:45:e6:26:
         5f:29:2c:b1:1a:b8:b6:58:f1:7a:23:37:4f:11:24:f0:05:89:
         1f:fd:6e:fc:c7:eb:62:16:ec:db:c4:9c:a0:ce:a3:af:5c:96:
         2d:18:c4:f3:8d:d6:1b:53:86:5a:b0:b9:1f:3b:d2:7d:cd:39:
         b7:da:55:70:2a:5f:02:b2:a3:cf:61:7d:1a:b5:9d:54:3f:aa:
         86:4b:7f:c3:b1:02:74:f4:0a:41:aa:7c:45:55:5b:c9:1d:ad:
         c1:f0:27:1e:b1:cb:b6:65:d5:89:f1:92:a4:69:f4:ce:af:2e:
         39:6d:90:55:1b:e7:b6:89:74:24:6a:94:90:ae:02:e9:fb:cb:
         c1:52:39:70:45:6c:14:1d:7f:42:d3:8f:8c:66:4c:5e:45:59:
         f0:78:02:11:65:b1:67:9a:27:98:70:11:0a:57:b6:8e:01:4c:
         b0:8f:4d:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE4ODUxMTAvBgNVBAUTKDg3MDE4NkI2NTdEMTFCMjk4QTg0QjAyNDIwRUU3NEUx
RkJCNUMyODIwHhcNMjYwMTAxMDMzOTA1WhcNMjYwMTA4MDMzOTA1WjAYMRYwFAYD
VQQDDA02OTU1ZWM1OS1lYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqRfF5skaJ6nkd6sYkWEmaqYIx4rzVr5H98MtYTyQjzmDArjALVf/oMkzB685
f056/KeOJwBgsDV/bXP+8vxPvBGCQS8wHmepc79RIPQcuGf43r2IMhXNZ1zDrTmh
owbe+i8n67iz1dl5npyhOr8FAi90DL5Hjmv3MDjxW8W4gfSUaTiikSkyAiO4Y8q9
oa4sbZOjlSyBP5SlARrvi2GDHb/QaF2IRiAs/CXj3Rsb+K3sTTBPNA95bKIVTMxE
txeRcIut+9Y7hYvIlE3O0dLwLEfz+47J3mdeVEjHiO6IabsCYE3kbYkkaMpjWoh3
rpLiEI+A+MBM4+LoUpLmiE/N5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1kKqoj
4uFJWyNEMOfRMQRaQ7TZMB8GA1UdIwQYMBaAFIcBhrZX0RspioSwJCDudOH7tcKC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ENUZFQTNERUM5
RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9od0dHdGxmUkd5bUtoTEFrSU81MDRmdTF3
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2h3R0d0bGZSR3ltS2hMQWtJTzUwNGZ1MXdvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTg4NS9ENUZFQTNERUM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9od0dHdGxmUkd5
bUtoTEFrSU81MDRmdTF3b0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBanp6E2HFu/3FeqPybpSn2VHD2YIIEBs8DfwbZ21Jr57ZyJOaDwi5W
okciIIB2HtQtW3vghQ5qh5R7+ZeOEwLx/iE7YY3VIQwXJES31CWujQxK+LTcPcBF
5iZfKSyxGri2WPF6IzdPESTwBYkf/W78x+tiFuzbxJygzqOvXJYtGMTzjdYbU4Za
sLkfO9J9zTm32lVwKl8CsqPPYX0atZ1UP6qGS3/DsQJ09ApBqnxFVVvJHa3B8Cce
scu2ZdWJ8ZKkafTOry45bZBVG+e2iXQkapSQrgLp+8vBUjlwRWwUHX9C04+MZkxe
RVnweAIRZbFnmieYcBEKV7aOAUywj01R
-----END CERTIFICATE-----
Generated at Thu Jan 1 14:24:32 2026 by rpki-client