This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
File:                     h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json)
Hash identifier:          FvCqqNtbEvw0CGe8du6xIx+wu6ZWpAirGKfxNLG7RdA=
Subject key identifier:   EC:2A:EB:8C:9D:99:18:9D:14:3B:60:3B:B0:A6:9C:F9:EC:3C:2E:74
Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
Certificate issuer:       /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
Manifest number:          0156
Signing time:             Wed 07 Jan 2026 03:44:39 +0000
Manifest this update:     Wed 07 Jan 2026 03:44:39 +0000
Manifest next update:     Wed 14 Jan 2026 03:44:39 +0000
Files and hashes:         1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: C0V4ZAmat+8pA/7SDIWOiGjuYDOU7j4ECXsfUbcdy8Y=)
                          2: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=)
                          3: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=)
                          4: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
                          rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 03:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
        Validity
            Not Before: Jan  7 03:44:39 2026 GMT
            Not After : Jan 14 03:44:39 2026 GMT
        Subject: CN=695dd6a7-73ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:9d:d6:61:55:9a:d8:84:01:01:65:fe:c7:
                    f4:b0:ef:c9:e7:c8:26:7d:1f:b2:2f:96:72:23:f7:
                    21:64:42:71:ee:d5:e4:2e:e2:c2:c4:db:ba:5e:20:
                    2b:f6:a0:d0:9b:be:bb:5c:ea:f0:5a:24:a3:3b:87:
                    16:b1:c4:d3:f3:5b:17:5a:2b:60:d9:5b:33:f4:f8:
                    2a:cb:92:3a:c2:4e:32:25:a7:94:fc:00:06:c0:ab:
                    2a:d2:ef:cc:10:e9:c7:73:a2:e5:4b:a7:ef:7c:76:
                    d2:5a:cb:be:1f:07:9d:c6:78:ec:94:23:7f:b3:67:
                    4d:59:03:0f:53:39:2a:98:f2:35:22:c2:60:15:f0:
                    a5:a9:26:6c:65:85:02:90:80:5e:89:d0:2f:eb:37:
                    e6:78:1d:1e:4a:20:8b:35:13:a8:19:38:c2:b9:8b:
                    1e:b8:70:da:99:1f:f7:e0:fb:ef:22:bf:c2:07:56:
                    dc:1a:71:93:d2:83:32:a4:47:b6:06:fe:53:54:33:
                    89:94:71:3c:83:9e:b0:c7:31:9f:f4:38:60:74:19:
                    a7:c5:70:4b:18:fe:68:30:96:71:36:0e:55:65:cc:
                    ff:cc:21:f8:9c:b7:ed:38:a3:b5:26:74:14:3d:f6:
                    f0:42:47:97:ec:e2:7b:47:86:72:38:bf:2c:96:47:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2A:EB:8C:9D:99:18:9D:14:3B:60:3B:B0:A6:9C:F9:EC:3C:2E:74
            X509v3 Authority Key Identifier:
                keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b9:a9:89:cb:e0:12:24:9a:d7:38:46:5f:33:40:e6:df:98:
         c5:c6:bc:51:2a:1d:77:fd:b7:00:7d:e7:82:45:47:51:fc:6c:
         47:17:f5:d0:98:b2:22:cb:9e:9d:d8:a4:e4:a7:81:f2:4a:e6:
         d1:c0:c8:3c:fe:65:50:d1:c9:08:8d:3e:bb:6e:13:eb:8c:eb:
         2a:0a:11:6e:d5:5e:34:b6:25:c9:5f:94:92:19:fb:82:68:8e:
         94:e5:bd:5d:d5:64:bf:bb:d6:96:75:47:d6:e2:04:e3:b8:8a:
         c9:da:44:d4:df:c4:72:02:d8:3b:fe:77:29:03:a2:4b:0f:21:
         95:cb:7a:80:7d:81:48:e4:c3:2b:ca:eb:b1:29:78:ed:2a:2c:
         bc:24:0a:82:a4:05:39:78:a0:f3:e4:fa:53:f5:b1:b2:bf:6a:
         f7:09:b8:81:2a:de:0c:67:61:1f:41:e2:6b:70:95:c6:80:03:
         9e:61:6f:7d:22:4f:06:44:59:89:0b:25:3a:a5:f4:4d:22:65:
         7f:ec:74:1e:1d:81:85:3e:77:32:60:16:dd:14:62:83:63:8f:
         f9:a9:16:ec:17:71:38:02:6f:d9:9f:cd:b6:23:93:04:69:7a:
         03:e7:b2:2f:36:19:36:81:91:89:91:dd:4a:24:31:ca:4d:8a:
         c8:f9:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 07:19:01 2026 by rpki-client