This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
File:                     Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json)
Hash identifier:          YkC0BU6JSiJL/pHOKCK3hck31cmEsGjEi1N+fgyvPts=
Subject key identifier:   FD:36:5B:D4:1B:B8:88:A4:42:3C:39:F4:3C:A0:F4:8C:2B:9C:4F:48
Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
Certificate issuer:       /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Certificate serial:       0877
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
Manifest number:          086F
Signing time:             Sat 24 Jan 2026 20:02:30 +0000
Manifest this update:     Sat 24 Jan 2026 20:02:30 +0000
Manifest next update:     Sat 31 Jan 2026 20:02:30 +0000
Files and hashes:         1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: 5vncgEx8i/WKNKTJal4g91KzznbAA9ZMXt6joiQmhgk=)
                          2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: QdFj4b+G66zoM24orGpWvQKYWAowBUe3I5QM3qjwxak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
                          rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167 (0x877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
        Validity
            Not Before: Jan 24 20:02:30 2026 GMT
            Not After : Jan 31 20:02:30 2026 GMT
        Subject: CN=69752556-3367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:04:3b:f9:13:20:e4:ae:c7:d4:c0:af:4c:
                    40:d1:0d:3f:58:fd:b3:fc:f1:87:b9:7d:42:04:02:
                    37:ff:17:58:47:ad:cf:60:38:41:a7:2d:63:78:20:
                    08:6a:b4:79:de:ce:17:cd:46:84:85:a1:c9:b8:aa:
                    65:4f:60:ca:e1:77:0d:42:6e:14:10:5f:2d:14:00:
                    e1:f2:d3:2f:8c:36:b1:61:a9:4c:01:36:6e:49:72:
                    ed:da:3b:58:61:ab:e5:76:68:40:e0:70:54:ae:7d:
                    66:c0:03:70:9f:7d:58:38:65:75:ba:39:e2:e7:27:
                    ec:31:a9:e6:bf:62:7f:35:c2:14:5d:4b:9c:3d:17:
                    d9:aa:8b:8c:eb:a3:30:ed:0e:6f:2c:17:23:9a:ff:
                    2b:03:5c:3e:63:92:f6:99:14:9d:b6:2e:58:04:db:
                    d6:bf:98:00:57:26:9b:db:b3:ee:8c:6d:2c:9f:36:
                    db:6b:b1:ee:a9:0a:c6:e0:5d:23:84:51:0b:5f:73:
                    ce:cf:33:be:a3:26:91:56:f2:2c:0a:f0:58:93:5e:
                    ec:39:aa:5c:f7:bf:e5:f7:c2:27:33:30:e3:ae:ce:
                    35:b9:a3:65:24:f8:b4:6a:bb:f6:f8:58:b7:12:68:
                    81:68:94:02:59:e8:a2:91:72:2a:8b:57:d6:53:66:
                    3f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:36:5B:D4:1B:B8:88:A4:42:3C:39:F4:3C:A0:F4:8C:2B:9C:4F:48
            X509v3 Authority Key Identifier:
                keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:03:ae:f8:fe:f1:f5:2e:42:3b:24:f8:ac:89:97:fa:02:
         e8:43:ff:04:fc:92:08:e4:79:2e:82:a4:bb:0d:15:c3:58:b7:
         eb:7c:49:85:54:80:38:f3:55:6a:c2:6a:0a:a2:d5:53:0f:e3:
         fc:0b:f9:5c:1a:47:4c:f4:1e:ed:8e:e5:3f:de:ef:60:3e:38:
         9d:83:9b:7a:83:c3:a5:5a:db:e4:87:fc:57:25:e8:85:52:02:
         9f:ac:57:95:59:b4:50:3a:55:f7:4e:78:63:9a:05:9e:f0:7f:
         d4:fd:d9:4f:68:98:87:f2:6b:ee:b8:7f:cb:0f:c5:62:cd:05:
         5d:6b:1f:50:1a:dc:ca:68:ce:92:04:ed:f2:eb:c8:61:be:1d:
         f2:c1:0b:f7:f9:9d:c1:de:d2:22:0b:1c:2e:05:ac:ca:2e:62:
         45:b3:87:5f:f4:cf:81:af:36:66:c9:0b:cd:22:79:c9:cc:64:
         7f:f1:4f:65:89:b2:e5:d5:0f:a4:05:b4:29:9f:82:92:78:0e:
         cc:49:a5:a4:a8:1b:ac:cc:a0:b7:cb:4e:37:27:ee:9a:71:d2:
         eb:19:14:cf:62:be:97:bc:15:a5:05:84:ae:ab:e9:e6:ab:ff:
         21:8a:9c:02:e1:df:48:38:77:a5:a7:79:33:89:63:d0:20:04:
         3f:a4:62:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE
QjYxODRDQzkwHhcNMjYwMTI0MjAwMjMwWhcNMjYwMTMxMjAwMjMwWjAYMRYwFAYD
VQQDDA02OTc1MjU1Ni0zMzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwzoEO/kTIOSux9TAr0xA0Q0/WP2z/PGHuX1CBAI3/xdYR63PYDhBpy1jeCAI
arR53s4XzUaEhaHJuKplT2DK4XcNQm4UEF8tFADh8tMvjDaxYalMATZuSXLt2jtY
YavldmhA4HBUrn1mwANwn31YOGV1ujni5yfsManmv2J/NcIUXUucPRfZqouM66Mw
7Q5vLBcjmv8rA1w+Y5L2mRSdti5YBNvWv5gAVyab27PujG0snzbba7HuqQrG4F0j
hFELX3POzzO+oyaRVvIsCvBYk17sOapc97/l98InMzDjrs41uaNlJPi0arv2+Fi3
EmiBaJQCWeiikXIqi1fWU2Y/UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP02W9Qb
uIikQjw59Dyg9IwrnE9IMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2
MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU
TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh
N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPvwOu+P7x9S5COyT4rImX+gLoQ/8E/JII5HkugqS7DRXDWLfrfEmF
VIA481VqwmoKotVTD+P8C/lcGkdM9B7tjuU/3u9gPjidg5t6g8OlWtvkh/xXJeiF
UgKfrFeVWbRQOlX3TnhjmgWe8H/U/dlPaJiH8mvuuH/LD8VizQVdax9QGtzKaM6S
BO3y68hhvh3ywQv3+Z3B3tIiCxwuBazKLmJFs4df9M+BrzZmyQvNInnJzGR/8U9l
ibLl1Q+kBbQpn4KSeA7MSaWkqBuszKC3y043J+6acdLrGRTPYr6XvBWlBYSuq+nm
q/8hipwC4d9IOHelp3kziWPQIAQ/pGLp
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:54:21 2026 by rpki-client