This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
File:                     ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json)
Hash identifier:          T7C0xV0ArZjILXpGPySvXH4FBl2tkA6zIZSl+6w3a1Y=
Subject key identifier:   92:D6:55:80:21:71:9B:76:AF:E2:FE:F1:65:8F:56:D8:F5:C2:26:48
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Certificate issuer:       /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial:       27D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
Manifest number:          275C
Signing time:             Sat 24 Jan 2026 15:31:18 +0000
Manifest this update:     Sat 24 Jan 2026 15:31:18 +0000
Manifest next update:     Sat 31 Jan 2026 15:31:18 +0000
Files and hashes:         1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: ZP5cqC4KpxqYplCgJDQfDjifyD7XY/uUrDMg6xGGgfQ=)
                          2: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=)
                          3: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=)
                          4: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=)
                          5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=)
                          6: A225B08645C411F0BF201021C4F9AE02.roa (hash: IvX8ILiXhHWFM5uyZnAUJPESwgV0Xv5NKCdd1JDWi+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
                          rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10196 (0x27d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
        Validity
            Not Before: Jan 24 15:31:18 2026 GMT
            Not After : Jan 31 15:31:18 2026 GMT
        Subject: CN=6974e5c6-f934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:90:a8:31:eb:e3:9c:ad:b5:c6:d7:fa:90:
                    36:ee:d0:6e:25:99:dc:b6:55:d6:59:55:0e:31:fb:
                    00:d6:0c:f1:fc:61:a9:15:77:d4:7f:ac:2b:f6:59:
                    61:f9:af:70:59:24:7a:1f:b3:3c:40:e8:57:91:45:
                    1a:05:e5:06:5a:51:d6:54:77:87:ae:b8:4c:f9:a7:
                    ee:26:62:54:24:bf:fd:ac:d7:64:fe:7f:fe:57:9f:
                    12:86:52:e1:ba:c3:c9:98:25:64:b7:6f:62:a9:7f:
                    58:c3:35:85:46:2c:f5:aa:82:be:f8:7a:0d:4d:8b:
                    09:97:85:de:90:0a:c0:0f:4d:8e:9c:e7:07:4c:fb:
                    10:7e:72:15:cc:fe:5b:de:aa:3f:c0:c3:d7:4f:86:
                    77:5c:89:28:2f:30:28:ef:87:31:9a:09:58:fc:22:
                    db:5f:32:7e:a0:bb:3a:98:b8:27:58:83:4d:5c:f3:
                    58:0b:81:1a:a5:04:d4:0b:b9:6d:79:ba:d8:7c:66:
                    a2:07:3d:9f:84:fd:72:5a:ac:f3:72:81:79:87:1b:
                    86:12:dd:4e:dd:5e:0a:f1:69:5a:c3:41:bf:ff:1c:
                    27:f3:29:6d:fc:9c:fb:c4:fb:89:62:cc:0e:88:67:
                    92:28:c4:fc:24:af:ea:88:ff:7a:99:75:a9:ce:ed:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D6:55:80:21:71:9B:76:AF:E2:FE:F1:65:8F:56:D8:F5:C2:26:48
            X509v3 Authority Key Identifier:
                keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:45:b4:35:9c:de:24:a0:df:3b:53:70:ff:0f:ae:75:52:45:
         31:5f:e3:76:e9:45:17:e5:da:f5:41:17:7f:64:14:a7:9c:8f:
         fa:35:21:ed:2a:b3:9a:b7:56:3b:36:fd:fc:a4:ea:ca:9d:fe:
         77:5b:84:a4:52:3c:86:a5:98:51:c9:2c:01:4e:78:9d:5f:01:
         53:46:60:6d:14:cd:ea:98:5d:11:7e:f9:68:83:fe:8e:0e:05:
         fd:da:33:4c:d7:89:df:8b:15:1a:b0:b0:13:df:0f:d6:ce:59:
         ea:70:49:f3:82:d3:33:9f:3e:eb:1d:7b:19:62:60:b6:ff:9e:
         55:0c:7c:a4:bb:26:4a:48:a3:19:ba:ab:5e:17:25:58:d5:f6:
         a4:49:6f:ff:01:73:14:e6:34:ba:e6:3b:35:29:1d:d1:1f:2a:
         13:6b:c5:82:35:a9:7f:38:0f:95:ad:3e:cf:0c:00:a0:85:77:
         f9:cd:08:56:90:46:dd:b9:a8:98:39:c7:cd:c7:71:0f:ed:bb:
         38:44:bc:44:53:50:75:21:35:50:0e:bb:88:77:74:9e:c6:6a:
         da:7a:96:50:6a:12:d8:19:aa:a9:be:2d:4b:86:2c:5c:7d:41:
         0a:dd:a5:ef:65:14:df:64:91:83:97:be:36:33:f1:de:4b:79:
         72:78:3c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:37 2026 by rpki-client