This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft
File:                     TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft (raw, json)
Hash identifier:          ZgnW3+cPLpLDKx+gmJN8hchadO/blZkJB7Jvyjc5C28=
Subject key identifier:   E7:E1:D9:1C:FA:56:3D:90:45:77:57:68:D9:5A:56:F5:85:05:36:F6
Authority key identifier: 4F:17:82:E9:95:64:C2:8A:36:EE:DC:19:F9:73:D1:D9:27:47:81:FE
Certificate issuer:       /CN=A912BE49/serialNumber=4F1782E99564C28A36EEDC19F973D1D9274781FE
Certificate serial:       1B6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft
Manifest number:          1B57
Signing time:             Sat 24 Jan 2026 16:04:16 +0000
Manifest this update:     Sat 24 Jan 2026 16:04:15 +0000
Manifest next update:     Sat 31 Jan 2026 16:04:15 +0000
Files and hashes:         1: TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl (hash: gp7Om3XYe1HnHPaZDX/Oc+/RpuCMApOACvWdlxtRjjE=)
                          2: BF3B175867E811E9ABCD3663C4F9AE02.roa (hash: iNZAX1XY5bhtCCRfr39mUvOIsHQyWHVVw+KbRd8Q2lY=)
                          3: BE3E903C67E811E9ABCD3663C4F9AE02.roa (hash: 0AFMj/BKgViLN+32uYWKbD3iviRePIIDfokSrf+z+9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl
                          rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7021 (0x1b6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE49, serialNumber=4F1782E99564C28A36EEDC19F973D1D9274781FE
        Validity
            Not Before: Jan 24 16:04:15 2026 GMT
            Not After : Jan 31 16:04:15 2026 GMT
        Subject: CN=6974ed80-13df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8b:da:19:5e:09:1f:3a:92:a7:d5:2e:a2:6b:
                    ac:fa:01:32:72:82:ef:7e:5c:a6:b9:f2:9d:e0:ca:
                    6f:96:46:6e:44:44:d3:ac:1c:71:41:b6:ba:ac:b2:
                    fa:70:03:6e:53:5e:c5:f7:21:1b:c0:ab:f7:cc:41:
                    51:74:ad:fe:2e:9b:a2:4d:34:4c:21:02:ce:6e:8c:
                    eb:90:9c:0a:11:72:11:c6:ab:f8:fd:bc:dc:ca:22:
                    88:71:31:7a:05:66:c6:14:cb:3e:e3:63:65:26:2d:
                    0c:46:f9:58:5f:9b:3c:6c:32:b7:15:ca:6a:ce:af:
                    7d:ed:e1:9e:9c:9b:b9:8b:2c:f6:ab:d6:6b:5c:72:
                    94:0b:60:aa:77:0d:2f:38:5b:7b:77:b9:a0:68:49:
                    e2:0b:a9:e8:91:09:a4:bd:f9:97:47:98:ef:68:67:
                    25:77:ef:dc:8a:3f:96:0d:23:38:bb:12:bd:7d:f3:
                    a2:f7:24:bd:7c:4e:f0:a3:e4:dd:36:ff:2e:94:5b:
                    ae:51:7e:fa:3c:db:5d:ff:2e:d5:83:02:86:4b:48:
                    67:e3:70:c6:87:43:48:de:0a:05:4e:38:00:dc:7f:
                    37:87:56:4f:18:f3:e4:f3:84:37:39:a7:2c:57:b9:
                    69:38:39:86:60:e7:43:b9:5f:8b:1a:a9:69:c9:0d:
                    e3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E1:D9:1C:FA:56:3D:90:45:77:57:68:D9:5A:56:F5:85:05:36:F6
            X509v3 Authority Key Identifier:
                keyid:4F:17:82:E9:95:64:C2:8A:36:EE:DC:19:F9:73:D1:D9:27:47:81:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:aa:37:67:c7:09:43:df:1e:b6:a7:02:f6:83:48:43:2b:96:
         8f:cf:fb:85:d0:5e:dd:e3:20:b6:17:76:c5:f6:3d:62:68:00:
         0d:b8:42:8b:5d:f2:b3:d2:97:13:93:00:26:52:14:5d:82:8a:
         5b:cb:ce:b3:d8:8f:9e:53:61:67:ef:19:36:7e:f3:e6:6a:fa:
         1b:b0:72:bc:5a:77:32:0e:33:cb:de:6d:1b:d5:fd:e7:43:10:
         2f:01:83:69:7c:db:48:75:6c:5f:8d:54:62:3f:b4:6c:49:a2:
         db:bc:e5:6c:6f:a6:e2:e2:0f:58:d8:3b:c9:3f:29:64:8e:9b:
         05:d9:cc:17:a7:2f:8b:50:f3:25:08:51:6a:86:4e:2c:ed:f7:
         0d:58:b1:e8:73:82:bf:7d:52:4e:8d:38:21:dc:c9:db:12:6c:
         66:1e:25:0b:b3:1c:a0:84:d9:be:c4:05:72:86:e3:b2:c5:01:
         b4:47:64:37:8c:53:d8:66:05:99:25:38:69:b1:b3:89:f5:49:
         18:68:2e:c2:91:35:45:b2:7a:cc:0a:57:42:2a:f6:69:f8:c4:
         80:47:1b:57:f6:58:20:14:f2:4f:20:f6:55:a7:45:68:8d:32:
         54:43:0f:57:44:d8:4f:ac:6b:1e:6a:4a:c5:8c:f1:cf:fc:a9:
         71:7d:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:21:15 2026 by rpki-client