This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
File:                     TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json)
Hash identifier:          LfJHht4gbEQMtMleXwMcvo5hq9v3vEOfy0/K1toO/sE=
Subject key identifier:   5F:EE:32:A5:33:03:DD:17:77:53:62:0E:84:7A:56:24:C3:9A:99:37
Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
Certificate issuer:       /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Certificate serial:       1128
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
Manifest number:          111E
Signing time:             Sat 24 Jan 2026 16:57:40 +0000
Manifest this update:     Sat 24 Jan 2026 16:57:39 +0000
Manifest next update:     Sat 31 Jan 2026 16:57:39 +0000
Files and hashes:         1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: OgnaS6HMQVFJyGzT47vl0AX5/HPVjXutFvJmv6bSkgk=)
                          2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: 5meBlAmMOmT720cyEIa4c/tv1J4emStSE4Ky/WBp3tQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4392 (0x1128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
        Validity
            Not Before: Jan 24 16:57:39 2026 GMT
            Not After : Jan 31 16:57:39 2026 GMT
        Subject: CN=6974fa03-6f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:58:0f:a4:59:07:35:b7:38:a0:a6:b6:88:
                    28:7e:a7:22:75:f3:9f:ad:21:ec:b2:eb:e3:d2:41:
                    53:a4:e7:d7:4f:2f:39:a8:1c:c5:d2:da:0c:a6:de:
                    06:b9:a0:26:86:b6:36:e1:10:1f:62:6a:1a:1a:57:
                    70:59:d4:dc:b5:15:36:f6:b4:00:85:37:74:5d:71:
                    62:5f:4a:49:18:a0:79:b0:56:90:3e:e2:ca:19:56:
                    e5:2b:60:5a:fa:cd:f1:05:ea:c4:fe:1d:fb:50:87:
                    30:51:e9:b9:a7:ab:d1:0e:b2:53:46:12:36:65:68:
                    a6:01:88:0f:6d:ac:63:8f:d5:07:1b:b9:09:d0:b0:
                    0a:32:01:21:28:70:05:87:00:4a:73:22:d5:f6:b9:
                    ea:5a:e1:ed:cd:b7:7f:ab:32:60:14:f0:db:44:61:
                    25:19:40:62:be:20:24:98:7a:ef:da:07:13:b2:5c:
                    76:a9:9d:b5:53:54:c7:2c:3f:fa:4f:cd:71:ed:7e:
                    f3:a4:f6:1e:dd:39:6b:c0:dd:c9:1a:87:58:50:e1:
                    ad:dc:ca:d3:16:37:e0:4e:84:c7:e6:a5:f3:2f:2a:
                    24:c4:fd:16:6f:b5:6b:17:49:10:29:9d:9f:87:e3:
                    4c:74:19:38:7f:6b:e7:06:4c:5e:c8:4f:a2:98:96:
                    0b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EE:32:A5:33:03:DD:17:77:53:62:0E:84:7A:56:24:C3:9A:99:37
            X509v3 Authority Key Identifier:
                keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:01:c2:be:53:96:48:82:49:b3:f8:8f:ac:51:9f:ed:58:e8:
         45:41:c9:1a:38:dc:ad:c5:75:cf:18:b3:ad:f9:cd:95:3c:ad:
         fb:27:a0:15:13:26:e0:de:11:0b:7f:90:ad:05:23:f1:ca:dd:
         d7:f9:4e:67:f4:40:85:cd:92:2c:22:1e:17:76:11:07:4f:a3:
         48:e6:f3:bd:20:a3:1b:3d:30:b4:40:aa:1e:b7:73:cf:d4:80:
         43:0a:1d:08:9d:c3:bf:cc:3c:98:c8:a0:ba:9e:02:55:97:0d:
         04:4f:83:77:af:22:4b:f9:45:2e:56:82:a1:eb:e7:49:40:00:
         0a:17:96:95:43:1b:e0:10:bc:7e:3f:20:01:97:43:72:a2:18:
         48:36:a2:0d:58:73:ff:db:86:81:ec:2c:65:c7:86:f0:d7:95:
         8e:b6:83:4c:4e:d1:d2:60:e7:b0:85:dd:42:e0:dd:f8:73:64:
         c6:3a:42:f3:af:2a:0f:5e:80:c4:67:fc:de:d8:66:c9:4d:7d:
         9d:1e:14:9a:e6:a1:5c:f9:f0:12:db:50:14:3d:da:01:40:9c:
         8c:5d:69:63:d3:1b:be:02:0c:6a:85:53:10:16:6f:39:e5:25:
         46:3b:06:e4:3e:ec:47:e0:89:bf:cc:2e:67:01:ab:11:96:e9:
         88:73:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:26:32 2026 by rpki-client