This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
File:                     TCISGt-uP1dSgBZRUcP9MOOq_QE.mft (raw, json)
Hash identifier:          2ogAf21+NuiZ9I7N4fzB5YrYgQCgCJ4S8NEuL65+vM8=
Subject key identifier:   49:25:38:34:9D:3E:6F:2B:E6:74:38:E7:16:6D:65:87:A8:3E:9F:D1
Authority key identifier: 4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
Certificate issuer:       /CN=A91466E8/serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
Manifest number:          AD
Signing time:             Fri 23 Jan 2026 05:18:02 +0000
Manifest this update:     Fri 23 Jan 2026 05:18:02 +0000
Manifest next update:     Fri 30 Jan 2026 05:18:02 +0000
Files and hashes:         1: TCISGt-uP1dSgBZRUcP9MOOq_QE.crl (hash: xW5VIplJhbytUbTtEQei22OuRmf6Oyw9eCUa1mcW3cs=)
                          2: 02640B0CF97911EF99F9BE80C4F9AE02.roa (hash: NYtoABq9iaZ7RDTNr8tHyhssdbHGRtrQu/5JhSbINm0=)
                          3: 67CB5FC0629411F0B7FA070FC4F9AE02.roa (hash: ezXoOJmaQ+T0/SBG+83qcx+7CgpMAs0wB76/qo16lME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
                          rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91466E8, serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
        Validity
            Not Before: Jan 23 05:18:02 2026 GMT
            Not After : Jan 30 05:18:02 2026 GMT
        Subject: CN=6973048a-d204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fa:fc:c3:18:3e:61:29:95:35:df:75:91:6d:
                    bc:29:ef:c8:45:bd:2f:06:9f:ea:91:90:a0:c6:48:
                    58:5e:af:e7:34:f9:94:a7:42:ef:13:50:e4:cb:57:
                    01:cb:30:d7:cc:ed:94:74:79:04:4c:19:fe:c4:28:
                    ee:d3:54:ce:6c:39:de:8d:bf:3b:af:e1:e6:98:b2:
                    bd:f1:6b:77:c0:f2:5d:66:82:a3:f3:d8:58:87:1f:
                    3b:eb:bc:b7:24:bf:27:2b:af:73:81:9a:8c:6e:14:
                    5b:f4:65:6f:06:d7:40:f5:7f:71:5c:93:55:a4:68:
                    93:d6:f8:46:63:23:e8:c0:7b:2d:0d:74:36:8b:e4:
                    f0:b7:f5:47:50:c1:ae:fe:de:bd:52:32:da:7f:33:
                    b5:d6:6f:de:66:1e:56:9a:bb:c8:94:8d:de:c2:b4:
                    af:3d:5c:34:26:0e:d5:d3:df:40:ef:63:10:44:6e:
                    79:12:1e:73:6e:6c:b0:d1:6a:be:b3:d5:54:c9:90:
                    ac:07:22:5e:9f:50:8b:b8:7a:14:a7:45:29:58:61:
                    06:75:ab:fc:fe:0c:29:19:55:99:87:09:e2:b3:9d:
                    29:f2:c8:09:3e:ca:6f:db:7e:2f:78:7f:c8:3e:25:
                    59:69:78:aa:c8:4a:9e:85:db:c8:4d:d1:1a:cf:96:
                    85:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:25:38:34:9D:3E:6F:2B:E6:74:38:E7:16:6D:65:87:A8:3E:9F:D1
            X509v3 Authority Key Identifier:
                keyid:4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:aa:2c:9a:34:0a:ef:18:45:c7:a8:0b:32:37:c1:43:17:02:
         d3:38:46:55:7c:85:12:cd:32:3b:e9:73:8e:28:3e:c1:e3:46:
         bf:e9:6c:bc:42:ce:be:bf:aa:19:1b:2b:49:1a:60:3e:e1:45:
         9d:6b:40:ac:55:fd:26:63:bf:c5:7f:24:1b:4d:65:27:b8:79:
         b2:3f:3e:0b:38:87:7d:4f:8a:aa:b7:67:69:3c:eb:55:ba:f8:
         7b:36:9f:3d:66:41:07:8c:d6:0f:eb:13:ad:04:ca:c3:9f:45:
         9d:b6:f6:a4:2f:72:ee:a6:f8:5a:17:11:e0:ca:a7:02:94:bd:
         80:14:c2:10:96:77:27:d9:29:96:c3:00:29:9b:cd:ce:3e:86:
         b1:2a:23:db:28:8e:6b:f1:30:dc:d7:4d:b5:21:d2:7b:9b:dd:
         0e:a9:31:01:f7:a5:85:41:d0:7f:1b:d1:b2:a4:df:2e:02:be:
         75:54:27:6b:8f:bd:7e:44:42:12:24:69:36:31:f2:25:0c:c8:
         90:9b:47:d7:25:0e:12:d1:90:8a:e7:2b:cd:4c:e2:b8:4b:38:
         68:e8:cc:62:e0:31:7e:be:58:07:a7:04:3a:67:b1:0f:03:e0:
         5a:9a:a4:e3:3a:ff:fb:bb:27:af:6d:fc:29:28:e0:d6:bb:f3:
         88:d3:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:30 2026 by rpki-client