This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
File:                     TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json)
Hash identifier:          ek7lPMScK63gwXOtIO1ta9tuUPsOCF0AzNr9vPbyG/M=
Subject key identifier:   7D:59:0B:E4:08:9E:88:6C:2E:F0:24:18:2B:CF:54:A3:52:6F:52:3C
Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
Certificate issuer:       /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Certificate serial:       0A8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
Manifest number:          0A83
Signing time:             Sat 24 Jan 2026 19:03:49 +0000
Manifest this update:     Sat 24 Jan 2026 19:03:49 +0000
Manifest next update:     Sat 31 Jan 2026 19:03:49 +0000
Files and hashes:         1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: 6UWJrjgVb8tWsUItYQq7FgxZnbF9NhL7WOuocF8q8mg=)
                          2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: yzKhPUL6h0qN6fsH3sVZ9y4Q3w/HTPH44lIopOy0PVQ=)
                          3: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: J6t3W4LwJNewCd71hFnJCtoXP4XEkv1IVxB4b6AxDnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
                          rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2700 (0xa8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
        Validity
            Not Before: Jan 24 19:03:49 2026 GMT
            Not After : Jan 31 19:03:49 2026 GMT
        Subject: CN=69751795-ce18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:70:05:5b:84:9a:04:38:ad:83:50:d8:eb:
                    7c:5e:18:5e:cf:ba:f1:73:c8:0d:f6:34:5f:58:f5:
                    de:b7:71:19:89:3a:72:3f:ef:6b:71:22:10:49:fb:
                    ac:ab:1a:14:c8:11:24:38:ee:4e:1c:a5:ea:19:9b:
                    4d:50:53:f0:c1:91:1a:39:0d:f6:6a:dc:db:e2:47:
                    0c:c3:fb:b0:7f:61:09:04:cc:19:9b:1b:f5:5e:3a:
                    4f:6f:96:f7:93:34:84:15:12:91:d1:a3:be:ab:4e:
                    10:92:b6:e7:11:14:2b:39:c6:00:bb:9d:df:30:f5:
                    64:f8:8c:ea:9b:cc:99:18:ce:2f:13:25:77:bc:bf:
                    2a:c4:23:64:54:a6:85:f2:7e:01:75:15:9d:d6:55:
                    0d:c0:41:1c:a1:b6:0b:f8:ad:7a:69:e1:41:cb:86:
                    46:57:d0:3a:c1:9f:a6:b0:00:6f:b0:28:3a:90:52:
                    65:87:fb:d2:46:d1:99:32:cb:f8:e3:f6:01:df:5f:
                    21:0b:6a:11:11:bf:56:80:c4:c2:17:4a:ad:4c:88:
                    92:44:37:40:86:32:51:6e:e1:d4:e2:63:9e:ae:20:
                    71:e6:d4:69:67:f8:03:1e:13:2f:7d:d2:49:62:41:
                    f6:04:01:9d:17:13:a6:e6:72:a0:47:bc:65:15:27:
                    2e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:59:0B:E4:08:9E:88:6C:2E:F0:24:18:2B:CF:54:A3:52:6F:52:3C
            X509v3 Authority Key Identifier:
                keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ac:b9:44:96:3a:50:17:24:da:37:f0:b7:ad:00:96:45:a3:
         f7:88:39:da:c1:38:00:6b:5d:dd:00:ba:14:8a:6c:11:2c:18:
         5f:6c:c1:78:a4:4f:87:3f:93:37:b8:a6:ac:f7:f3:fc:05:77:
         a5:e3:ab:67:43:53:fe:b2:e6:d3:1e:7f:73:e2:87:c3:3c:50:
         51:a7:0f:a8:10:f5:76:5e:3d:33:7f:8a:df:d6:b6:00:9f:c7:
         ee:9c:fb:0c:ec:62:72:c6:8a:05:bf:bc:1b:7c:3c:2b:13:37:
         2b:45:28:20:53:e1:1b:70:09:d5:86:ca:b2:50:42:a8:bc:cb:
         39:18:5d:32:b2:d8:b0:03:04:71:a4:50:74:44:7e:a1:fb:cb:
         84:89:b8:fd:24:47:8a:e9:c1:4b:79:fd:01:46:40:40:3f:27:
         e3:04:11:cd:95:0a:6a:d6:5b:40:41:9f:4b:21:a4:fe:b1:0d:
         bb:d5:3f:3e:8e:42:db:cf:a1:0d:82:3a:38:50:49:0f:b3:75:
         f5:de:ca:72:45:c4:ff:cf:dc:b6:37:a4:ef:14:e5:3b:ef:64:
         fd:3f:2d:8a:63:6b:a0:b6:29:59:cb:17:13:b2:d5:f0:ee:17:
         87:2c:8a:56:da:f6:69:08:4e:15:53:6c:dd:4e:9c:17:9a:36:
         38:81:95:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3
MkM0QkRFMjMwHhcNMjYwMTI0MTkwMzQ5WhcNMjYwMTMxMTkwMzQ5WjAYMRYwFAYD
VQQDDA02OTc1MTc5NS1jZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEtwBVuEmgQ4rYNQ2Ot8Xhhez7rxc8gN9jRfWPXet3EZiTpyP+9rcSIQSfus
qxoUyBEkOO5OHKXqGZtNUFPwwZEaOQ32atzb4kcMw/uwf2EJBMwZmxv1XjpPb5b3
kzSEFRKR0aO+q04QkrbnERQrOcYAu53fMPVk+Izqm8yZGM4vEyV3vL8qxCNkVKaF
8n4BdRWd1lUNwEEcobYL+K16aeFBy4ZGV9A6wZ+msABvsCg6kFJlh/vSRtGZMsv4
4/YB318hC2oREb9WgMTCF0qtTIiSRDdAhjJRbuHU4mOeriBx5tRpZ/gDHhMvfdJJ
YkH2BAGdFxOm5nKgR7xlFScukQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1ZC+QI
nohsLvAkGCvPVKNSb1I8MB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0
NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz
aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjAzQy80NkM4OEM4Mjc0NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMz
dzF1ZTJ1eVg1anB5eEwzaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABrLlEljpQFyTaN/C3rQCWRaP3iDnawTgAa13dALoUimwRLBhfbMF4
pE+HP5M3uKas9/P8BXel46tnQ1P+subTHn9z4ofDPFBRpw+oEPV2Xj0zf4rf1rYA
n8funPsM7GJyxooFv7wbfDwrEzcrRSggU+EbcAnVhsqyUEKovMs5GF0ystiwAwRx
pFB0RH6h+8uEibj9JEeK6cFLef0BRkBAPyfjBBHNlQpq1ltAQZ9LIaT+sQ271T8+
jkLbz6ENgjo4UEkPs3X13spyRcT/z9y2N6TvFOU772T9Py2KY2ugtilZyxcTstXw
7heHLIpW2vZpCE4VU2zdTpwXmjY4gZW3
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:56:41 2026 by rpki-client