This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
File:                     tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json)
Hash identifier:          0xibc8+p8PLj7tc3TVRgp3BtiOKSuCFX2A8+VOT9JQ4=
Subject key identifier:   32:6F:36:0B:5C:C2:E9:3E:A6:E4:29:76:9A:D7:9B:BE:E2:C2:51:D3
Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55
Certificate issuer:       /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
Certificate serial:       0B91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
Manifest number:          0B87
Signing time:             Sat 24 Jan 2026 18:37:22 +0000
Manifest this update:     Sat 24 Jan 2026 18:37:22 +0000
Manifest next update:     Sat 31 Jan 2026 18:37:22 +0000
Files and hashes:         1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: Nt1fTn3z/wQieQR2mxt4l6gyosrdDWz7T2L5UE3cE74=)
                          2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8tDMb7QbvAxPwaQ73OW8ydvRFg2I4adHfXyKJL4c0jA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl
                          rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2961 (0xb91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
        Validity
            Not Before: Jan 24 18:37:22 2026 GMT
            Not After : Jan 31 18:37:22 2026 GMT
        Subject: CN=69751162-622b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:9e:d8:1c:44:6d:7d:e7:c5:7b:5c:a4:ea:
                    73:a9:1a:30:fd:a3:1c:34:46:4c:fe:06:59:22:f8:
                    30:49:62:dd:e5:7d:09:e1:71:d7:31:d5:09:e1:f3:
                    6d:5b:23:29:ad:35:10:e7:84:c1:65:53:2f:01:64:
                    d3:83:6b:a8:f6:e9:9c:fd:44:7f:a7:df:00:82:2e:
                    14:85:4c:87:02:53:be:df:3d:73:03:10:56:69:cb:
                    11:03:ce:77:00:dd:9b:f3:09:a3:37:8a:4e:c8:91:
                    a7:bd:52:62:7b:6b:fc:e9:80:de:b1:63:d7:dc:c9:
                    46:57:7a:01:1e:27:be:20:8e:66:50:3b:f0:9f:31:
                    1a:7a:a1:5c:61:45:37:8f:e9:70:af:97:99:e5:a1:
                    c6:5c:03:f8:38:a4:c5:92:b8:c9:e7:de:19:80:a3:
                    fe:3e:6b:36:74:48:5f:dc:26:21:ea:a2:01:4e:7f:
                    23:44:69:e6:a0:5d:43:1f:a9:e9:d4:c1:b1:7a:c9:
                    3a:a8:de:d7:64:16:72:16:0a:b4:97:c9:31:4d:5a:
                    84:05:cf:c7:17:99:f2:11:96:1e:fa:65:a8:d3:40:
                    4f:ff:a8:c3:55:12:17:99:a5:b9:2f:37:06:c4:25:
                    41:32:ba:1c:40:e2:8d:cc:21:6f:97:0e:58:66:39:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6F:36:0B:5C:C2:E9:3E:A6:E4:29:76:9A:D7:9B:BE:E2:C2:51:D3
            X509v3 Authority Key Identifier:
                keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:23:13:31:44:32:8e:bc:e7:b2:4e:a3:70:a4:1c:fc:ed:40:
         06:8a:4b:1a:52:7d:08:a6:62:cc:b8:78:26:83:3a:8c:a9:eb:
         b5:e0:15:96:25:d8:0d:f6:f7:79:4d:49:77:ca:c0:7e:fc:90:
         68:9a:a6:6f:d9:09:76:ef:87:3f:3a:1b:63:73:ee:12:7d:cf:
         7f:3d:52:3f:d8:6d:89:c0:12:40:70:e2:bb:35:8f:c1:f0:33:
         d2:1d:ac:71:c1:1c:1d:bb:99:84:68:9b:31:af:b8:bf:ba:27:
         1b:88:c5:07:7d:6b:9b:99:f0:44:6d:e8:4b:40:6f:dd:5e:86:
         a9:63:d3:f1:2b:e8:a4:fb:4d:82:f3:de:7e:3f:8e:54:46:63:
         4a:e3:99:47:b8:50:6d:5e:ee:f4:20:c5:74:f0:50:39:4f:3a:
         8e:d6:fa:34:c2:c5:26:f6:68:14:ad:bd:7b:ee:3b:4a:a1:d3:
         c2:f5:cd:50:6b:c8:c2:7f:ae:12:89:0b:58:97:07:a0:aa:b5:
         f1:e4:fa:5b:ae:af:c0:64:8e:d0:99:a2:bd:d4:12:e8:f5:e7:
         79:df:63:07:08:2a:d3:d9:dc:e6:36:dc:e0:e8:a9:2e:bc:be:
         05:1c:f3:cb:9f:20:20:62:ce:05:f9:82:7f:ae:86:81:89:88:
         9d:2b:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:31:10 2026 by rpki-client