This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
File:                     Teu44SIr4OPyOu23UkXg-XuHx00.mft (raw, json)
Hash identifier:          MXToTfm4azuJfX1NkTJri0A3UHkPURQlYOCTw1x0xjM=
Subject key identifier:   CE:3D:5F:A7:DB:7B:D2:E7:D0:15:1D:F4:51:2A:0F:44:CE:29:1A:A7
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Certificate issuer:       /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial:       3511
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
Manifest number:          3507
Signing time:             Sat 24 Jan 2026 14:33:20 +0000
Manifest this update:     Sat 24 Jan 2026 14:33:20 +0000
Manifest next update:     Sat 31 Jan 2026 14:33:20 +0000
Files and hashes:         1: Teu44SIr4OPyOu23UkXg-XuHx00.crl (hash: nfIbkWeNt0d+mxFV9iQww/3J+bnx/Y5GVuaSzkr6VEM=)
                          2: 673E7D66F73911EE8BEC0A76C4F9AE02.roa (hash: yf+DtpQHK15DsIR7hfI9Gbc6iXm71Iwwp13I2Suk7Rw=)
                          3: A2E40A5C3AA511EFA73B8885C4F9AE02.roa (hash: QLCxOEmWgCa369miIkbLMZGjORq6IjjCOA26AQZ1+A8=)
                          4: 67AFCD36F73911EE8BEC0A76C4F9AE02.roa (hash: VVrcitZ2B7U6+APe/mOfl0d7tYYMkpvIARKDnYAu3Cs=)
                          5: 66BD8F9EF73911EE8BEC0A76C4F9AE02.roa (hash: 69INgpKoMOy/gwg7BVvVMfejSm+vv8+6md6SESKON5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
                          rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13585 (0x3511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA76, serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
        Validity
            Not Before: Jan 24 14:33:20 2026 GMT
            Not After : Jan 31 14:33:20 2026 GMT
        Subject: CN=6974d830-2d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:81:2b:58:3f:11:93:91:49:11:b2:44:33:
                    db:f5:77:3b:af:64:ce:eb:86:59:6b:26:17:8e:a2:
                    65:aa:42:22:d5:59:02:e9:fd:e6:71:f3:34:90:0f:
                    f1:cd:44:b4:de:5a:17:ee:dc:ff:f2:a5:78:b7:8e:
                    8a:2d:60:fd:aa:d3:20:6f:e6:e3:a8:23:13:f6:e1:
                    cc:56:70:ee:89:fa:92:c8:44:37:65:78:cc:eb:c5:
                    43:4c:1e:ce:f1:d5:ab:74:0f:02:d0:aa:17:77:4f:
                    21:c5:4c:d5:ea:37:c8:cf:04:ed:61:e7:84:f1:be:
                    3d:43:40:df:8e:36:e5:11:4a:50:49:26:db:2b:e5:
                    c5:fe:b4:72:66:d0:f0:61:d4:ac:3f:0e:d4:b1:09:
                    33:aa:fb:28:8a:2c:94:a3:52:13:09:8d:44:d3:75:
                    7f:cd:bc:6c:df:2e:d8:bb:21:65:52:e3:c1:fe:30:
                    08:44:43:ff:15:75:1c:f2:61:42:c8:6f:26:0a:31:
                    eb:bb:83:a7:58:14:ef:1f:bb:dc:8e:da:01:15:87:
                    a6:2a:a1:e9:63:db:28:5f:9e:54:1a:db:83:38:8b:
                    06:a2:70:b3:e8:aa:0e:eb:7c:d9:f1:b0:e6:78:0e:
                    c8:51:f5:af:01:50:64:39:84:91:ea:2f:23:87:2d:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3D:5F:A7:DB:7B:D2:E7:D0:15:1D:F4:51:2A:0F:44:CE:29:1A:A7
            X509v3 Authority Key Identifier:
                keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:59:b3:3d:2b:9d:52:3c:64:14:50:85:93:ff:d1:36:b1:55:
         1f:0a:d3:19:15:72:9d:b2:e5:d5:22:a6:c2:3d:05:18:66:99:
         64:84:5e:06:54:df:bc:c4:fc:4a:0e:c7:25:0b:72:ef:cc:a4:
         25:2f:e1:cd:14:ae:4c:a6:6e:fb:19:52:f3:7a:aa:76:d3:ed:
         ab:45:2b:c9:c2:d0:5e:34:ce:df:1a:7c:93:96:cc:98:de:86:
         d8:36:12:cf:8e:93:d2:8f:cf:30:30:d5:95:c2:0d:e2:37:81:
         14:56:14:53:e5:17:09:c2:92:d2:5d:58:5d:75:33:3e:ed:7f:
         94:e8:a4:92:80:d1:57:07:35:f9:9e:70:d5:69:9c:96:7e:85:
         69:8c:d2:c9:0b:7b:9f:a6:fa:69:ce:16:ca:dc:5f:e1:7c:7e:
         14:56:60:b0:30:25:94:ef:0b:d2:fd:94:08:7f:3f:fe:96:e7:
         59:bc:10:6c:f7:b7:06:36:54:90:3f:2e:62:fe:90:0f:47:03:
         6d:24:f9:37:dd:bd:84:52:b3:3f:08:fb:bd:74:06:cf:62:2d:
         a7:01:7c:ac:08:5c:1a:d9:27:e6:2c:15:89:5b:90:8c:41:32:
         f8:10:ec:6c:a6:68:2e:ed:b9:cd:d6:22:28:f3:a8:da:7a:24:
         5b:a3:e3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:31 2026 by rpki-client