This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
File:                     tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json)
Hash identifier:          wfZoSlxJv1IZNmE1ytAZWTAdHigiRLh2mkySma2eXL0=
Subject key identifier:   E1:3C:C3:66:F7:FB:C5:5A:83:75:98:C9:A2:A8:BE:E0:9B:3A:31:B2
Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Certificate issuer:       /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Certificate serial:       0F7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
Manifest number:          2CFD
Signing time:             Sat 24 Jan 2026 16:31:00 +0000
Manifest this update:     Sat 24 Jan 2026 16:31:00 +0000
Manifest next update:     Sat 31 Jan 2026 16:31:00 +0000
Files and hashes:         1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: 6/E5GBHu4eJkLw5KqMMdcr6PpbmkhH1zvswrEtlhlPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
                          rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3965 (0xf7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658EF, serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
        Validity
            Not Before: Jan 24 16:31:00 2026 GMT
            Not After : Jan 31 16:31:00 2026 GMT
        Subject: CN=6974f3c4-17a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:87:04:74:4d:1e:af:ac:af:fe:43:8d:e2:
                    5d:6d:bf:0c:88:82:3f:87:b5:0e:fb:67:8c:65:3b:
                    cf:6b:7e:db:c6:22:2c:79:43:7f:9f:34:d4:61:2d:
                    6d:04:79:6d:f7:ea:8b:7a:41:9a:4b:d2:e3:d7:cf:
                    f2:7f:a6:fd:80:9d:8c:5a:a1:1b:4a:52:46:e9:8e:
                    9a:60:ef:a2:d9:79:5f:63:a7:6a:28:ee:8e:35:0b:
                    a0:a6:04:2f:32:be:01:10:9b:0f:b0:72:97:b5:89:
                    e9:fa:72:0f:b8:75:62:38:19:cc:17:8f:a9:1e:4c:
                    7f:41:e2:a8:57:8a:92:7b:a3:44:30:0a:87:00:dd:
                    d3:b1:40:11:b0:2b:1a:eb:c5:a9:c4:6f:0d:0e:cd:
                    85:2b:16:d9:91:34:dc:26:5c:90:18:b3:9e:e7:99:
                    80:c8:0e:08:e5:ed:20:e2:f3:c4:84:e9:ad:42:60:
                    83:2f:e5:d5:9e:c0:1e:d7:39:90:2f:0c:c3:d2:10:
                    9e:2c:f6:2a:8a:81:de:f1:64:bf:c8:34:de:5e:02:
                    9e:25:5f:da:c8:36:7a:34:de:5c:0a:2e:25:12:4b:
                    33:80:d1:9d:75:d2:98:e5:2d:6c:1c:5b:5d:2a:2e:
                    5a:b1:f0:36:fa:c4:6b:e1:ee:7f:16:d4:fa:43:45:
                    e2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3C:C3:66:F7:FB:C5:5A:83:75:98:C9:A2:A8:BE:E0:9B:3A:31:B2
            X509v3 Authority Key Identifier:
                keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5b:19:2f:2f:17:6a:1a:3d:4b:90:13:d5:eb:cc:1f:1c:23:
         f9:30:83:15:ae:43:05:b7:a9:49:82:d3:2c:1f:61:81:33:04:
         ed:d4:49:3e:ad:e4:92:40:a5:da:62:61:e0:5d:18:cc:82:80:
         57:ff:c6:56:ec:1d:31:30:cd:a2:4c:c2:53:f4:77:2e:a6:39:
         bd:cc:f2:e3:10:e0:34:34:6c:b5:ee:2f:cc:56:67:02:af:30:
         90:dd:08:71:95:4c:8a:61:bf:e8:84:91:1e:84:fe:f1:50:bc:
         87:51:4f:b3:7e:10:cd:8f:ba:68:ca:8c:f8:21:20:11:b0:2b:
         8f:6d:e9:f3:fd:93:62:f2:a7:ca:7a:c0:27:af:9b:90:77:d8:
         63:77:16:14:c4:0a:9d:62:6b:b1:3c:28:69:93:94:b5:d7:77:
         95:34:f8:2d:e5:d8:9d:c9:bb:17:b4:35:6e:6e:f4:a0:11:19:
         79:c8:33:2d:84:a5:54:0c:a8:4b:86:ca:62:b8:97:71:15:2a:
         a2:f0:84:4b:90:62:b9:91:2e:77:fb:91:78:8f:41:e4:10:b0:
         30:b8:0d:8d:c5:7a:f9:00:ce:1b:c4:1d:35:db:f3:e8:81:57:
         21:14:b1:d9:c6:8d:25:fc:08:5d:e6:ce:33:46:a5:5c:73:0e:
         2a:37:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:59:45 2026 by rpki-client