This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
File:                     9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json)
Hash identifier:          tkcv3X7p17/aeaP4cVter4nq1BS02HEXAu055Ns3NGc=
Subject key identifier:   EE:F1:23:F7:FF:45:6C:07:D4:76:6C:C6:89:91:A9:F6:D9:88:00:67
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Certificate issuer:       /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial:       04E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
Manifest number:          04A7
Signing time:             Sat 24 Jan 2026 23:23:19 +0000
Manifest this update:     Sat 24 Jan 2026 23:23:18 +0000
Manifest next update:     Sat 31 Jan 2026 23:23:18 +0000
Files and hashes:         1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: BULN9kmdzr9FtJFkFR1M6Bnm3FCn/HFNnp+rql9VmdA=)
                          2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: jw0OS28NBUixcPBkwOHR1vk2bGtDUl1DjQdu4UsyyXU=)
                          3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: yyqYiyN6Yt2drA5esyg23pSPV3UCCGrSIBo6P8TjMZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
                          rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
        Validity
            Not Before: Jan 24 23:23:18 2026 GMT
            Not After : Jan 31 23:23:18 2026 GMT
        Subject: CN=69755467-3d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:34:1d:3a:0c:30:10:62:a6:52:8a:35:37:b7:
                    ca:89:15:58:87:3f:46:c6:1f:81:29:a3:1f:9b:68:
                    20:ab:81:9a:ac:3b:7b:25:10:14:59:27:7c:f2:8d:
                    24:bb:b4:be:59:8a:53:e8:d4:fc:61:20:ed:97:57:
                    53:bb:db:98:fa:69:5b:c0:29:97:1f:20:83:5f:4c:
                    a5:77:e2:1d:a1:ef:17:0e:54:a0:90:e8:80:03:e9:
                    20:2b:bf:40:4d:26:3d:70:dd:68:8c:ec:e1:83:44:
                    91:8f:99:f5:14:51:32:c4:8b:c4:e7:bd:73:10:ab:
                    92:ce:2f:b7:30:ea:cd:87:81:f4:17:27:e0:b5:c9:
                    3c:6f:7b:53:e5:7e:53:ef:ad:95:99:a6:84:57:0a:
                    72:49:91:4e:56:d1:cc:7c:06:03:e0:90:29:d1:8d:
                    ba:fd:33:a3:7e:d9:ee:25:41:53:38:6f:ee:02:a3:
                    36:b4:d2:e6:e8:15:c0:d4:f2:73:de:61:af:e0:08:
                    c3:27:8e:28:ba:05:80:30:fb:41:06:0a:8b:ad:eb:
                    89:4d:a1:d2:9b:bc:c1:78:6e:e8:24:58:ed:aa:ea:
                    b4:fd:97:5b:a2:e6:15:f0:e9:bc:b3:4d:92:78:4d:
                    9f:5d:5d:4d:5c:ef:f1:95:cf:37:5a:b1:df:66:58:
                    da:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F1:23:F7:FF:45:6C:07:D4:76:6C:C6:89:91:A9:F6:D9:88:00:67
            X509v3 Authority Key Identifier:
                keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:24:31:4c:a8:f6:0b:7d:b5:a9:2d:13:0f:86:c3:ca:dc:55:
         dd:27:88:98:cc:db:b1:34:33:66:6b:07:d3:b9:70:42:e3:63:
         cb:2b:bb:0c:60:0a:60:7b:e3:b2:a9:65:34:13:7b:2b:de:94:
         21:7c:0d:b4:97:48:2e:1e:be:1f:5c:3b:6f:8b:bb:02:20:b8:
         c9:de:ec:a2:7d:84:7a:f5:51:2e:7f:6d:69:62:cc:26:af:ad:
         50:4a:22:49:a3:f0:f6:fa:7a:15:5a:ea:6d:2f:10:9c:d3:d1:
         41:70:96:d5:d9:47:ae:c0:ca:b4:30:2b:fa:90:62:3d:6c:7a:
         fd:d7:b7:c6:50:7d:a7:99:10:8f:e2:ca:69:5c:da:6f:8a:cb:
         15:3a:f7:3b:36:37:96:12:54:21:a7:5f:76:3c:72:11:cd:cb:
         66:13:c0:ee:17:10:2f:47:98:01:23:11:35:82:42:d9:89:6d:
         9d:df:cd:ab:29:a7:3a:c3:93:af:64:37:2f:81:6b:96:30:b1:
         a5:39:7d:7f:ff:b4:e2:26:c7:38:3d:93:0a:a3:d9:ee:13:33:
         45:8d:61:d8:95:7e:4c:94:e5:14:fd:ab:17:a5:8b:94:2c:58:
         90:bf:f2:04:b4:e8:f2:fe:72:98:bd:11:da:2a:e6:4d:bb:b9:
         64:55:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:09 2026 by rpki-client