This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
File:                     TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json)
Hash identifier:          NLuXy+juYya/vMHKdajWnQfK5lXK0M00v1WkrMgcUT0=
Subject key identifier:   A5:F9:18:27:AA:D6:58:8F:B1:DE:5C:9E:6A:7C:F0:AF:32:8C:0D:83
Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A
Certificate issuer:       /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A
Certificate serial:       075F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
Manifest number:          0745
Signing time:             Sat 24 Jan 2026 21:05:25 +0000
Manifest this update:     Sat 24 Jan 2026 21:05:25 +0000
Manifest next update:     Sat 31 Jan 2026 21:05:25 +0000
Files and hashes:         1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: HwLl6rvv/qgSFm3nn/C4azZexbDGhHN+cjevfHd75UI=)
                          2: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: td6YzHO0feqFZb57DHpN7KSZ6FUNeSOTB0hRY6rpjKQ=)
                          3: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: NT27Q4+crppd5YzCD9rpV43tvmiUM1bUNKwwd266KfY=)
                          4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 3IMbjiUOCfbRYN7Htz538ACGC+HZm8dI0Isqa2du++M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl
                          rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A
        Validity
            Not Before: Jan 24 21:05:25 2026 GMT
            Not After : Jan 31 21:05:25 2026 GMT
        Subject: CN=69753415-2f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:d5:be:32:48:94:9a:c3:90:3c:06:d6:dc:
                    3f:72:e3:c4:e7:be:28:4e:17:82:09:78:29:1d:5b:
                    e5:01:d3:d8:81:b8:77:e0:f2:da:23:af:07:50:a6:
                    74:6b:74:43:82:20:a3:a0:40:94:7d:af:37:67:a8:
                    f9:4d:d9:d1:c9:dc:32:7d:ca:6a:c6:d8:b6:48:5f:
                    45:b5:8c:9d:dd:35:5e:df:be:20:0c:5d:36:6b:1e:
                    98:6b:75:bc:d1:3b:5e:36:4c:94:7c:1b:81:75:48:
                    6e:20:fe:d5:3d:ef:3d:99:2d:01:b2:4d:cf:d4:b0:
                    a0:a8:fe:41:85:3e:d3:26:e0:b9:39:ec:57:4c:fd:
                    33:70:f3:62:1c:dc:6a:7a:f4:cf:4f:db:bd:57:1e:
                    5a:41:4f:ca:03:3e:74:4e:a0:4b:88:9b:e8:46:10:
                    50:a5:66:0c:15:1d:dc:7a:c3:b6:0e:f2:6e:c5:11:
                    10:09:69:34:5e:17:a6:0f:d7:f3:85:cf:41:0d:57:
                    81:03:76:66:6e:c1:ca:0e:b6:91:b9:54:fa:50:42:
                    2e:70:8c:27:eb:ca:6e:dd:08:6f:46:a5:a9:06:78:
                    c3:49:ec:be:3e:63:5e:56:da:4e:e8:2a:51:d8:16:
                    0c:03:9b:37:94:5b:53:16:b9:d3:33:b7:78:47:97:
                    87:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F9:18:27:AA:D6:58:8F:B1:DE:5C:9E:6A:7C:F0:AF:32:8C:0D:83
            X509v3 Authority Key Identifier:
                keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:45:e6:f6:78:25:76:84:d8:f3:40:00:bc:3c:5e:c1:5d:
         af:bd:9a:b8:f8:89:62:88:de:69:d5:37:f5:68:95:53:21:b3:
         61:05:b3:f3:66:1a:85:8e:2c:4c:e2:70:43:be:cb:39:de:71:
         f2:90:3e:37:d4:67:e8:a3:7d:0f:1a:46:5c:59:22:58:ad:41:
         7d:4e:1d:5e:7c:d8:cf:33:e9:c4:a8:98:43:aa:83:c3:5e:36:
         d4:c5:3f:ef:2c:57:e7:2a:d0:eb:54:c1:a7:bd:f5:c1:2b:3c:
         c5:5e:97:e8:86:0e:84:03:f7:f1:ca:4f:6a:f5:71:66:78:cb:
         bd:95:33:26:7c:ff:c7:c7:fc:61:54:3b:ae:9e:71:9a:c1:df:
         11:bb:26:45:d6:06:da:bd:4b:c3:78:5f:dc:9b:71:4f:8f:1f:
         c1:85:5b:ae:cb:78:49:34:ef:96:1d:d1:34:3a:b1:b5:a2:b9:
         43:36:51:7c:a9:f8:e5:33:fa:af:08:b2:9e:31:37:af:92:fa:
         b7:65:c4:80:b0:9a:59:c9:31:1c:a6:1b:6b:aa:c8:4e:61:d8:
         16:31:7a:ea:32:8b:58:c5:d4:ae:19:32:a4:f4:8c:b8:bf:08:
         94:86:66:c4:a8:92:7f:d3:65:6e:4c:6a:11:44:9b:a3:f3:40:
         ce:37:b3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:29 2026 by rpki-client