This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
File:                     Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json)
Hash identifier:          1hTesVL1qzzNXdeJTvlQdseN+kYQm7guAaaXrW4F60w=
Subject key identifier:   E3:24:A6:14:87:D1:2F:89:72:E1:11:72:C5:6F:0A:9B:03:7B:A9:33
Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2
Certificate issuer:       /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
Manifest number:          0201
Signing time:             Sat 24 Jan 2026 19:27:24 +0000
Manifest this update:     Sat 24 Jan 2026 19:27:23 +0000
Manifest next update:     Sat 31 Jan 2026 19:27:23 +0000
Files and hashes:         1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: STUYY32OOx08EfYFs0Y/Z6zi4n4CCoE/SKGoRz9lze0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl
                          rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91733A8, serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
        Validity
            Not Before: Jan 24 19:27:23 2026 GMT
            Not After : Jan 31 19:27:23 2026 GMT
        Subject: CN=69751d1c-dedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:c3:e6:40:e9:b5:f2:ea:87:10:db:69:54:
                    7d:dc:68:d5:22:11:3d:86:2c:3d:9d:cb:c4:d3:eb:
                    07:03:82:86:81:21:46:b4:e4:d7:4f:da:a5:f5:cb:
                    c3:9e:7c:77:9d:80:76:86:f0:d8:8c:b7:51:27:8c:
                    6d:b8:e6:6c:67:20:4c:e8:39:0b:1e:8b:ec:20:67:
                    16:e8:de:c7:94:12:34:f4:1c:18:03:47:7e:1a:a0:
                    31:8a:d0:18:25:06:25:e7:6b:67:3c:bd:57:5b:7f:
                    1a:e7:55:5d:98:69:72:74:e0:20:4c:49:88:84:36:
                    ea:9a:8f:eb:f4:7b:12:46:ef:28:e9:a2:c0:bc:13:
                    21:1b:c0:dc:ff:7a:7a:14:e7:eb:c9:73:49:e3:6e:
                    f8:18:8a:1c:61:22:81:0a:7d:85:73:8f:1b:f5:30:
                    40:b9:f4:98:73:96:4a:c6:00:a9:ec:1a:5d:22:24:
                    fc:d2:6a:6f:75:c6:64:8f:ec:77:17:0d:bd:62:84:
                    5c:ab:eb:ae:85:9b:6b:8f:c7:66:f4:f8:cf:93:3f:
                    fe:d2:be:df:90:ca:ac:64:ec:e0:df:c7:2e:36:d7:
                    8f:cd:f8:bd:ce:f6:a5:e1:34:fc:e1:e8:3d:04:d4:
                    81:65:e6:21:ce:89:93:5c:1f:d7:94:19:3e:92:78:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:A6:14:87:D1:2F:89:72:E1:11:72:C5:6F:0A:9B:03:7B:A9:33
            X509v3 Authority Key Identifier:
                keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b1:40:f1:f8:77:b7:3e:56:9b:d1:da:e3:50:9b:9e:42:96:
         3d:30:97:06:af:e3:3e:42:4f:5e:35:70:67:e6:94:5d:a7:d2:
         50:af:c7:22:b2:9c:c2:3e:d7:34:44:a3:f0:20:93:e7:ea:78:
         29:a0:f2:d6:68:bb:8b:b8:1c:9c:e2:31:87:18:4b:2a:b2:5e:
         49:36:e2:78:ee:5e:b1:d0:12:29:e8:4f:32:75:aa:79:5a:74:
         32:f6:93:ec:dc:b6:03:be:c7:c4:76:86:b0:34:0a:d5:ed:f9:
         ba:09:91:ac:3e:a1:aa:22:e1:ec:31:f2:4d:4b:58:ba:e4:e8:
         b4:bb:09:ca:3b:7a:40:08:0b:f4:22:fb:03:a5:2f:da:de:e2:
         63:82:09:8d:09:7c:16:15:ad:01:32:f6:20:16:59:79:d6:d9:
         80:5f:a7:05:64:07:a9:0b:ad:07:a6:02:d1:5f:28:5f:8f:48:
         b8:03:1d:82:84:5f:0c:16:02:55:ec:45:de:3f:f1:88:40:f2:
         a3:fb:57:0e:5f:94:e7:da:6d:a7:14:b0:bc:d7:b5:e0:5d:c9:
         83:21:7f:fd:58:e5:d4:17:91:0d:e9:54:f0:ef:35:ef:a3:56:
         37:fc:9c:65:2d:b1:03:b4:56:08:26:6b:c4:5a:bb:83:84:3d:
         e0:45:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:39 2026 by rpki-client