This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
File:                     T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json)
Hash identifier:          fcOBWRIiVujLx6TUfL/8niAvKXG8LcdC6xg3Na0kg68=
Subject key identifier:   EB:C6:DC:63:25:BA:87:E8:05:CF:47:36:9F:D3:EA:0B:27:C5:DA:91
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Certificate issuer:       /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial:       0D04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
Manifest number:          0CFC
Signing time:             Sat 24 Jan 2026 17:45:10 +0000
Manifest this update:     Sat 24 Jan 2026 17:45:10 +0000
Manifest next update:     Sat 31 Jan 2026 17:45:10 +0000
Files and hashes:         1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: upf1GsGKqc2KoWdbj/vBbkf1kvHeBZQpzJ5ClP+9UC0=)
                          2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: TQudNrBg1tAuuiY/zVaf2qIyDj5AjTY8tAQkyrZyuYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
                          rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3332 (0xd04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
        Validity
            Not Before: Jan 24 17:45:10 2026 GMT
            Not After : Jan 31 17:45:10 2026 GMT
        Subject: CN=69750526-c524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:71:f3:57:7e:d4:b1:08:91:e3:1f:b9:53:
                    0f:64:18:40:74:5c:72:69:7e:d2:c8:20:a1:ad:a2:
                    9a:b9:de:3a:6e:e6:06:75:07:78:f8:14:2a:1a:bc:
                    43:83:52:2d:70:4c:22:e5:03:11:ee:b5:44:b0:d6:
                    9c:ad:15:44:cf:a8:d4:3e:c0:aa:09:1d:aa:45:69:
                    8d:99:3a:df:a7:51:a7:be:91:c8:4a:07:9d:8c:ea:
                    c2:f1:c9:c1:b0:9d:f1:16:4e:b4:9e:b5:ce:c9:1e:
                    fe:25:a0:08:b5:6b:f2:f6:3d:35:b9:ea:8e:be:c4:
                    b2:13:77:4d:86:a3:78:45:39:da:d6:49:da:9e:db:
                    2a:f0:64:96:53:f4:1e:5d:c8:66:a1:ce:8d:f7:1a:
                    a2:c4:9f:0d:19:67:1e:3a:dd:c4:4f:d5:ce:76:b7:
                    26:1c:ed:14:6b:e3:3c:10:90:62:7c:6a:53:63:0e:
                    99:4d:57:ee:e3:bd:88:30:81:08:5a:82:dd:8c:5f:
                    9d:89:d9:b9:1c:43:21:15:7a:f1:2e:9c:4f:1f:9e:
                    db:b9:40:e7:d1:db:37:d8:dd:8f:dd:2e:97:93:12:
                    ad:9a:72:c8:3f:f8:ef:ce:dc:b2:0d:22:13:25:d9:
                    c8:d7:f9:55:29:f6:8b:e8:7b:4c:d1:73:70:95:fe:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C6:DC:63:25:BA:87:E8:05:CF:47:36:9F:D3:EA:0B:27:C5:DA:91
            X509v3 Authority Key Identifier:
                keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:79:3d:41:d9:2a:6f:71:52:13:5e:7b:05:5f:46:da:e4:02:
         dc:47:e8:6d:b8:6c:12:6c:a7:f0:1a:1b:40:fa:e8:79:16:be:
         6f:f4:97:81:0b:0e:6b:1c:24:b8:e3:9d:23:32:94:4a:24:56:
         6c:3f:6e:83:a7:3a:16:86:82:53:b4:3b:52:5e:1b:9a:9d:cd:
         2e:77:ce:33:73:a0:b0:1b:71:45:72:4a:42:94:43:65:b2:80:
         f4:72:3b:43:3e:f1:82:ff:ed:b2:0b:af:92:0d:97:2e:85:d2:
         34:36:1b:f5:dc:00:da:ce:ac:bd:e5:88:e8:40:ba:73:6a:cb:
         be:20:35:a9:a4:70:52:65:a1:6d:56:dc:f0:84:f7:4e:f0:99:
         5b:b7:4a:78:7a:54:70:b4:02:41:d4:22:c4:1b:1c:ba:e7:71:
         2c:97:8d:b7:56:a2:ba:19:b3:9b:2f:69:13:fd:34:e8:ed:a0:
         f4:a2:e6:db:bd:ce:93:78:eb:e9:c7:db:cb:e3:2d:1f:a6:0b:
         69:5d:e2:03:53:8b:c7:d2:34:e0:89:83:90:fe:df:10:f2:39:
         be:8c:0e:b3:3d:0a:a1:50:97:ac:e0:3d:33:34:3b:8d:b4:17:
         b1:05:30:ae:26:81:8a:f2:2b:40:80:1e:0e:26:e1:a2:0a:44:
         50:a2:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:36 2026 by rpki-client