This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft
File:                     tQk3XiWpXStZwZWBw8Y1topJES0.mft (raw, json)
Hash identifier:          S0hL1ZOAEmGBWyz3uQa1wSEcICId6/iozFH/SPqaAJ4=
Subject key identifier:   D4:5E:50:D1:7F:01:05:7D:3C:A3:0F:10:66:E7:7A:8D:71:50:1D:B3
Authority key identifier: B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D
Certificate issuer:       /CN=A917E754/serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D
Certificate serial:       350F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft
Manifest number:          3507
Signing time:             Sat 24 Jan 2026 15:11:13 +0000
Manifest this update:     Sat 24 Jan 2026 15:11:12 +0000
Manifest next update:     Sat 31 Jan 2026 15:11:12 +0000
Files and hashes:         1: tQk3XiWpXStZwZWBw8Y1topJES0.crl (hash: YBGLWw2n9yyeMJB/Q5ihWDIQCSwrPqVmtIBSRvkh814=)
                          2: 2F79F386050511EA87CC7D42C4F9AE02.roa (hash: RGbkUiQObiN5kNn1fOoTLpQbUrsGEdo5yysiJ0yuXAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl
                          rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13583 (0x350f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E754, serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D
        Validity
            Not Before: Jan 24 15:11:12 2026 GMT
            Not After : Jan 31 15:11:12 2026 GMT
        Subject: CN=6974e111-a839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:36:de:8b:47:d9:79:85:9d:06:dc:f5:8f:f7:
                    6a:ba:88:f6:be:b4:12:f4:5f:7c:26:81:87:76:c4:
                    3e:c3:26:a4:9e:2f:d7:4c:c7:74:1e:92:23:83:9c:
                    73:1c:82:70:38:b0:9e:4a:7b:35:c1:eb:1d:26:ea:
                    cb:51:5d:0f:5d:9f:28:d1:ef:1b:dd:82:da:00:e3:
                    92:1c:09:61:97:9e:89:e5:eb:f7:41:6d:05:04:6c:
                    09:77:71:24:d0:54:13:d8:25:a4:a0:8c:c9:f2:80:
                    bd:40:5c:21:fd:59:b4:d8:80:3d:09:88:ec:eb:f0:
                    16:26:66:f2:59:d3:61:82:59:52:f7:98:49:5a:c3:
                    74:c5:bf:f8:08:a4:6d:b6:37:84:0c:5a:4f:7f:f5:
                    09:47:54:0a:c8:64:6b:98:6b:0d:f7:e9:16:d4:09:
                    bc:ae:b2:51:ad:6f:b6:f2:08:3b:c8:1a:38:a7:9d:
                    ec:c4:95:dc:2c:f7:6a:6d:bc:6c:0e:03:7a:23:34:
                    ff:1d:8b:c7:15:3f:e0:d3:9f:d9:c6:60:9c:30:c5:
                    2a:76:fd:58:b7:4d:0e:23:e9:73:69:cd:4a:39:84:
                    a3:26:69:8a:19:c2:f8:72:1b:39:f4:08:a1:65:73:
                    22:6a:79:dd:27:86:99:2c:46:91:d7:7c:8e:a0:26:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5E:50:D1:7F:01:05:7D:3C:A3:0F:10:66:E7:7A:8D:71:50:1D:B3
            X509v3 Authority Key Identifier:
                keyid:B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a9:72:82:1b:ff:dc:07:0b:47:6b:dc:9f:ef:42:09:f9:b5:
         4e:cc:14:b9:da:34:34:31:49:2c:e3:cb:a5:0f:5d:92:cd:54:
         4d:03:25:7c:be:6f:b3:ce:6d:cf:3d:da:34:08:ab:c8:23:97:
         1d:b7:fc:87:ce:fa:7c:ab:69:96:2c:bd:6e:dc:f5:1f:49:dd:
         f9:9a:99:fb:1d:5c:45:67:cf:fe:79:c1:1e:3c:d0:de:42:84:
         43:fb:3c:68:f4:e4:22:00:9c:77:5e:f6:37:ed:cb:cc:54:84:
         86:29:d4:1c:0c:94:63:8b:1f:be:35:51:09:cc:2b:7b:c2:9a:
         e8:5c:f7:2e:78:47:34:2b:74:0b:f9:18:4b:f0:56:b6:c1:af:
         d2:91:3a:48:36:51:29:24:91:d1:4f:c0:04:9e:ed:39:02:fa:
         23:eb:b8:ed:bb:a7:0e:e5:86:3f:8e:8c:48:d2:05:68:1e:dd:
         48:7b:dc:29:be:16:f2:61:78:f3:b0:f1:ee:5c:1e:42:bb:d4:
         a3:5e:b5:7f:54:a1:cc:fc:a8:93:48:9a:e4:fe:15:55:0d:1b:
         1f:5a:41:c0:4b:7b:b4:04:e2:c4:a7:e8:f6:e0:b6:5b:bc:5b:
         fd:d4:c4:6b:b2:9c:c8:17:00:29:48:c8:8f:ab:0c:0f:b0:13:
         ac:77:e5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:21 2026 by rpki-client