This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File:                     -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier:          EU7VcgDD9aOnrjkyRGMXF83DVs98zU0/Fm+nf6Mng+I=
Subject key identifier:   92:A7:C7:E3:E8:45:E3:17:61:09:1D:F5:06:F2:17:4F:B9:C8:0F:AC
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer:       /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial:       04AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number:          0488
Signing time:             Sat 24 Jan 2026 23:22:31 +0000
Manifest this update:     Sat 24 Jan 2026 23:22:31 +0000
Manifest next update:     Sat 31 Jan 2026 23:22:31 +0000
Files and hashes:         1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: /8y4bD8trhiEK/RG++bErgeCkaYpm8xKxOaRWCVuruE=)
                          2: 12A7BCAEF38111F0BD16EA186E6F56BC.roa (hash: KqhFX4icDOCTSXY9ne92SSAOA4hgHD9Kp2H4jf9s4iA=)
                          3: 1821352EA82D11F0A44D2F49C4F9AE02.roa (hash: 59YGH3d2E5WKtdDDd+SfH5rSD6g6BogQRvsB30CIBqk=)
                          4: 4AD77714823D11F0A5490821C4F9AE02.roa (hash: VRtVYC+afvhigywAUFy8UkGyU1t5gq1k2av2NI5KhIY=)
                          5: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: Ic4R+w1Q3P51Ahg1QyjlaOiynLUhpiYZLqnU6ACR3P8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
                          rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197 (0x4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
        Validity
            Not Before: Jan 24 23:22:31 2026 GMT
            Not After : Jan 31 23:22:31 2026 GMT
        Subject: CN=69755437-2304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:16:22:e7:e8:2f:7a:3d:ab:08:28:1e:86:
                    f8:fe:9e:cd:76:1d:cc:08:0a:63:8a:4d:70:90:43:
                    a1:c8:1d:d9:f6:5f:33:71:14:e9:64:7b:37:cc:fa:
                    0f:28:18:04:8f:e5:ac:67:46:73:67:1c:51:c7:08:
                    e8:d4:0a:63:3e:2e:7d:37:1e:c5:22:3e:66:7b:17:
                    93:70:2c:25:7a:3a:bf:33:ac:8f:c8:69:07:75:48:
                    ad:60:62:c8:c4:d9:cb:b3:aa:d4:ee:61:eb:0d:49:
                    c7:f0:32:f8:4c:97:59:85:46:46:aa:fb:e7:0e:fb:
                    7d:75:24:5b:a5:c0:7e:89:7b:e4:a7:61:35:63:1f:
                    61:12:96:93:9b:05:8d:fa:d0:97:9a:31:70:98:b5:
                    89:18:3e:80:a6:08:a7:0a:b3:de:a0:10:e8:ea:61:
                    7d:be:d5:72:b4:e7:7e:d6:73:83:96:37:83:f4:65:
                    8e:29:21:dc:13:2d:43:16:6c:5a:88:2f:e6:cd:d7:
                    a3:7d:a1:c6:bf:15:b1:b0:d1:d4:46:82:d1:cb:70:
                    e7:2b:2a:2e:a9:8c:af:b7:9e:ee:40:21:f6:31:4a:
                    c8:4a:63:90:bc:8d:fa:f9:8d:96:f4:b7:94:6e:72:
                    3e:6b:15:37:66:5e:94:1a:b6:46:9e:25:5b:59:33:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A7:C7:E3:E8:45:E3:17:61:09:1D:F5:06:F2:17:4F:B9:C8:0F:AC
            X509v3 Authority Key Identifier:
                keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:62:fd:d2:3c:84:5d:22:5c:f8:88:e9:59:3d:e0:a4:ba:4d:
         f4:c0:0f:b5:93:0b:4d:91:0a:26:da:4b:0a:b8:2b:5d:fd:48:
         70:6f:77:89:0e:a9:57:8c:1b:5b:fa:f7:7b:ec:9c:ec:4f:de:
         07:b9:53:20:4e:ae:b3:ac:35:b0:4b:9e:a4:f1:5c:4c:64:0a:
         df:54:48:c2:39:03:59:6d:6d:d1:af:ae:28:b3:9c:53:3a:69:
         8e:fb:23:70:01:5f:a3:88:c7:8c:70:af:31:3e:f3:c8:3a:ba:
         9d:54:2a:0a:f2:ee:28:78:ee:f5:94:55:a5:f1:48:8e:36:dc:
         ed:ed:78:70:ea:fc:f2:d2:cc:b0:ec:e8:0f:ba:97:99:b0:35:
         ed:ee:fa:29:36:7b:f0:6e:28:25:b2:15:59:1b:a1:fb:78:93:
         5f:e4:1f:ca:71:8f:e6:19:6d:12:bc:98:15:d9:0f:e8:52:82:
         9a:f0:51:3f:2f:2f:ee:a0:54:85:16:65:74:35:52:5a:9f:5d:
         ba:60:b9:4c:e6:f2:70:e7:8e:41:33:ce:9c:ca:67:08:57:13:
         2f:68:17:1b:1f:e1:1a:30:b2:6c:1d:e3:0d:fc:9c:26:87:35:
         a0:5f:fc:2a:14:85:16:c6:8c:64:56:8a:11:e8:3c:cf:81:a4:
         9a:aa:3f:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1
RTJDNTEzM0UwHhcNMjYwMTI0MjMyMjMxWhcNMjYwMTMxMjMyMjMxWjAYMRYwFAYD
VQQDDA02OTc1NTQzNy0yMzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuiYWIufoL3o9qwgoHob4/p7Ndh3MCApjik1wkEOhyB3Z9l8zcRTpZHs3zPoP
KBgEj+WsZ0ZzZxxRxwjo1ApjPi59Nx7FIj5mexeTcCwlejq/M6yPyGkHdUitYGLI
xNnLs6rU7mHrDUnH8DL4TJdZhUZGqvvnDvt9dSRbpcB+iXvkp2E1Yx9hEpaTmwWN
+tCXmjFwmLWJGD6ApginCrPeoBDo6mF9vtVytOd+1nODljeD9GWOKSHcEy1DFmxa
iC/mzdejfaHGvxWxsNHURoLRy3DnKyouqYyvt57uQCH2MUrISmOQvI36+Y2W9LeU
bnI+axU3Zl6UGrZGniVbWTO56QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKnx+Po
ReMXYQkd9QbyF0+5yA+sMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw
MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP
c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCYv3SPIRdIlz4iOlZPeCkuk30wA+1kwtNkQom2ksKuCtd/Uhwb3eJ
DqlXjBtb+vd77JzsT94HuVMgTq6zrDWwS56k8VxMZArfVEjCOQNZbW3Rr64os5xT
OmmO+yNwAV+jiMeMcK8xPvPIOrqdVCoK8u4oeO71lFWl8UiONtzt7Xhw6vzy0syw
7OgPupeZsDXt7vopNnvwbiglshVZG6H7eJNf5B/KcY/mGW0SvJgV2Q/oUoKa8FE/
Ly/uoFSFFmV0NVJan126YLlM5vJw545BM86cymcIVxMvaBcbH+EaMLJsHeMN/Jwm
hzWgX/wqFIUWxoxkVooR6DzPgaSaqj8H
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:26 2026 by rpki-client