This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File:                     ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier:          onlTP2m7q+ClAfr0dI/yCHJe8gURa8agP9TCNfdWyxY=
Subject key identifier:   EF:4B:D0:64:6D:89:F1:66:AC:B9:B8:99:5F:D1:7B:42:3B:A1:DA:34
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       05C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number:          05B2
Signing time:             Sat 24 Jan 2026 22:26:36 +0000
Manifest this update:     Sat 24 Jan 2026 22:26:35 +0000
Manifest next update:     Sat 31 Jan 2026 22:26:35 +0000
Files and hashes:         1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: GYosgwwCiJoRUv9Twc47ntqSv7spD7FmWaa9M9jLCmQ=)
                          2: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=)
                          3: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: Jan 24 22:26:35 2026 GMT
            Not After : Jan 31 22:26:35 2026 GMT
        Subject: CN=6975471b-9ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:68:f6:76:61:a3:f6:e0:99:0a:bd:1a:25:4c:
                    e5:8a:3b:62:67:91:d8:2a:fc:1a:ce:88:30:21:cd:
                    bc:55:c0:c1:af:9c:b4:50:07:cc:16:1b:aa:c7:3e:
                    a0:a8:bd:39:9e:d4:03:4a:f2:26:78:b5:85:07:8a:
                    26:ff:70:61:d5:48:f1:c2:86:d4:3c:84:6c:d1:b5:
                    02:2f:1b:4b:4c:d9:17:d7:56:28:9a:d5:82:8e:d2:
                    01:fb:02:3f:a8:c9:9f:bb:41:a7:e6:c2:ba:14:c5:
                    4c:b5:b0:ce:55:3e:77:d0:a1:84:16:d5:7d:37:3d:
                    96:c0:c6:df:71:a4:33:0b:95:1e:72:a2:9e:bb:ad:
                    ba:b4:c3:1f:91:d6:5c:9f:76:da:b2:20:6d:93:e6:
                    f8:17:8b:68:d3:8b:eb:bc:6d:25:76:f1:ac:25:48:
                    e2:f1:04:37:3b:a9:f0:61:f8:bd:d8:c1:7c:08:07:
                    6a:50:6f:8d:ab:4c:50:eb:30:23:f3:c6:03:45:30:
                    f5:24:95:97:38:1a:a2:28:9c:69:9e:22:ac:4d:7f:
                    31:78:12:b5:67:78:dd:46:65:19:f8:d2:36:ab:14:
                    b0:a6:db:81:7e:f7:b2:74:8b:9c:52:d2:90:c5:cd:
                    9b:59:f9:fb:b7:5d:89:72:db:57:13:5c:2f:d2:8e:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4B:D0:64:6D:89:F1:66:AC:B9:B8:99:5F:D1:7B:42:3B:A1:DA:34
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:77:1a:2a:ba:f4:04:6a:3f:e9:b2:74:a5:ca:95:eb:63:14:
         49:17:24:2d:7d:70:83:5e:c4:44:6e:d0:3f:08:10:88:79:a9:
         25:65:94:5d:15:27:5f:d1:f1:cb:5e:fe:eb:d3:3a:aa:73:78:
         f7:f3:4a:65:68:1c:31:ab:52:3b:4c:7d:5b:88:46:d4:ec:96:
         32:e6:cc:3a:98:b5:b0:42:26:5a:ef:ff:81:c2:7d:62:cc:b2:
         a0:39:de:f2:b4:ff:63:09:83:64:52:a5:6c:2e:4b:44:fe:2f:
         3b:98:3e:7e:bd:ee:8b:2b:81:47:74:d8:a7:05:0c:5a:77:e2:
         9b:4f:95:f0:19:9f:ef:2b:0e:8a:0c:10:c8:45:bd:14:30:42:
         fe:c2:c7:69:3a:f1:15:c4:48:f3:ef:f4:a6:95:bf:a5:83:5f:
         9a:49:67:87:c7:fd:ee:99:0f:80:60:7f:9e:3f:87:35:25:8f:
         7f:84:f0:48:ec:0e:96:31:3c:d5:48:e2:ec:09:f6:c8:74:44:
         6e:61:f4:76:99:23:6c:dc:64:e8:91:81:67:67:28:58:7f:5e:
         07:9a:63:09:d2:3c:d1:4b:10:ad:3d:78:6d:d3:cb:fb:56:7e:
         77:9c:1e:7a:80:e6:ec:0b:c8:06:da:79:9c:14:78:bb:da:b6:
         28:37:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:48 2026 by rpki-client