This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
File:                     tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json)
Hash identifier:          sLMYnpexrKDUAZFRNjx8g+BM81jRIZ1UfUEmxY7Qv2M=
Subject key identifier:   74:18:D1:F8:13:EA:A6:8E:05:F3:88:96:78:E9:D0:BD:4C:13:90:95
Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91
Certificate issuer:       /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
Manifest number:          7C
Signing time:             Sun 25 Jan 2026 06:00:06 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:05 +0000
Manifest next update:     Sun 01 Feb 2026 06:00:05 +0000
Files and hashes:         1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: rwdQpPusFR/IW0YQNE80Bg+GMKpZbHuiIgy17XGtOwk=)
                          2: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: JnKzQUCZZIkzk+PTJ2yOthp2jewtbhpdupguptGlDRA=)
                          3: E641780E535211F0A795A950C4F9AE02.roa (hash: /6fZjzm6zMKlJavcLCHUvZwJwnYnVUAiwPFKfA2za2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl
                          rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
        Validity
            Not Before: Jan 25 06:00:05 2026 GMT
            Not After : Feb  1 06:00:05 2026 GMT
        Subject: CN=6975b166-96c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:60:fa:da:38:71:93:71:0b:65:70:f8:0e:
                    51:37:01:54:7a:fc:be:17:6a:cd:63:a2:3a:2f:3d:
                    6f:97:22:8e:57:64:01:8a:8e:91:e0:ed:12:39:12:
                    c7:33:06:25:d6:67:18:22:af:c4:75:bd:33:fc:00:
                    6b:00:3a:3e:8c:8e:ed:81:dc:a4:ec:5a:fc:7a:07:
                    2b:b7:de:c3:bb:b6:d0:37:18:60:5f:7c:73:19:bf:
                    81:14:17:db:b4:20:81:1d:b6:bb:16:72:8b:15:76:
                    28:4e:e4:a9:da:d7:c2:af:47:f2:e8:57:65:a2:ab:
                    9c:7d:4a:2a:67:bd:43:e8:5e:79:5b:05:2b:80:f8:
                    ae:60:1f:29:d8:cc:f9:a8:82:ac:21:b4:11:51:17:
                    5f:6d:c6:e6:60:2d:0a:ce:82:a1:1b:2f:2d:59:35:
                    d7:06:48:20:8b:66:7f:df:ce:32:2a:87:35:8d:be:
                    8a:4d:70:bf:67:c6:d9:b4:f4:0b:03:69:9e:ce:d1:
                    0a:48:be:d3:70:1b:2f:11:48:08:40:e8:21:89:17:
                    86:25:f2:7d:d1:7d:01:52:9c:60:6f:86:67:a3:e1:
                    13:d7:c6:94:17:e6:51:d9:79:04:f7:c6:c5:5c:61:
                    ad:57:6b:38:4f:0b:17:c9:83:2d:e9:19:a4:af:a1:
                    89:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:D1:F8:13:EA:A6:8E:05:F3:88:96:78:E9:D0:BD:4C:13:90:95
            X509v3 Authority Key Identifier:
                keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:15:76:ff:73:f3:10:3c:1e:d6:7b:cc:24:62:fe:f2:af:c0:
         62:c3:cd:cd:e6:0d:eb:28:ae:80:b8:c2:ff:a6:ff:f0:35:be:
         b7:10:30:35:5d:60:f5:e1:50:18:95:56:8f:ec:7f:7c:10:52:
         a7:e8:c3:2a:c1:fc:4c:af:c1:6a:a1:f3:00:2a:c5:79:c9:71:
         13:aa:4a:22:86:77:48:38:7b:8b:10:ec:47:41:71:07:f4:8f:
         9b:59:38:24:55:ed:54:4b:5e:69:fc:65:0b:6f:a4:79:65:31:
         40:53:93:63:b9:e6:fb:93:97:4f:d1:c7:7c:a6:25:47:87:6a:
         1a:5f:d4:1f:31:82:82:fd:ce:18:a6:d6:3d:72:27:3d:39:60:
         36:23:d3:2e:85:40:d3:03:8a:ff:32:fa:7e:5c:9a:2f:2b:87:
         a2:b1:60:d1:c9:cf:4e:2f:23:94:8b:f9:f5:24:5d:85:9c:da:
         c4:6b:d9:c6:23:da:04:4d:ee:31:a4:fb:9e:50:c1:9f:e2:2e:
         8c:41:c8:e6:88:d1:82:eb:f1:fd:7a:38:0a:61:1f:a7:26:35:
         ce:4b:d6:36:91:e3:84:1f:fe:7a:fa:b5:cd:c1:41:c1:f0:bd:
         18:d9:62:8f:c4:98:62:b9:a9:34:29:f0:28:6b:96:e1:32:c3:
         57:29:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:01 2026 by rpki-client