This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
File:                     tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json)
Hash identifier:          CcphX7jZQZlXBcHggJuIM0qhUVpEX6EKTyusVYJjrWU=
Subject key identifier:   C6:D4:35:E2:05:3B:70:5E:0D:6A:CA:43:EF:6A:0B:BB:1E:7B:8C:5C
Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04
Certificate issuer:       /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
Manifest number:          0150
Signing time:             Sun 25 Jan 2026 03:26:06 +0000
Manifest this update:     Sun 25 Jan 2026 03:26:06 +0000
Manifest next update:     Sun 01 Feb 2026 03:26:06 +0000
Files and hashes:         1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: O0AVuBKXTAEN87DoIM0Uhs0+HkwRxZ/b0ZNvt9Gpaic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E, serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
        Validity
            Not Before: Jan 25 03:26:06 2026 GMT
            Not After : Feb  1 03:26:06 2026 GMT
        Subject: CN=69758d4e-5bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:68:fd:70:da:60:04:e0:c4:56:52:7e:97:
                    f4:ef:44:dd:f3:e9:ef:6c:5f:9e:9d:df:d1:ff:a3:
                    48:15:ca:32:bb:33:79:1c:72:eb:f5:7b:23:94:21:
                    9c:0a:91:24:37:b3:2d:66:38:c6:36:c7:9c:03:35:
                    fe:1f:5e:99:26:1c:e1:6a:b6:d0:5f:c8:d1:db:a6:
                    31:e1:f8:eb:76:cf:5f:ba:5b:c5:8d:80:38:9c:41:
                    1d:d1:4e:db:f1:a4:64:08:20:d4:48:3c:b2:94:e2:
                    48:75:75:8b:7d:a9:d5:d1:71:b0:54:92:8d:01:0a:
                    23:b1:b9:fc:59:c7:f9:2f:49:1a:df:f6:42:b3:09:
                    fa:18:1d:fa:0d:e0:e5:19:ba:25:cd:a9:75:ef:ba:
                    f2:ce:a6:53:a8:f1:c0:a2:f9:e1:66:96:98:fb:49:
                    f8:da:cf:52:60:19:a9:27:25:ba:93:d7:7e:80:51:
                    f1:5b:37:63:22:2c:4f:db:93:68:1b:c1:35:08:f6:
                    6b:24:5b:8e:7f:8a:57:06:15:a9:cf:35:02:6d:c3:
                    a7:47:8c:a2:eb:77:53:43:81:41:38:36:aa:62:b9:
                    3c:76:75:36:9d:4d:97:db:5b:16:3d:bc:ba:4e:4d:
                    2d:f6:44:9a:0a:db:c8:69:b7:97:eb:6b:ad:00:ac:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D4:35:E2:05:3B:70:5E:0D:6A:CA:43:EF:6A:0B:BB:1E:7B:8C:5C
            X509v3 Authority Key Identifier:
                keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ad:fc:d9:df:71:14:ce:d1:09:e5:57:a0:1b:28:9a:c8:5b:
         96:fc:f4:99:48:ff:93:d3:a8:06:da:d9:ce:a2:0d:84:c9:83:
         18:30:3f:53:11:2f:5a:4f:48:d9:e0:96:67:de:cf:e3:b2:39:
         ae:30:1a:f7:27:58:3c:3e:57:0e:7a:7a:25:68:4a:8f:05:97:
         3d:85:de:c2:6d:81:52:fc:a8:1d:1d:a6:fe:a1:2f:62:ba:02:
         9b:ce:fb:78:79:91:d0:eb:8d:96:3c:ec:c8:82:b5:eb:66:85:
         74:b0:6e:b1:f8:52:d9:e9:de:50:da:58:e7:d2:63:c0:0b:59:
         86:98:cd:6c:24:23:af:36:a5:57:7c:98:33:8a:7d:ed:9e:c0:
         e8:0b:bb:24:0e:1e:5e:ed:b2:2c:53:9d:51:ee:2d:db:4e:d9:
         67:43:03:f0:b5:28:31:e3:aa:fd:b1:4b:c0:81:91:22:db:d2:
         95:0e:bd:1d:49:b9:f1:0e:a1:46:9f:5b:cd:9e:f1:4c:d8:a9:
         a2:93:28:63:24:46:69:ad:22:e6:ef:9d:1b:3e:7b:74:73:59:
         a0:95:04:52:47:f9:f1:71:95:d2:e2:f9:8a:b5:10:b5:bd:ab:
         40:b1:b4:91:06:dd:79:7b:a0:03:e6:b3:06:01:9e:c1:30:83:
         c3:bf:cf:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4NUUxMTAvBgNVBAUTKEI1M0JDRTE2MUFDRjYzMDVFQzA1NUM1OUE4OTFFODIy
QTExRUY4MDQwHhcNMjYwMTI1MDMyNjA2WhcNMjYwMjAxMDMyNjA2WjAYMRYwFAYD
VQQDDA02OTc1OGQ0ZS01YmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl9Ro/XDaYATgxFZSfpf070Td8+nvbF+end/R/6NIFcoyuzN5HHLr9XsjlCGc
CpEkN7MtZjjGNsecAzX+H16ZJhzharbQX8jR26Yx4fjrds9fulvFjYA4nEEd0U7b
8aRkCCDUSDyylOJIdXWLfanV0XGwVJKNAQojsbn8Wcf5L0ka3/ZCswn6GB36DeDl
Gbolzal177ryzqZTqPHAovnhZpaY+0n42s9SYBmpJyW6k9d+gFHxWzdjIixP25No
G8E1CPZrJFuOf4pXBhWpzzUCbcOnR4yi63dTQ4FBODaqYrk8dnU2nU2X21sWPby6
Tk0t9kSaCtvIabeX62utAKx24wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbUNeIF
O3BeDWrKQ+9qC7see4xcMB8GA1UdIwQYMBaAFLU7zhYaz2MF7AVcWaiR6CKhHvgE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg1RS82NTlFOTAxMEVG
RjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi90VHZPRmhyUFl3WHNCVnhacUpIb0lxRWUt
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RUdk9GaHJQWXdYc0JWeFpxSkhvSXFFZS1BUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTg1RS82NTlFOTAxMEVGRjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi90VHZPRmhyUFl3
WHNCVnhacUpIb0lxRWUtQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAarfzZ33EUztEJ5VegGyiayFuW/PSZSP+T06gG2tnOog2EyYMYMD9T
ES9aT0jZ4JZn3s/jsjmuMBr3J1g8PlcOenolaEqPBZc9hd7CbYFS/KgdHab+oS9i
ugKbzvt4eZHQ642WPOzIgrXrZoV0sG6x+FLZ6d5Q2ljn0mPAC1mGmM1sJCOvNqVX
fJgzin3tnsDoC7skDh5e7bIsU51R7i3bTtlnQwPwtSgx46r9sUvAgZEi29KVDr0d
SbnxDqFGn1vNnvFM2KmikyhjJEZprSLm750bPnt0c1mglQRSR/nxcZXS4vmKtRC1
vatAsbSRBt15e6AD5rMGAZ7BMIPDv89/
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:52 2026 by rpki-client