This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
File:                     R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft (raw, json)
Hash identifier:          YOCHEmDWWHLLO6ltUrJFQ0//MA4eSOh/J8jwPGjmQcQ=
Subject key identifier:   C6:07:EE:D5:FC:D6:71:F1:1A:1E:5F:35:37:98:88:DF:CA:B9:27:9D
Authority key identifier: 47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35
Certificate issuer:       /CN=A91918AB/serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
Manifest number:          0E
Signing time:             Fri 23 Jan 2026 07:04:47 +0000
Manifest this update:     Fri 23 Jan 2026 07:04:46 +0000
Manifest next update:     Fri 30 Jan 2026 07:04:46 +0000
Files and hashes:         1: R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl (hash: iGKAGsWx/m0t/vonWoGbbeiUtVbPajVLpchq/q1R2Eo=)
                          2: 1CCFF4EAE94411F0858458963C6F56BC.roa (hash: 4RWtVy9GdvEFewhN2uPAMKLzmoonllzY1GWqyqc/rLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl
                          rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91918AB, serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
        Validity
            Not Before: Jan 23 07:04:46 2026 GMT
            Not After : Jan 30 07:04:46 2026 GMT
        Subject: CN=69731d8f-7f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:73:a7:22:cc:de:17:cc:53:64:ea:53:82:
                    df:b0:48:b0:90:c5:bb:50:0b:ab:ba:2e:0b:54:18:
                    88:3d:0c:d8:03:99:ad:b8:af:33:68:aa:cf:a9:c7:
                    1f:ed:ec:ca:46:6f:2a:b1:4a:8b:69:e3:d5:4e:b9:
                    e1:97:de:5f:fd:2f:b2:e9:7e:6d:18:f1:26:32:f4:
                    45:03:33:20:38:3b:01:67:c4:fc:8f:f6:c7:0c:44:
                    a1:d8:32:81:1c:4a:2f:d7:08:a8:cc:17:1a:d6:5f:
                    af:0c:30:e6:ab:ca:07:a3:51:29:66:c8:ba:89:35:
                    76:d0:85:2b:26:9f:39:49:9b:ff:40:d4:6c:9b:f5:
                    cd:4b:18:36:6a:c6:ec:c4:16:46:61:d7:42:c4:08:
                    23:30:b8:f4:b9:6f:3f:f9:cd:c9:b0:51:81:2f:fe:
                    5e:7e:fb:65:7b:6b:b1:72:a9:33:ec:4a:a2:f4:34:
                    df:d3:e0:c4:b8:73:9b:8f:39:39:cb:a2:70:ae:18:
                    ad:39:f0:f0:12:53:9a:e5:26:ec:27:45:bc:45:3e:
                    cd:50:97:1a:05:93:5d:32:ba:22:45:17:df:78:f7:
                    38:1a:89:32:0c:b6:21:a2:ed:97:83:a2:ae:31:ed:
                    4e:89:84:b8:8b:57:b6:c3:11:f6:1d:72:ad:ed:99:
                    06:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:07:EE:D5:FC:D6:71:F1:1A:1E:5F:35:37:98:88:DF:CA:B9:27:9D
            X509v3 Authority Key Identifier:
                keyid:47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:59:6e:4d:40:91:74:2b:a0:d9:d3:80:27:5b:ae:92:1a:38:
         3a:2e:6a:b4:2e:e8:42:95:41:61:b2:08:05:c1:12:03:7a:ce:
         89:85:c5:53:1a:75:48:6d:c9:12:1e:96:37:8a:30:71:41:3a:
         66:d6:18:ef:25:a2:59:d5:7b:da:6f:e1:66:15:39:95:14:68:
         62:7b:80:68:87:ef:5a:11:38:57:67:01:90:30:e5:33:27:c1:
         01:04:5e:68:d0:3f:fa:10:69:67:32:cc:cf:72:6e:b0:c4:82:
         ba:d1:ff:f2:95:4e:78:e8:cf:a5:87:a3:59:e1:89:fb:48:41:
         db:99:ab:ad:5e:9f:bb:80:c6:d5:22:1c:69:4e:35:13:c9:89:
         26:81:52:9c:7d:f7:c0:32:85:97:51:d5:8b:df:af:b5:5d:66:
         85:da:e1:03:ac:6e:ee:e6:ca:39:d6:2f:75:08:a1:14:6a:0f:
         0e:b9:52:24:cf:dc:e2:fa:5b:df:f5:2f:90:e7:9e:88:1d:1a:
         db:55:93:6b:76:ed:11:98:56:aa:8f:9e:fe:72:68:5e:19:5a:
         c1:38:bf:29:68:7d:f9:70:a6:55:87:0c:ad:57:8e:c1:9d:bc:
         13:9d:7a:e3:2d:fb:a6:11:b7:05:10:cf:0f:f1:20:7d:83:d6:
         91:43:13:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:26:23 2026 by rpki-client