This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
File:                     TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json)
Hash identifier:          N4CegDvnZ53cqmNFxAyHno5OlyzPmpYm9XDJoz02nHQ=
Subject key identifier:   A5:D4:22:1F:E4:B3:0A:51:78:6D:16:E3:DB:98:70:52:F9:54:81:D8
Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0
Certificate issuer:       /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0
Certificate serial:       0C57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
Manifest number:          0C4F
Signing time:             Sat 24 Jan 2026 18:14:22 +0000
Manifest this update:     Sat 24 Jan 2026 18:14:21 +0000
Manifest next update:     Sat 31 Jan 2026 18:14:21 +0000
Files and hashes:         1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: oN6MHS0q0scgYCLS12OdcS0Pg20lzoUNofk5n2UDYYw=)
                          2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: f1JBMXwhgLEGR7y1aseWRV9Lg67FGaQUbIKMo5YTRls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl
                          rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3159 (0xc57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5533, serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0
        Validity
            Not Before: Jan 24 18:14:21 2026 GMT
            Not After : Jan 31 18:14:21 2026 GMT
        Subject: CN=69750bfe-0791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:18:7e:56:d8:ca:68:3d:1d:85:ce:11:8b:
                    da:11:e8:22:e4:bc:43:d4:be:21:92:bb:19:4f:0b:
                    b4:0e:89:bd:5b:0c:14:29:5f:81:94:ba:28:38:58:
                    3a:af:f6:0a:a8:e5:93:33:61:51:f3:dc:d0:81:65:
                    76:36:f0:4b:a2:00:38:aa:59:7b:e8:04:39:d8:e1:
                    aa:50:ba:17:72:db:59:62:33:56:74:4d:31:f9:c9:
                    6e:a2:0e:f7:0a:7b:42:ed:ce:1d:df:a2:05:71:75:
                    88:f0:98:51:c2:15:b3:e4:1e:84:a1:57:3f:b1:6b:
                    7b:2a:60:ef:8d:6e:b1:6b:71:b6:90:72:32:9c:45:
                    e5:70:1d:b9:88:54:5b:4c:76:06:52:2d:d2:f3:46:
                    0f:3c:d6:5e:90:3d:42:e2:fd:79:9e:59:d4:60:e3:
                    06:f1:72:88:9f:cf:ca:1b:24:95:76:a0:5b:e9:0f:
                    ea:13:29:de:7e:4f:f1:4f:4d:2f:e4:81:b0:1d:cd:
                    09:be:a2:ca:a2:fa:fb:37:43:04:75:0c:5c:27:33:
                    6e:24:ae:7a:96:61:e4:74:23:33:06:da:64:f1:7f:
                    03:a9:c4:ea:ab:02:50:6b:7f:30:1b:b6:26:eb:a0:
                    8a:b6:3b:58:3e:ea:85:72:80:78:a0:18:96:52:e4:
                    43:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:22:1F:E4:B3:0A:51:78:6D:16:E3:DB:98:70:52:F9:54:81:D8
            X509v3 Authority Key Identifier:
                keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:cd:c0:97:10:0c:29:63:62:f9:40:ee:a3:c9:ca:5c:18:6a:
         25:22:db:04:64:f3:a6:63:f3:30:7f:bc:45:bf:7f:8d:a1:24:
         43:1f:87:49:5e:a5:fc:83:3b:9b:07:38:5c:7a:d6:7a:1d:f4:
         de:80:60:cb:44:73:02:26:43:6a:55:ca:2f:cb:6d:07:cb:0d:
         ef:f7:32:1b:70:f3:49:81:51:e1:e4:c6:f3:66:ee:61:39:d2:
         05:8e:46:56:41:0b:c0:bb:bb:ce:5f:73:11:dd:60:0d:60:93:
         da:93:03:16:3a:66:c5:74:4f:45:1b:3d:ff:93:df:16:e2:2c:
         cd:42:96:9b:3c:84:9e:5b:3c:ad:74:f2:cf:9c:f2:62:92:c8:
         d1:2d:73:0f:37:40:07:d1:87:90:91:90:0e:0e:52:41:b2:e5:
         df:82:4c:2b:cf:ab:72:56:df:1c:4a:a0:5c:9a:59:dc:1c:6b:
         58:a6:94:af:70:9c:03:52:ce:23:95:54:33:fe:01:7f:4b:ee:
         63:a8:56:43:c6:04:a5:78:ff:42:22:0d:d7:02:5c:ea:c7:5d:
         3b:77:d5:5b:8f:e6:e1:5d:31:59:6f:72:15:87:d4:b9:d1:b6:
         eb:1b:d2:df:a8:16:44:27:ad:08:01:cf:cb:a9:f6:3e:f9:82:
         02:5e:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:45 2026 by rpki-client