This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
File:                     TeFRsMiiGEElxljjJzHNoaojRwA.mft (raw, json)
Hash identifier:          ypqdj/FKI3drVsYe20zBWpVhf9EnIyU0lNqBR7d8Q2Q=
Subject key identifier:   0A:3F:10:C6:0A:46:41:EE:86:70:8D:FE:CF:1C:F1:F6:68:DA:A5:3E
Authority key identifier: 4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
Certificate issuer:       /CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Certificate serial:       043C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
Manifest number:          042C
Signing time:             Sat 24 Jan 2026 23:31:35 +0000
Manifest this update:     Sat 24 Jan 2026 23:31:35 +0000
Manifest next update:     Sat 31 Jan 2026 23:31:35 +0000
Files and hashes:         1: TeFRsMiiGEElxljjJzHNoaojRwA.crl (hash: qrUs6NBDRDuOYP76kxC0Wk6C4SSmZ5QJ0UeUHA6yg7c=)
                          2: E7AA9622DAFF11ECA67DA10BC4F9AE02.roa (hash: 23pzBzVb/LUnDvjs9zEX9C14poyur9Xh61CsW7xpwuw=)
                          3: 50A8AF54A1C311EC960A4D2BC4F9AE02.roa (hash: 2KtkkHGjYM6B4NJArJW7J81dwWOAgC3BbrS1q16b7zA=)
                          4: 4FED5C22A1C311EC960A4D2BC4F9AE02.roa (hash: o/h9t6dto3RR9iUYCBWuwk5m/sVDjVA7sDNry2jRXMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9FF, serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
        Validity
            Not Before: Jan 24 23:31:35 2026 GMT
            Not After : Jan 31 23:31:35 2026 GMT
        Subject: CN=69755657-cd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:c5:55:f0:eb:39:18:8f:22:4c:e7:81:1d:
                    1f:76:a7:eb:bf:1a:3a:c8:f8:2f:f8:f2:75:d5:6c:
                    2e:8c:2f:8c:bb:32:24:d0:f2:31:04:09:69:9f:31:
                    94:20:be:3d:3e:8c:76:71:e5:5e:a1:64:6b:0d:94:
                    75:a8:49:8d:9a:e3:76:4f:d2:8f:cc:11:73:9c:7c:
                    32:d5:ca:f3:51:21:28:51:71:46:a9:46:9a:df:84:
                    81:63:d3:3b:9a:b9:eb:23:fe:55:84:09:60:29:96:
                    9a:c2:fd:9b:0a:56:3d:71:a5:4e:9e:48:18:80:0c:
                    9c:70:f9:9e:34:cb:2c:2f:b9:5c:14:e5:c1:f1:9b:
                    e6:78:b7:4e:b0:aa:7a:18:03:89:6e:b1:92:aa:46:
                    1f:7b:40:00:92:18:b9:84:53:15:7c:c4:fe:43:4e:
                    27:30:d7:9f:ee:56:24:63:7d:1c:5a:5c:29:25:a5:
                    8f:4b:b0:cc:5e:11:2b:de:86:d8:fa:d4:f3:8e:68:
                    c6:9f:1f:f9:af:5e:fe:10:19:07:22:77:ce:02:12:
                    eb:aa:4d:1e:24:ab:12:41:cc:bc:fd:c1:25:fd:af:
                    1c:57:70:13:7d:0b:b8:a0:39:1f:a5:b2:71:44:99:
                    85:36:d7:27:2b:f0:78:26:b4:7e:d0:b6:63:ab:90:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3F:10:C6:0A:46:41:EE:86:70:8D:FE:CF:1C:F1:F6:68:DA:A5:3E
            X509v3 Authority Key Identifier:
                keyid:4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ac:00:9b:81:9d:86:34:e3:72:a7:44:d8:88:2c:5f:6a:c2:
         f6:c6:cb:51:be:1c:e2:3b:98:be:56:f9:e5:cd:cd:a4:47:3f:
         e2:ee:b4:28:c4:97:58:a1:a3:b0:6a:b5:95:c6:7f:98:d4:08:
         7a:38:72:8d:44:44:72:6a:74:12:74:87:96:d8:57:8d:5e:fb:
         56:94:91:c4:df:60:5e:87:d1:cd:26:ab:d6:93:7a:86:e3:66:
         9a:dc:78:82:7d:70:e2:cc:9c:c7:8d:bf:f2:a8:53:a2:40:0e:
         2b:35:93:f4:e9:c3:04:08:da:12:dd:77:a3:78:11:bb:0e:ee:
         45:b9:72:1c:f1:8a:72:70:69:34:aa:7d:e5:02:24:85:ed:e9:
         95:db:cb:c3:1a:a3:d9:fd:9d:c9:27:22:d2:17:cb:19:87:ea:
         99:4e:57:89:95:a4:48:8c:87:80:12:ef:07:ba:73:68:46:ae:
         ef:dd:c5:3c:f0:62:b4:b2:f5:23:7c:3f:7a:3b:06:de:4f:2a:
         aa:16:90:11:82:47:d7:ab:7f:8e:45:3c:e3:d8:03:0b:4d:3a:
         3c:2f:02:9d:60:5e:09:55:bc:2c:b7:a2:0e:e4:66:7d:cc:1c:
         2b:5b:16:3f:dd:36:a5:4c:59:d6:b1:5b:c9:92:06:24:99:18:
         6f:14:d4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:01:26 2026 by rpki-client