This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
File:                     DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json)
Hash identifier:          XgH2K4FBWGoq0SyFfu4inK7yoGEwz81OqdiJzJ4a5R4=
Subject key identifier:   E2:27:36:B6:98:E5:04:44:49:E4:7C:10:7E:04:13:32:72:92:14:11
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Certificate issuer:       /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial:       080C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
Manifest number:          0804
Signing time:             Sat 24 Jan 2026 20:26:57 +0000
Manifest this update:     Sat 24 Jan 2026 20:26:56 +0000
Manifest next update:     Sat 31 Jan 2026 20:26:56 +0000
Files and hashes:         1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: PYr8K4xs7ru74PixQKRZPsCORJVnrbjZaiBHvPN01eo=)
                          2: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: Qd9yXxs36oF+1VHeMpSuefMICH6l6WaUGPlOLsEYxaI=)
                          3: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: 8JiU8Oos87rOfxfxW5raSyPKQ8t3Ze/tzK20sDot2kI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2060 (0x80c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
        Validity
            Not Before: Jan 24 20:26:56 2026 GMT
            Not After : Jan 31 20:26:56 2026 GMT
        Subject: CN=69752b10-63d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:0c:fa:a4:31:a5:84:0c:5a:09:e9:5d:7f:
                    92:8d:e2:64:2a:90:08:88:57:dc:fb:a4:44:e0:f3:
                    4e:df:83:89:3c:f7:73:7c:e4:55:ee:2f:d0:88:e2:
                    06:ca:69:8b:58:42:b3:7f:1d:45:81:98:3c:38:0c:
                    0a:23:79:38:78:dd:6e:e1:f0:c0:0e:f6:77:27:6c:
                    d5:bb:94:f2:18:2b:fd:24:47:5b:19:2b:ad:36:07:
                    11:b6:60:f1:d6:25:00:02:e1:ae:bd:88:bb:d9:f9:
                    07:ce:a9:a5:e3:53:7d:f5:28:aa:77:8b:b0:0b:27:
                    d2:b4:d1:3e:bf:8b:18:e7:1a:32:02:8a:7a:cd:67:
                    da:0a:9d:c9:d9:7b:13:db:be:6b:70:4c:09:3b:64:
                    d1:6a:d2:61:5c:bb:e3:3e:44:33:f0:74:bb:b0:d2:
                    cc:fd:7d:3b:91:f4:53:4c:6e:87:85:3b:17:6d:11:
                    7e:d0:22:24:7b:fc:4f:ca:04:e2:0c:fb:d8:1d:4f:
                    ab:bc:0d:9e:6f:33:59:6a:14:ff:35:d2:83:0b:77:
                    e8:a2:e4:04:bb:62:08:c9:a6:fa:45:ff:17:4f:b0:
                    25:25:51:c0:60:e7:00:79:97:b6:a1:e1:8e:79:b5:
                    d4:bf:ba:ac:51:60:d7:8e:b9:69:fb:61:45:36:24:
                    5f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:27:36:B6:98:E5:04:44:49:E4:7C:10:7E:04:13:32:72:92:14:11
            X509v3 Authority Key Identifier:
                keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:09:64:20:95:1d:83:2c:da:ea:59:e5:f9:9e:94:be:c5:23:
         70:35:80:c6:d0:2d:35:74:cc:13:11:bc:0d:62:07:ea:d2:7d:
         16:4c:5b:02:a4:c8:57:c0:db:9b:2e:da:48:ac:10:87:33:28:
         77:48:a2:c3:4b:58:5f:fa:7d:11:7c:a1:7c:9c:2c:cc:d9:8e:
         fd:6e:f3:37:07:a4:2b:75:be:ea:0f:f8:ab:14:c6:c9:af:28:
         d0:7a:8f:8e:21:86:57:bc:4c:63:f1:ab:df:69:15:56:ae:ce:
         c6:15:11:4d:2d:28:a6:f9:3a:de:d1:2a:40:03:b2:ab:30:aa:
         5c:e7:e4:22:71:84:95:70:a1:46:5a:a1:02:51:54:20:ad:cf:
         58:d1:a7:db:d6:df:85:a2:9e:2b:5c:bb:10:0c:37:f6:a4:96:
         6b:f2:39:33:53:64:19:ae:52:e4:9f:3e:1c:b0:5c:5f:17:6a:
         dc:8d:39:69:34:83:04:3a:a5:7a:1f:ff:57:9b:a8:58:c4:29:
         41:87:a5:c0:cc:55:5d:65:72:79:ad:96:0c:b1:6d:f0:1a:b5:
         ec:ed:68:3e:51:e2:0a:9b:aa:34:2f:9a:7d:80:31:16:c8:ac:
         f1:56:f1:e1:07:63:7c:21:2b:19:0f:85:6f:4e:11:56:74:a3:
         e9:3f:01:38
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1
QUE0NjA5OUYwHhcNMjYwMTI0MjAyNjU2WhcNMjYwMTMxMjAyNjU2WjAYMRYwFAYD
VQQDDA02OTc1MmIxMC02M2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskwM+qQxpYQMWgnpXX+SjeJkKpAIiFfc+6RE4PNO34OJPPdzfORV7i/QiOIG
ymmLWEKzfx1FgZg8OAwKI3k4eN1u4fDADvZ3J2zVu5TyGCv9JEdbGSutNgcRtmDx
1iUAAuGuvYi72fkHzqml41N99Siqd4uwCyfStNE+v4sY5xoyAop6zWfaCp3J2XsT
275rcEwJO2TRatJhXLvjPkQz8HS7sNLM/X07kfRTTG6HhTsXbRF+0CIke/xPygTi
DPvYHU+rvA2ebzNZahT/NdKDC3foouQEu2IIyab6Rf8XT7AlJVHAYOcAeZe2oeGO
ebXUv7qsUWDXjrlp+2FFNiRfjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOInNraY
5QRESeR8EH4EEzJykhQRMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF
QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ
Vy10X25MR3dmREZhcEdDWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCCWQglR2DLNrqWeX5npS+xSNwNYDG0C01dMwTEbwNYgfq0n0WTFsC
pMhXwNubLtpIrBCHMyh3SKLDS1hf+n0RfKF8nCzM2Y79bvM3B6Qrdb7qD/irFMbJ
ryjQeo+OIYZXvExj8avfaRVWrs7GFRFNLSim+Tre0SpAA7KrMKpc5+QicYSVcKFG
WqECUVQgrc9Y0afb1t+Fop4rXLsQDDf2pJZr8jkzU2QZrlLknz4csFxfF2rcjTlp
NIMEOqV6H/9Xm6hYxClBh6XAzFVdZXJ5rZYMsW3wGrXs7Wg+UeIKm6o0L5p9gDEW
yKzxVvHhB2N8ISsZD4VvThFWdKPpPwE4
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:13 2026 by rpki-client