This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
File:                     tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json)
Hash identifier:          ZILDD59RJshBs6A++zHJUutczuz8AHv3oJbPJgL3gfU=
Subject key identifier:   A9:95:87:A9:1B:1A:1B:89:1F:DC:0E:AD:E2:37:C0:60:24:60:A5:E0
Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
Certificate issuer:       /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Certificate serial:       0515
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
Manifest number:          0507
Signing time:             Sat 24 Jan 2026 22:53:11 +0000
Manifest this update:     Sat 24 Jan 2026 22:53:10 +0000
Manifest next update:     Sat 31 Jan 2026 22:53:10 +0000
Files and hashes:         1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: jSEkzki2l9f5Vctw5hSuD8ktshDrQOjefsJFMhNFkW0=)
                          2: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: sNtdGhFP5+8wGIN0odNsPXpZSkmhBenTgX2lN0L4D9w=)
                          3: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: JhgDE5ETFIhEXBruI39DaKib1cXEXGZCzHT5TsRcHiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
                          rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
        Validity
            Not Before: Jan 24 22:53:10 2026 GMT
            Not After : Jan 31 22:53:10 2026 GMT
        Subject: CN=69754d57-5928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:fb:a1:6e:71:b9:3a:ac:91:2a:a9:8a:41:
                    26:31:40:86:81:cf:75:77:26:42:3e:74:aa:0f:a2:
                    41:7c:68:80:b2:9f:43:eb:ed:4b:94:09:63:9e:cc:
                    c1:05:28:48:9e:e9:9d:bf:69:3e:f8:b8:a2:96:34:
                    de:00:88:76:f0:8b:0d:92:2a:f9:f6:14:a7:d4:8a:
                    b5:b1:d8:92:03:02:02:75:74:82:86:be:56:49:02:
                    3a:8f:81:29:ed:9a:76:8c:64:9b:0f:3e:7e:83:d3:
                    6e:dd:50:f6:c3:93:72:cc:d3:db:f1:e5:41:61:d6:
                    67:e8:25:36:60:28:a6:46:7c:33:c0:5f:cd:35:37:
                    2d:f3:80:16:78:26:8e:be:14:fe:3a:85:86:3d:c4:
                    68:76:f1:ce:11:f6:ed:df:f7:e0:45:9c:5a:85:b9:
                    05:31:e2:70:a6:f0:9b:cf:c6:b4:44:99:81:45:02:
                    de:4d:a2:61:e3:df:af:a3:9a:83:e9:b7:72:6a:8c:
                    5f:ff:60:3a:ab:7a:84:cb:8e:78:02:66:ac:4f:f3:
                    da:38:b6:47:b5:06:38:6a:4f:e5:58:1d:87:75:ea:
                    fe:f4:10:fc:95:32:41:dc:4a:e8:ab:48:e7:ab:99:
                    00:a3:09:7e:a7:18:a0:dd:7b:90:d8:ab:5f:e2:af:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:95:87:A9:1B:1A:1B:89:1F:DC:0E:AD:E2:37:C0:60:24:60:A5:E0
            X509v3 Authority Key Identifier:
                keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:18:17:4c:e3:72:d2:a7:13:e2:a4:c8:ee:9c:d1:0e:44:1c:
         87:4b:eb:8a:dd:97:d5:fe:fd:2c:05:e7:7e:2d:7f:a3:94:c6:
         42:b2:36:9d:d5:a2:db:08:7b:f0:31:77:69:78:f0:0d:b2:2e:
         b6:d8:9c:93:24:27:db:91:fa:45:58:90:d4:80:c3:da:04:9e:
         0e:b8:8d:f7:86:59:36:47:ad:63:fa:98:4d:d2:b8:27:77:fc:
         92:94:b2:bf:34:b8:ab:d0:48:67:32:ef:b1:57:9e:0d:9c:f4:
         0c:a8:6e:ae:8f:1e:d1:d5:f0:da:84:b4:62:0c:7f:34:c8:eb:
         f0:bd:8b:0c:30:14:31:1d:cd:1e:c8:0c:b5:c3:77:ed:73:61:
         46:87:50:24:ba:e6:f4:50:16:44:05:11:64:bd:ec:f2:9b:a0:
         4b:a7:21:9d:a8:93:50:d2:e2:4a:da:ac:67:89:67:ee:7e:25:
         06:e5:f4:cb:d1:95:2d:29:b8:a3:30:83:b5:ed:02:71:dc:16:
         02:8b:3f:36:03:93:88:e0:02:f1:81:a9:c7:22:dd:31:14:7b:
         c2:63:a0:31:a7:4f:f5:76:9f:73:24:f4:40:44:b3:4e:86:73:
         f6:8f:6e:ba:78:b4:2d:3a:01:b8:f9:ca:56:f4:81:77:f9:ab:
         90:12:9b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:54:27 2026 by rpki-client