This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
File:                     tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json)
Hash identifier:          W9GwqhDnjPX9lcV3RzXJhOAcIi5WTLCoIv/ZQ+Py4NQ=
Subject key identifier:   08:18:F6:C4:8E:01:A6:36:48:75:31:84:92:54:52:37:92:B4:26:97
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Certificate issuer:       /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial:       0D00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
Manifest number:          0CDF
Signing time:             Sat 24 Jan 2026 17:53:56 +0000
Manifest this update:     Sat 24 Jan 2026 17:53:56 +0000
Manifest next update:     Sat 31 Jan 2026 17:53:56 +0000
Files and hashes:         1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: GCart+xZ//qFcr/bGVVv7vr6YcoqoojoUwYBLr1LLxY=)
                          2: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: mSkIgywOU9dhooivn2x5OXxcwDybzq+7lQQROc67tvc=)
                          3: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: tEULMfLQG1uBT4oJ7DeARVbztIuEbjp8uzJOUISud6I=)
                          4: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: f8gwOWP+gzIc1sTbccPzYVASHXUhpL4+AZoO9s0gnOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3328 (0xd00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
        Validity
            Not Before: Jan 24 17:53:56 2026 GMT
            Not After : Jan 31 17:53:56 2026 GMT
        Subject: CN=69750734-0ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:81:4e:97:84:55:36:a5:a5:1d:20:27:b7:cc:
                    e4:4c:69:f7:65:11:b2:01:d3:8b:db:25:44:9b:8c:
                    d9:4f:0e:e4:54:ae:f7:85:e6:2e:b7:1f:36:0b:33:
                    48:49:7a:8b:84:e0:e2:51:2a:ef:78:f6:02:a3:6b:
                    10:a4:14:c1:93:bf:e2:8a:9f:be:52:0a:b2:6f:fc:
                    2f:c0:34:bb:72:44:1c:b2:cd:7c:be:c9:00:17:65:
                    75:8e:90:f8:cd:0f:04:af:ae:5c:62:a0:be:4e:0c:
                    ad:97:0f:2a:ce:4e:21:cb:ed:4f:03:35:4d:3f:e5:
                    0b:03:16:77:44:d2:5f:c6:fc:fe:df:f8:cd:9b:57:
                    86:1a:3e:6f:f2:5a:fd:6f:21:8c:6f:f3:f6:f4:f9:
                    fb:7d:11:55:e3:fa:43:c0:0d:d0:5d:43:fa:ed:f2:
                    d2:59:00:24:e8:e7:a2:2c:18:31:70:1d:ea:ab:ef:
                    00:b6:1e:bf:0b:40:fa:23:30:bd:a4:87:8c:41:d2:
                    2c:3b:16:ba:7c:94:57:59:54:d6:63:00:68:b8:cf:
                    00:d3:d1:11:a7:bc:ae:b1:d5:a8:04:6e:6b:24:b6:
                    ed:95:3d:db:19:1c:73:2b:0d:a5:a7:1f:ae:17:76:
                    6b:28:83:54:84:9a:ed:c0:e6:4d:e7:2a:23:90:a0:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:18:F6:C4:8E:01:A6:36:48:75:31:84:92:54:52:37:92:B4:26:97
            X509v3 Authority Key Identifier:
                keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c9:b1:bb:a3:bb:cc:97:ca:a6:ea:02:ac:20:41:33:85:77:
         7f:54:4a:c7:53:9c:01:24:c3:e1:77:1e:4f:a2:d3:57:cc:d7:
         31:28:a7:52:7c:0e:20:01:70:d4:4e:4f:04:e2:24:d3:87:28:
         e2:6d:4e:16:e5:eb:60:b0:a0:66:18:2f:32:b6:d3:39:16:67:
         30:fa:50:07:68:40:0e:ad:de:1f:a7:a6:de:04:ac:c9:34:ac:
         e1:64:dd:79:6d:d0:f7:f9:bd:b9:fd:10:29:c5:99:bf:4d:d6:
         c7:a9:24:c0:1a:3f:55:3a:14:74:af:e4:c7:68:da:1a:19:ac:
         11:66:9d:a5:cb:ba:8b:75:06:94:a9:0a:0a:28:37:8e:4f:29:
         7a:9c:76:6a:3c:6d:a9:62:d4:aa:54:89:84:32:9b:2e:42:ee:
         49:f5:0c:a5:fa:d7:3f:a4:6c:11:7c:8c:25:3b:f5:fb:d6:35:
         99:de:22:e9:cd:de:8e:22:0f:9e:70:d0:7e:b4:e7:33:b0:0c:
         60:0d:da:05:13:c0:ab:8e:d1:10:59:b6:38:c4:61:a6:d8:8a:
         9f:30:96:8e:25:d2:d1:8d:40:2c:30:0e:a7:6f:ee:5c:2e:9e:
         de:7c:da:51:f2:c4:b8:5b:ac:08:8f:ee:0d:6d:22:61:8f:66:
         94:2a:4b:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQTMxMTAvBgNVBAUTKEI0QjEwRTZDQjM4RDUzNjVEMDU0RThEQkU5MEYzNEYy
QzM4OEIxMEMwHhcNMjYwMTI0MTc1MzU2WhcNMjYwMTMxMTc1MzU2WjAYMRYwFAYD
VQQDDA02OTc1MDczNC0wZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2IFOl4RVNqWlHSAnt8zkTGn3ZRGyAdOL2yVEm4zZTw7kVK73heYutx82CzNI
SXqLhODiUSrvePYCo2sQpBTBk7/iip++Ugqyb/wvwDS7ckQcss18vskAF2V1jpD4
zQ8Er65cYqC+Tgytlw8qzk4hy+1PAzVNP+ULAxZ3RNJfxvz+3/jNm1eGGj5v8lr9
byGMb/P29Pn7fRFV4/pDwA3QXUP67fLSWQAk6OeiLBgxcB3qq+8Ath6/C0D6IzC9
pIeMQdIsOxa6fJRXWVTWYwBouM8A09ERp7yusdWoBG5rJLbtlT3bGRxzKw2lpx+u
F3ZrKINUhJrtwOZN5yojkKApjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgY9sSO
AaY2SHUxhJJUUjeStCaXMB8GA1UdIwQYMBaAFLSxDmyzjVNl0FTo2+kPNPLDiLEM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8yMDkxREM4RTA1
MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUyWFFWT2piNlE4MDhzT0lz
UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RMRU9iTE9OVTJYUVZPamI2UTgwOHNPSXNRdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTNBMy8yMDkxREM4RTA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUy
WFFWT2piNlE4MDhzT0lzUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqybG7o7vMl8qm6gKsIEEzhXd/VErHU5wBJMPhdx5PotNXzNcxKKdS
fA4gAXDUTk8E4iTThyjibU4W5etgsKBmGC8yttM5Fmcw+lAHaEAOrd4fp6beBKzJ
NKzhZN15bdD3+b25/RApxZm/TdbHqSTAGj9VOhR0r+THaNoaGawRZp2ly7qLdQaU
qQoKKDeOTyl6nHZqPG2pYtSqVImEMpsuQu5J9Qyl+tc/pGwRfIwlO/X71jWZ3iLp
zd6OIg+ecNB+tOczsAxgDdoFE8CrjtEQWbY4xGGm2IqfMJaOJdLRjUAsMA6nb+5c
Lp7efNpR8sS4W6wIj+4NbSJhj2aUKksL
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:34 2026 by rpki-client