This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
File:                     TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json)
Hash identifier:          Z/4k8nQL7SiUIY+hrquvQCY5fUSSSPcHlEInV6fTLdM=
Subject key identifier:   E2:C6:96:CC:DE:1C:A4:68:02:1D:C1:0D:52:75:D0:7C:3B:09:6F:F8
Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
Certificate issuer:       /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
Manifest number:          0135
Signing time:             Sun 25 Jan 2026 03:44:16 +0000
Manifest this update:     Sun 25 Jan 2026 03:44:16 +0000
Manifest next update:     Sun 01 Feb 2026 03:44:16 +0000
Files and hashes:         1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: OkJxYWTyHtBLFjeiSqcYt6z3m8nXH7RF+XQYCVusPgM=)
                          2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: ktZfaMlA6IUEVI7ymclMb6B8SOgTxjLIP6VRKiXLA/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
                          rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
        Validity
            Not Before: Jan 25 03:44:16 2026 GMT
            Not After : Feb  1 03:44:16 2026 GMT
        Subject: CN=69759190-1723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:5e:9d:99:32:e2:26:a0:63:e4:4a:3b:bb:
                    26:43:4a:4e:43:5a:6d:48:ee:b1:60:13:3b:b4:5b:
                    1a:c5:77:6e:6c:5c:43:b4:82:b7:ce:18:42:9e:44:
                    b1:42:a8:3a:d6:41:b2:e7:b9:bc:ae:2a:92:77:6e:
                    e8:7b:84:44:28:00:9c:50:2a:59:8f:2e:2b:fd:f3:
                    ce:0e:79:9c:58:ec:16:7d:de:a2:8e:91:16:26:02:
                    ec:ed:e9:70:27:5e:31:f1:9d:a1:bb:e5:8b:d8:1c:
                    36:0f:62:e0:13:31:d5:15:50:07:55:28:ed:7b:02:
                    c8:08:e8:cc:e6:1e:50:28:84:c1:7e:26:91:87:e2:
                    59:7e:f5:06:de:b3:8a:8d:c8:71:03:c9:d5:a2:9a:
                    07:c8:23:c1:0c:72:d1:9c:f1:4c:c6:c4:0c:d3:44:
                    ac:cc:59:76:4a:0a:ce:37:ed:d4:ad:dd:84:41:66:
                    16:1e:f1:48:3b:43:f3:b3:60:e1:bb:d6:50:bb:59:
                    b4:f4:58:56:24:dd:55:9f:4c:7f:8a:16:e9:21:21:
                    a9:f1:25:34:22:cb:29:8a:6f:a6:07:14:d7:2b:42:
                    92:53:74:8c:c4:2f:f5:d0:bd:39:93:6f:72:47:74:
                    78:61:e6:61:ce:16:23:0d:4f:ec:69:f6:59:df:18:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C6:96:CC:DE:1C:A4:68:02:1D:C1:0D:52:75:D0:7C:3B:09:6F:F8
            X509v3 Authority Key Identifier:
                keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:19:3a:d0:c9:06:95:dc:ad:61:6d:95:cc:f2:f8:0e:75:1e:
         02:16:bd:28:51:c7:8e:0d:53:7a:ec:ac:bd:9f:b6:91:0e:3c:
         dc:cd:c8:b1:92:4a:1c:23:7c:91:f5:0a:9f:81:07:2b:af:2f:
         1e:4f:c3:5d:bb:a8:c6:fb:ad:28:c5:40:9b:ae:2c:b4:3e:28:
         15:5f:d3:a3:e9:65:ac:95:7b:ca:68:40:29:8e:88:45:da:b1:
         f8:37:46:d5:77:7b:b8:19:0e:d7:71:78:78:5a:5c:fb:a5:eb:
         2f:8d:b4:46:43:a9:05:26:6a:ab:81:ef:6d:79:b2:47:9b:9c:
         89:eb:af:35:1f:20:35:5e:b6:c0:5f:9f:46:9d:32:b1:48:ab:
         a6:45:5e:ad:b0:2d:64:3f:95:8e:cc:a7:fc:b5:2f:b2:65:f1:
         f9:c1:dc:86:fd:d8:8d:56:6b:2c:7b:36:0c:6e:16:1d:40:69:
         9c:ed:c3:8c:b6:2a:0d:52:83:d3:00:03:73:28:1a:a9:55:b5:
         bd:86:3b:dd:6f:c9:c5:27:3a:cb:37:69:06:f4:5c:d4:3e:51:
         86:17:d2:a7:b3:62:58:26:42:b0:23:d0:4f:b3:b2:02:70:66:
         dc:b4:70:97:b1:7f:a1:6c:4f:33:98:f6:37:81:48:c3:5f:0a:
         fc:a8:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:53:55 2026 by rpki-client