This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
File:                     T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json)
Hash identifier:          OqNUptlW0MKnKUkskM32bX8A/HYBJRa1LCsdAVVdBR4=
Subject key identifier:   E1:98:09:AA:23:A8:BE:22:E6:C0:8D:E3:9C:EF:93:91:BA:68:73:18
Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0
Certificate issuer:       /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
Manifest number:          0140
Signing time:             Sun 25 Jan 2026 03:41:31 +0000
Manifest this update:     Sun 25 Jan 2026 03:41:30 +0000
Manifest next update:     Sun 01 Feb 2026 03:41:30 +0000
Files and hashes:         1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: ax4GNiM+m9cSbxGMzAziZCZQ5awpWvmmiXg40e9x8C4=)
                          2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: zGfm7uWkmrKCifSvIZ/uCpwyMpXY0pJ7FDB5PjCQIxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
        Validity
            Not Before: Jan 25 03:41:30 2026 GMT
            Not After : Feb  1 03:41:30 2026 GMT
        Subject: CN=697590eb-5d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:d3:bc:9e:51:1a:9e:4b:26:da:c1:d4:d8:
                    7d:5f:df:02:b4:a3:7e:a4:81:cb:d4:7a:04:0e:3e:
                    5d:63:47:3e:46:73:d3:56:9f:3c:2a:28:62:8f:0e:
                    22:24:da:bb:b0:27:20:6f:3a:99:d0:82:ec:43:81:
                    c0:af:d0:e8:45:3f:2e:b0:cd:3d:a3:da:33:8a:5d:
                    6c:40:6a:17:c1:7b:9a:87:d5:ef:e4:77:fe:75:e4:
                    60:58:9c:3f:97:a2:41:d7:90:20:f9:1b:69:5e:d5:
                    f5:78:f5:c7:11:c3:cf:b0:8b:86:65:38:1b:3f:37:
                    24:6e:b2:a4:79:69:28:6c:55:f6:ec:21:a5:a2:7d:
                    84:c0:a1:c6:14:07:53:42:5f:b2:3a:6c:a7:bc:9d:
                    cb:b1:02:d8:3d:fb:fa:3d:50:71:50:cb:e3:67:e7:
                    57:c3:01:0c:3f:dc:10:f1:65:6a:d7:ac:6a:f7:81:
                    fa:87:b1:bb:82:6f:2c:24:56:10:97:0d:4f:ad:76:
                    7d:cc:21:c0:7f:e6:b3:fa:87:df:99:a5:28:48:86:
                    48:5f:99:31:61:65:3f:48:49:27:90:36:f9:58:28:
                    fd:b6:c1:0e:99:e4:4e:ab:f6:38:b5:60:93:09:3a:
                    30:e8:0e:5a:e3:36:b3:71:ad:d6:f7:72:c4:da:9b:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:98:09:AA:23:A8:BE:22:E6:C0:8D:E3:9C:EF:93:91:BA:68:73:18
            X509v3 Authority Key Identifier:
                keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ce:83:88:45:25:47:7d:14:ea:73:e4:f0:58:23:88:fc:1e:
         15:d1:2a:43:51:7d:db:4b:8a:61:a7:2e:08:6d:3f:0f:22:f9:
         bd:1a:3a:e3:04:25:39:da:a2:d5:79:88:37:49:70:3f:a0:8c:
         9c:33:9e:fc:59:26:84:14:6d:9e:6f:44:a7:49:24:d0:54:33:
         63:4f:3e:db:7d:37:1e:1f:1e:15:a0:6c:2b:54:5b:5f:c8:96:
         56:24:cc:78:eb:92:00:f9:16:81:88:24:86:b3:30:65:40:b5:
         42:b3:a6:f2:89:78:43:d2:59:32:62:3c:e1:da:10:fd:42:7c:
         90:1c:7a:c7:29:66:8f:f7:26:d7:08:43:37:ac:55:42:60:0c:
         67:9b:f7:d4:3c:28:ad:02:43:29:e7:55:7b:76:bd:d8:2b:e1:
         09:46:d7:26:93:28:53:24:a6:40:7a:7f:3f:11:e2:76:b0:1f:
         19:18:97:1b:e9:8c:9e:29:50:28:52:63:02:c2:1a:7a:b7:f1:
         a1:f7:60:c8:17:4b:40:88:3e:3a:58:91:de:89:7f:49:bc:8e:
         db:8b:b2:41:d3:9e:5a:40:2c:48:69:4c:8f:54:fa:44:59:0f:
         f5:8e:0d:bd:63:22:45:14:b0:37:8c:4b:67:06:16:f4:20:f0:
         51:dd:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:28 2026 by rpki-client