This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
File:                     TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json)
Hash identifier:          xIXRESdVglq7E2KtUV6845z7iYYKCGsdEK2UMn8eaOg=
Subject key identifier:   82:3C:7F:A3:7C:E0:2E:52:7E:1C:B5:92:35:29:D2:E1:2D:01:ED:0F
Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
Certificate issuer:       /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
Manifest number:          0113
Signing time:             Fri 23 Jan 2026 04:08:50 +0000
Manifest this update:     Fri 23 Jan 2026 04:08:50 +0000
Manifest next update:     Fri 30 Jan 2026 04:08:50 +0000
Files and hashes:         1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: NRN8HyzrDB3BQkngyw3/dsjFjJWxN7Un6Y5frazrfWM=)
                          2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=)
                          3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
        Validity
            Not Before: Jan 23 04:08:50 2026 GMT
            Not After : Jan 30 04:08:50 2026 GMT
        Subject: CN=6972f452-fd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:f6:7e:89:ac:e5:be:7b:37:cf:57:99:d6:
                    6b:d7:4c:dc:25:da:03:14:f6:5a:09:6b:f8:9e:dc:
                    2b:fc:de:80:91:97:be:ba:89:ce:1c:06:41:54:e9:
                    29:e9:63:a5:d7:94:4a:ed:4e:76:b2:42:7d:ff:87:
                    56:07:d0:16:a3:a5:af:51:19:1a:e7:6f:4b:1f:d5:
                    4d:45:1d:85:e1:b7:fb:75:62:8f:8f:e6:4c:2d:92:
                    4e:e8:b3:05:28:79:88:15:f7:03:85:50:02:21:82:
                    5f:0f:f0:43:87:60:13:b3:39:b4:9e:23:3a:27:40:
                    d3:2c:ed:de:fe:ab:9c:8f:ed:d4:88:17:18:73:c7:
                    27:39:80:7c:18:61:f8:a2:6f:7c:9b:24:38:58:21:
                    af:e3:24:68:f0:4c:dd:00:5d:43:b0:67:57:81:cb:
                    a7:03:3b:9e:a1:e2:d5:aa:92:f2:3b:22:f1:ee:86:
                    a8:a7:1b:23:cc:9b:fe:a9:c5:d1:36:a7:33:4b:78:
                    0e:0d:ce:0b:33:60:80:cd:98:ba:fd:37:b8:9e:4b:
                    c1:9c:d4:4d:0b:da:0e:8c:b9:d9:72:26:9c:ce:e3:
                    2d:aa:ca:52:89:ec:bd:b8:50:cc:78:bf:ed:e1:74:
                    28:f7:d9:c6:db:10:e3:5f:5e:24:35:00:6b:fc:51:
                    a2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3C:7F:A3:7C:E0:2E:52:7E:1C:B5:92:35:29:D2:E1:2D:01:ED:0F
            X509v3 Authority Key Identifier:
                keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:3c:5f:c0:67:a8:b8:5c:7d:bb:d8:64:97:e5:8e:5c:62:1c:
         e3:41:ae:dc:7d:87:3b:a3:1c:87:54:9b:1d:98:b8:5e:2e:bd:
         3c:94:ae:05:75:97:7d:ac:de:b4:98:1b:87:37:57:91:bc:35:
         1f:4c:7c:93:22:37:e6:20:21:cb:cf:47:44:92:fe:9a:06:c3:
         98:90:ba:92:f0:30:2d:1c:6f:4e:bb:fa:61:99:6e:b6:f1:08:
         f9:07:32:ce:3d:35:de:9f:4a:a5:04:6e:75:82:8a:cd:ba:3e:
         aa:03:f0:90:b0:9c:cf:2e:9f:91:92:c4:ec:20:4f:65:bf:bf:
         fe:61:fc:56:2a:6a:81:54:ef:58:ba:d8:03:d5:fc:da:e9:0e:
         43:fa:ae:6f:89:27:42:4d:f7:f5:5a:dc:11:03:e7:25:3d:b1:
         a3:45:ed:9b:23:37:4c:55:89:38:0d:d8:c5:ab:b8:b9:15:0f:
         69:8b:6f:73:34:b7:fa:83:ff:c7:17:c2:13:73:00:d4:29:cd:
         78:8b:6e:a9:2b:3d:c1:ec:2b:87:49:75:b1:97:aa:e7:b2:25:
         57:ec:fd:ad:f8:83:e3:17:47:59:2d:c3:a5:47:c1:04:42:97:
         a1:48:7d:14:af:dd:8f:07:45:7c:16:af:70:a1:71:9d:a4:7c:
         66:e5:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:28:27 2026 by rpki-client