This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
File:                     TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json)
Hash identifier:          ZfbQwu8cNsuElPFd1CIxyI3LWsRImDPzWE/ZDEskVlQ=
Subject key identifier:   F6:B8:0A:99:2D:BB:4B:54:0E:83:AE:C7:22:92:50:B6:61:03:32:8E
Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65
Certificate issuer:       /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
Certificate serial:       01C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
Manifest number:          01BD
Signing time:             Sun 25 Jan 2026 02:20:40 +0000
Manifest this update:     Sun 25 Jan 2026 02:20:39 +0000
Manifest next update:     Sun 01 Feb 2026 02:20:39 +0000
Files and hashes:         1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: j1o/HtkR1sQnnyktQ/etesFo7Eia86roJZrkbVAn64s=)
                          2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: qatvyS4SyJTNURVM2FsClClDPfP+4FEBMIeJZ8wIqMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl
                          rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
        Validity
            Not Before: Jan 25 02:20:39 2026 GMT
            Not After : Feb  1 02:20:39 2026 GMT
        Subject: CN=69757df8-254a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:05:65:30:38:71:96:08:3c:5c:2d:9b:e7:
                    42:06:84:af:d3:b4:04:7b:61:83:ee:89:8f:be:28:
                    f9:d2:c7:af:17:aa:c7:00:f6:73:4f:08:dc:78:74:
                    ee:50:29:8b:11:a0:dd:f4:8c:a2:4b:bf:8d:c7:da:
                    cb:a6:b4:8c:2f:b8:64:3d:53:1f:cb:b5:90:8c:06:
                    49:ec:ec:6d:69:5a:68:65:11:76:c6:ed:ae:28:a8:
                    e6:b1:2f:7c:5b:21:0e:65:8e:27:4d:42:3a:44:aa:
                    3a:1f:d8:79:51:b6:29:54:94:a3:1a:8c:a3:36:26:
                    d4:a8:ca:24:1b:45:28:ed:15:4e:96:57:f8:fa:30:
                    b5:39:88:46:4f:47:c0:8a:8a:9a:b9:98:b5:5a:01:
                    72:93:20:13:db:d2:13:e5:e6:b5:5e:0e:44:b1:bd:
                    fc:da:52:af:8a:42:e4:48:36:cd:1e:c8:52:d2:9d:
                    cc:f9:8f:ef:51:ff:61:6f:0a:bc:2a:50:cc:bf:15:
                    aa:75:71:03:b4:d1:6c:e9:f7:59:7e:91:3b:cd:68:
                    e6:97:68:f3:0d:ba:d6:ca:23:23:02:60:14:69:5a:
                    78:73:06:6e:9e:ae:65:e2:ef:c8:10:3f:6e:e5:9f:
                    af:51:25:30:31:65:63:dd:48:40:dc:c1:84:06:23:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B8:0A:99:2D:BB:4B:54:0E:83:AE:C7:22:92:50:B6:61:03:32:8E
            X509v3 Authority Key Identifier:
                keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:57:e6:0b:f0:59:d3:22:10:5a:70:66:29:ab:bd:e6:db:30:
         b7:9f:00:35:94:32:d6:13:4c:1c:43:a0:29:9e:4b:ad:b4:79:
         d5:78:07:7f:0b:0d:f2:fe:21:3c:53:bb:81:6b:38:6d:87:e3:
         7c:bc:3e:bc:6d:e0:76:82:2e:62:8c:75:6a:97:e4:7f:97:ef:
         e9:25:0e:da:c5:1b:05:59:2a:f4:7b:4e:6d:45:2e:72:48:34:
         96:8c:49:c5:21:9b:ea:e6:b8:68:b0:f9:88:4d:49:b9:c9:44:
         21:c6:b0:b4:6c:a0:de:db:26:78:00:99:8d:16:32:51:6f:72:
         39:37:75:18:2e:63:0c:5c:de:88:ea:45:d8:b6:78:c8:78:ec:
         b9:dd:2e:30:50:55:25:04:13:77:bb:eb:d7:fb:e6:84:33:35:
         77:b6:81:70:33:1c:a3:4c:b1:d2:e1:b9:91:e3:c2:23:e8:6a:
         5e:b3:e5:8e:88:32:ac:8c:db:9d:a5:a1:34:e0:14:fa:11:75:
         0f:67:ce:9b:44:9c:d9:e6:ce:24:0a:d3:c7:34:ab:15:9b:ea:
         cc:38:48:19:65:77:8a:83:1c:b3:04:fe:d3:76:f3:9c:32:5e:
         db:db:bf:d3:53:ef:45:d0:f7:dd:15:04:ef:34:d5:3f:1b:ef:
         4b:33:84:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:07:45 2026 by rpki-client