This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft
File:                     5577EED829CD0AC31399054DE74453562390C62F.mft (raw, json)
Hash identifier:          Aby8ZpVL+YmweeNVFcCDMK7cLAgFc5stiQep2MjMmJo=
Subject key identifier:   68:7F:D2:FC:91:4E:05:15:E7:39:DE:88:70:38:A1:17:C3:91:02:23
Authority key identifier: 55:77:EE:D8:29:CD:0A:C3:13:99:05:4D:E7:44:53:56:23:90:C6:2F
Certificate issuer:       /CN=A9124B5E0000/serialNumber=5577EED829CD0AC31399054DE74453562390C62F
Certificate serial:       253F2302CBC702CF272A138B391A52998ED256CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft
Manifest number:          4D
Signing time:             Sat 24 Jan 2026 17:30:56 +0000
Manifest this update:     Sat 24 Jan 2026 17:25:56 +0000
Manifest next update:     Sun 25 Jan 2026 20:19:56 +0000
Files and hashes:         1: 5577EED829CD0AC31399054DE74453562390C62F.crl (hash: ZQ4RVMjCw83Zga6gLMnrQibL5zq89c+sCiKlRwHfvDo=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.crl
                          rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 20:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3f:23:02:cb:c7:02:cf:27:2a:13:8b:39:1a:52:99:8e:d2:56:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124B5E0000, serialNumber=5577EED829CD0AC31399054DE74453562390C62F
        Validity
            Not Before: Jan 24 17:25:56 2026 GMT
            Not After : Jan 25 20:19:56 2026 GMT
        Subject: CN=687FD2FC914E0515E739DE887038A117C3910223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:0f:36:7f:3a:b6:e2:ad:fc:b9:e2:6c:ce:5a:
                    bd:4a:f7:c2:07:57:f5:52:48:2d:1f:bf:ea:31:28:
                    3b:77:67:32:4d:a1:22:90:46:76:b9:38:66:db:4b:
                    cb:23:02:f4:3e:87:2c:c5:35:63:2b:91:78:80:7b:
                    08:93:bb:7e:21:64:d4:09:31:5e:fa:b2:64:6c:5e:
                    9e:3b:d0:6c:98:05:ef:57:9e:f1:34:a6:ee:b5:36:
                    76:37:e8:ff:26:a6:58:01:c6:db:7f:bb:76:fa:41:
                    f7:0e:9c:81:81:11:33:0f:b5:78:95:91:99:8a:7d:
                    23:5a:d5:03:b1:3a:50:46:48:45:67:fc:78:bd:80:
                    b8:91:7d:33:ae:9b:4e:18:7e:ea:2b:0b:75:c9:7f:
                    64:2a:d0:6d:f5:ec:a5:b4:91:6b:d7:28:e6:dc:e9:
                    7d:71:0f:85:3b:9f:27:9b:9f:43:ab:be:58:27:4b:
                    a3:15:14:7a:6d:67:1f:b8:e3:16:3a:8c:88:b7:21:
                    9b:91:42:22:1e:c8:f6:f6:ca:ef:63:c1:31:72:55:
                    03:2b:f9:62:e1:48:01:37:26:2a:14:0e:e9:f0:5c:
                    a4:38:7b:8d:18:6d:0b:19:c5:f3:72:7c:02:53:13:
                    66:d3:dc:be:f6:76:a0:a7:08:fb:bd:b9:2c:cf:94:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7F:D2:FC:91:4E:05:15:E7:39:DE:88:70:38:A1:17:C3:91:02:23
            X509v3 Authority Key Identifier:
                keyid:55:77:EE:D8:29:CD:0A:C3:13:99:05:4D:E7:44:53:56:23:90:C6:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:88:55:31:0c:70:e2:67:53:b5:f8:35:91:95:b6:36:82:1c:
         c4:42:91:b1:14:8e:9e:4e:4b:47:d2:a8:fc:55:4c:cc:e4:b3:
         77:af:eb:30:76:87:a4:ec:ac:5b:8c:25:91:a3:4f:9c:95:18:
         97:4e:47:64:b1:dc:ea:fd:39:e1:01:1b:b3:54:37:d9:b8:9c:
         fb:ce:eb:0b:63:43:d5:89:80:45:05:08:11:cd:81:24:94:8c:
         0d:0b:4c:f9:4a:91:0b:ed:53:c5:5d:8f:f9:50:32:fe:e4:59:
         d4:22:06:d4:0f:86:de:76:a7:9d:b0:2f:b4:ad:ea:c8:1f:50:
         f8:62:23:8e:4b:e1:d4:fd:1d:69:7f:d9:07:14:e9:ed:49:e8:
         2b:a3:02:4c:f9:ce:e9:38:3b:31:e6:95:b5:e6:94:ad:68:a2:
         05:5c:35:76:53:e0:fa:32:44:ec:c5:24:98:6e:91:ba:69:ef:
         d3:d9:d4:63:49:39:86:db:e8:48:07:3e:e8:f0:9b:7b:ab:82:
         ff:2c:af:88:1f:c2:76:30:31:56:d2:a3:d4:e7:29:a2:d1:25:
         5a:b1:4d:0e:6d:58:2a:f3:aa:2c:0f:0f:4c:4c:9f:fb:4e:b8:
         ef:59:66:6b:9f:83:4d:ea:01:c7:af:3c:21:e8:79:d8:b9:e1:
         25:78:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:59:44 2026 by rpki-client