This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
File:                     TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json)
Hash identifier:          ybt0o71GIvgLnk0sgkQr1ti96P7hXIWaWkLzoM3wbRw=
Subject key identifier:   3B:5A:C9:DD:1A:6C:8F:ED:62:C8:CB:CF:BD:EF:31:C3:80:0F:88:C5
Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Certificate issuer:       /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Certificate serial:       048A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
Manifest number:          0480
Signing time:             Mon 02 Feb 2026 23:34:28 +0000
Manifest this update:     Mon 02 Feb 2026 23:34:28 +0000
Manifest next update:     Mon 09 Feb 2026 23:34:28 +0000
Files and hashes:         1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: 5jsnuW2hcxzfAxSOaAfG0odiAHD3kjRLkBd2eY83tWM=)
                          2: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: 09H6WJNzMO6bY1CShsLhlCFgsX+1B/xNo5NQ+Cdhlps=)
                          3: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 306xxmMO0L8F4kDhDkLe1fwHAL2pRNtzpCEiuu3Fy6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
                          rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 23:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
        Validity
            Not Before: Feb  2 23:34:28 2026 GMT
            Not After : Feb  9 23:34:28 2026 GMT
        Subject: CN=69813484-b9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:db:00:46:6b:f0:cd:02:f9:9e:79:ab:e6:
                    32:ec:38:96:51:2d:03:5c:c8:73:69:f3:23:c3:2a:
                    f8:44:3d:07:2a:cb:26:f4:20:46:36:b8:a6:3d:7d:
                    ff:75:32:11:21:fe:4d:e0:ef:32:22:c7:46:a2:b8:
                    6f:e9:46:20:fe:fa:ec:1b:25:29:5c:69:95:d1:a9:
                    c0:66:1e:28:fe:0b:9a:30:83:2b:9f:e5:52:b7:bd:
                    fd:e6:6f:f0:07:7c:32:d2:52:9f:23:06:ee:3f:b6:
                    4b:4f:de:d6:ca:e5:5b:a0:ca:a0:85:12:30:f8:d2:
                    e7:65:4d:3c:47:f9:c6:dd:f3:8d:4c:af:dd:89:d8:
                    d5:94:2c:49:6c:d0:2e:1e:f9:36:90:ff:72:a5:d0:
                    a3:ed:72:5a:ed:d1:9d:b8:e9:62:5b:17:4e:85:a4:
                    91:60:54:5e:5e:6d:aa:53:49:e2:88:fc:59:90:aa:
                    f1:12:51:31:de:e1:3c:5b:e4:f0:de:f8:93:38:e2:
                    a1:63:b7:fe:e7:59:94:35:80:cb:76:5f:06:af:92:
                    95:d1:b4:78:e3:58:d4:99:61:5a:5b:70:32:40:9f:
                    77:bf:72:07:20:8d:39:2e:11:e3:a5:4e:8d:82:b7:
                    09:c7:a3:75:55:1a:46:df:a7:f6:cb:22:2a:c0:0d:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5A:C9:DD:1A:6C:8F:ED:62:C8:CB:CF:BD:EF:31:C3:80:0F:88:C5
            X509v3 Authority Key Identifier:
                keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:e7:2a:7e:01:b1:92:cc:bc:6d:3f:37:65:e6:34:c7:76:
         b4:71:03:f2:b0:a5:cc:99:70:1e:32:5c:41:34:af:5a:3a:7a:
         6c:61:5e:dd:d8:ee:65:83:2e:71:ed:a8:e5:bd:4d:29:dd:48:
         1c:5a:cd:1d:a7:83:fb:86:26:2e:e7:52:f5:93:ff:37:c0:4a:
         5f:c4:90:ef:5f:4e:f4:76:e8:ff:97:ff:89:28:8f:35:15:be:
         b5:9c:b4:b7:db:48:19:f7:c8:92:f2:89:7b:2c:e8:d0:b3:5a:
         db:f5:11:3b:b0:f6:0d:b7:3b:e4:68:ee:ce:ce:28:fb:64:f7:
         dc:5a:c9:7c:bd:1d:2f:18:b4:fe:14:46:a0:8d:dd:97:89:9a:
         5b:a4:e2:91:fc:9c:f8:fc:4e:80:14:ec:ed:f2:b7:a6:47:02:
         40:b0:20:9d:49:8c:28:24:c1:df:e3:31:80:6a:8c:df:5c:02:
         12:67:33:93:8f:ff:b3:ad:76:a3:71:bd:03:40:32:80:8b:62:
         9b:5e:2b:35:4b:c4:97:0c:6d:c2:66:4e:68:2c:7b:97:39:97:
         33:34:b4:a0:0f:bc:15:84:f6:8e:51:95:07:f4:d8:63:0e:96:
         af:6a:e5:e5:8e:38:1f:3a:de:0b:b1:55:93:3c:00:b6:9d:c8:
         88:fe:32:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:36:36 2026 by rpki-client