This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft
File:                     TI8rREM6tGSnFK2NOajxbkxQCnw.mft (raw, json)
Hash identifier:          lgT8KoCZvNZFM759ExDjY0gYv3MW/zfGGdEGAs9RrFw=
Subject key identifier:   D8:58:E6:49:0D:59:51:4C:4B:F3:74:B4:7D:A2:73:69:AD:10:48:67
Authority key identifier: 4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C
Certificate issuer:       /CN=A9116297/serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft
Manifest number:          20
Signing time:             Sat 17 Jan 2026 06:47:27 +0000
Manifest this update:     Sat 17 Jan 2026 06:47:27 +0000
Manifest next update:     Sat 24 Jan 2026 06:47:27 +0000
Files and hashes:         1: TI8rREM6tGSnFK2NOajxbkxQCnw.crl (hash: 60lrqg4kbOvLAqwyK819cBdb3nsdIcv7bXc/Nm2Jk8M=)
                          2: 210EF1A0C5CC11F085CF3A5AC4F9AE02.roa (hash: n2I65WMHRY3OpnelCNqCwrruskMIvFUB5RDroh1qiqY=)
                          3: 3F17E15CED2211F0A3976207436F56BC.roa (hash: RNLtlamrbJHCmplqq/Yxm+DyYLIsFQ2Rr6uyqZGI1gY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl
                          rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116297, serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C
        Validity
            Not Before: Jan 17 06:47:27 2026 GMT
            Not After : Jan 24 06:47:27 2026 GMT
        Subject: CN=696b307f-0ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f6:b5:99:0d:ef:90:cc:ea:13:09:ce:f7:c0:
                    6a:31:9c:ef:5e:cb:04:89:69:62:de:a8:3c:86:eb:
                    62:7e:44:24:74:ce:3e:43:ba:f8:96:24:f5:ca:40:
                    f6:59:e1:8d:0e:2f:eb:a4:e1:ac:71:f2:e4:d6:38:
                    d5:26:3a:0f:43:bb:32:18:32:2f:75:2c:50:05:48:
                    7b:9c:ba:aa:cd:4b:01:fc:7e:1e:10:29:d3:e3:ac:
                    ac:4a:bd:32:b6:e1:d6:6b:90:5a:8e:8b:8a:a0:d0:
                    df:9d:44:3b:a4:46:82:7f:64:1c:c4:c8:83:8b:bc:
                    f1:45:79:06:5f:97:5d:9f:4f:a7:ae:f4:6b:fc:f6:
                    bd:4c:5c:c9:be:df:22:6b:81:e9:3b:d2:78:af:39:
                    ce:7a:cc:1b:a1:98:cf:03:69:2e:6a:92:1c:fa:97:
                    c7:78:dd:12:d8:90:4c:2e:f5:0a:d9:d3:6e:ff:15:
                    90:f7:26:2d:a5:ff:dc:1f:ae:62:f6:36:96:27:a3:
                    94:88:61:3e:2d:55:94:28:3e:ce:ab:76:34:22:77:
                    40:a8:4e:58:51:8f:ba:4f:f0:35:3d:e9:0b:69:54:
                    ec:70:24:e2:c8:69:3b:bd:53:65:7c:1a:14:38:08:
                    56:0b:cb:40:4e:31:e7:8f:80:c9:03:36:97:6b:e3:
                    8e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:58:E6:49:0D:59:51:4C:4B:F3:74:B4:7D:A2:73:69:AD:10:48:67
            X509v3 Authority Key Identifier:
                keyid:4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3e:b9:10:36:f5:27:f1:e9:92:53:70:eb:f4:91:87:54:f0:
         33:7b:40:b2:5e:71:cc:d6:70:14:8b:28:e1:4b:e2:90:22:53:
         69:20:0e:18:23:60:9c:0e:5f:7a:58:4a:67:c4:77:d3:e5:f5:
         56:a3:2f:30:67:66:c1:95:4e:e0:8c:73:e8:2a:6a:f8:29:08:
         26:b7:2a:10:36:68:9f:d3:4b:3e:b8:cd:a8:5a:d3:b7:8d:ea:
         a1:73:4a:de:8f:e6:f7:7a:73:ba:77:e6:ab:be:cf:0f:6a:7c:
         0e:36:d6:19:3e:2f:52:d2:2a:16:81:15:97:0e:0f:55:73:5d:
         93:b1:f5:f5:d1:98:74:42:3b:7c:30:fd:0a:d1:02:41:cc:23:
         64:4f:ed:61:5c:a1:12:34:f7:b9:47:fe:9c:cf:3b:b6:0b:16:
         7e:6a:6b:90:db:fe:62:4d:d1:5e:7d:97:69:91:f6:f5:e4:6b:
         45:ec:81:10:66:a4:cc:37:57:93:ac:e5:5b:6c:43:83:8f:93:
         aa:d8:dc:5e:67:6d:dd:08:0d:3d:a7:3f:e9:ae:d5:8f:62:75:
         68:d7:05:f0:72:d5:e8:50:4f:94:3a:4f:6b:e0:44:79:ea:b4:
         cd:f2:51:32:f8:6c:39:85:d1:0c:84:99:2c:4b:f5:92:18:55:
         c8:39:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:31 2026 by rpki-client