This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft
File:                     TI176iTK_MV6U-jndIctPYsutF0.mft (raw, json)
Hash identifier:          kqN/cMKJ57o1yNvhAj8ltJU1XB+zXEKz6XSe6r0dM7E=
Subject key identifier:   20:2B:B8:FF:C0:30:01:DF:94:8C:5A:F4:5B:37:D1:80:49:C1:B1:0C
Authority key identifier: 4C:8D:7B:EA:24:CA:FC:C5:7A:53:E8:E7:74:87:2D:3D:8B:2E:B4:5D
Certificate issuer:       /CN=A9158F8D/serialNumber=4C8D7BEA24CAFCC57A53E8E774872D3D8B2EB45D
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft
Manifest number:          A3
Signing time:             Wed 21 Jan 2026 04:15:40 +0000
Manifest this update:     Wed 21 Jan 2026 04:15:39 +0000
Manifest next update:     Wed 28 Jan 2026 04:15:39 +0000
Files and hashes:         1: TI176iTK_MV6U-jndIctPYsutF0.crl (hash: I3xKiQlZd+nN7IpQbbBikeR+r735hHAESlH14ZMrStI=)
                          2: 9180262C1B6111F08E120D13C4F9AE02.roa (hash: EsTB7TakNl9Tx/hsuSfCjLfMjZ+fBEoPIeukrwd3M1s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.crl
                          rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F8D, serialNumber=4C8D7BEA24CAFCC57A53E8E774872D3D8B2EB45D
        Validity
            Not Before: Jan 21 04:15:39 2026 GMT
            Not After : Jan 28 04:15:39 2026 GMT
        Subject: CN=697052ec-cc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:65:3b:d1:d7:d2:44:a8:39:62:42:39:d7:09:
                    fa:ce:6b:4a:69:1b:91:a2:d5:a5:dc:b2:b8:0c:92:
                    bc:8b:eb:34:87:04:a8:55:6c:0d:f6:c3:ec:3c:45:
                    4f:4f:a7:fb:bd:cb:a4:be:86:a1:cb:7f:42:a1:78:
                    1f:3a:7d:5b:c2:6a:c9:42:0a:2b:e4:79:69:87:4d:
                    bb:96:68:5f:52:b5:b8:68:54:62:88:ff:fc:ab:9d:
                    7a:33:7f:f6:51:2c:99:64:8a:42:d8:42:7f:0b:52:
                    a2:e8:6c:64:a0:e0:ad:0c:3b:90:3f:79:f2:22:67:
                    ab:fd:ab:64:8f:7f:ef:5b:13:f1:bd:94:3e:68:82:
                    67:c7:38:ee:44:10:11:f0:99:c1:4b:73:a6:8f:f2:
                    40:bc:2e:84:85:5e:ad:d1:fb:e3:79:0c:56:bd:df:
                    27:37:60:4b:72:d5:99:8b:76:ff:8e:f6:57:a0:54:
                    d7:1a:a2:e9:d8:28:b1:48:29:9f:a9:78:5c:91:c5:
                    c0:0a:08:48:b7:c1:50:f4:fb:e7:fc:df:6f:0e:a1:
                    d2:9e:8d:d5:69:00:dd:9c:b4:1f:13:a6:05:dd:9d:
                    d8:30:d7:9f:1d:ac:11:08:a7:af:a6:ca:d9:f3:0e:
                    06:db:fb:2a:1b:f4:81:ef:a2:6f:7a:f0:e5:b2:cf:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2B:B8:FF:C0:30:01:DF:94:8C:5A:F4:5B:37:D1:80:49:C1:B1:0C
            X509v3 Authority Key Identifier:
                keyid:4C:8D:7B:EA:24:CA:FC:C5:7A:53:E8:E7:74:87:2D:3D:8B:2E:B4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:e2:68:93:c5:6c:c3:cf:58:17:2a:d7:53:d5:ce:e3:85:
         aa:a5:83:0d:3f:9d:8b:61:8f:65:b9:23:79:c9:d9:92:9d:bf:
         3c:96:e1:e1:f6:3e:94:c3:7a:d8:05:32:a3:92:80:57:b3:21:
         d1:5c:49:78:54:92:a3:5b:2f:48:03:9e:1c:ac:7d:14:e8:3e:
         67:59:b9:53:d0:cf:13:da:fe:80:56:f8:5b:eb:54:ab:fa:b1:
         27:cc:56:78:ca:12:18:6f:5f:48:9b:b2:15:5e:e1:0a:d2:cd:
         f6:3f:da:ab:c5:ac:a5:e4:a8:6d:00:41:79:ac:58:77:f3:0f:
         c8:9e:c3:f6:b1:9a:61:06:80:93:5e:1d:36:bc:72:41:ca:6b:
         5c:05:b7:7d:71:63:27:78:00:db:d6:9e:a0:85:73:b6:b9:7c:
         68:29:80:0f:32:a4:8e:ce:63:a2:00:b8:f3:31:35:2f:51:54:
         31:79:a3:4f:cf:3f:75:00:6c:66:f9:6e:21:61:fb:f9:00:c1:
         1d:d5:e8:3a:98:67:e3:46:66:4e:64:dd:e9:74:1b:4f:21:99:
         44:63:55:c7:7a:45:e1:2f:4d:b0:23:17:fc:ed:fb:e4:84:5d:
         90:fd:91:8d:94:98:b2:45:3d:05:51:ce:0d:9f:71:e2:a0:f2:
         4c:6e:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:52:46 2026 by rpki-client