This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File:                     TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier:          jwlN4cOm1LG0zrRkQIv69QkD97VDHySkp7P6xFZgA04=
Subject key identifier:   50:51:AA:88:1E:3C:2E:1E:44:4A:09:17:6D:44:13:79:33:C1:D4:9F
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1A28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number:          1812
Signing time:             Sun 04 Jan 2026 16:34:34 +0000
Manifest this update:     Sun 04 Jan 2026 16:34:33 +0000
Manifest next update:     Sun 11 Jan 2026 16:34:33 +0000
Files and hashes:         1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: GzYoyEYC3LokSul4KhRu9eYYvozqQ+74VNIdMk4/cKQ=)
                          2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
                          3: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
                          4: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
                          5: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: NBI2SzAsfMMyvzm9HMKH7VfCX2Mv5szs8xFiRJF3X2Y=)
                          6: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
                          7: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
                          8: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Jan 2026 16:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6696 (0x1a28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Jan  4 16:34:33 2026 GMT
            Not After : Jan 11 16:34:33 2026 GMT
        Subject: CN=695a969a-5b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:b3:a0:8d:66:1b:31:0e:ee:64:3b:a4:aa:
                    aa:f3:af:79:66:ba:54:0d:3c:e1:f4:51:b9:7b:16:
                    7e:f8:4a:50:b4:dd:6f:10:6f:d6:4e:b5:11:16:a5:
                    38:f3:47:66:69:31:49:a1:25:1f:ef:44:81:ea:6c:
                    97:38:09:ca:91:c1:04:37:6e:8e:74:a4:42:39:fd:
                    29:64:6c:58:61:45:15:1c:16:a6:65:14:45:c5:f8:
                    20:b7:6a:3e:a2:ca:56:8f:52:b7:c3:d9:8a:29:8d:
                    f1:09:d4:31:16:c6:a6:ab:70:5a:cb:d7:85:ed:c1:
                    68:6a:a4:a7:c8:f7:d6:cd:e3:76:e6:8b:ec:ff:7b:
                    a2:98:27:6a:d9:2c:33:13:ad:e1:1a:a5:3d:2e:b5:
                    61:a3:cb:65:de:96:be:6c:4c:78:15:f8:4b:3d:aa:
                    96:ef:9f:75:9c:2f:82:a8:75:57:d8:82:48:21:33:
                    f6:c8:25:f1:5e:a5:4c:af:4f:39:9d:76:9e:81:b5:
                    2f:78:69:5f:ec:32:76:e0:1c:2a:02:4e:82:72:14:
                    78:6b:fd:1f:3b:dd:65:d8:d8:3b:1e:74:b8:b0:47:
                    7f:9f:bf:17:03:10:5d:a6:a4:47:43:64:64:91:3e:
                    4a:f4:e1:28:b9:2c:0e:33:5d:b5:2d:8e:f9:92:a2:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:AA:88:1E:3C:2E:1E:44:4A:09:17:6D:44:13:79:33:C1:D4:9F
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:b1:57:c7:cc:be:3e:c5:80:cd:21:f5:1b:3e:6f:ed:c5:fd:
         17:33:4a:ae:4c:86:ff:07:ed:e7:61:87:48:91:64:86:eb:f1:
         8b:88:48:c6:97:57:33:40:ad:78:79:44:3e:8f:cd:35:61:c4:
         ef:b8:64:86:55:ac:7b:e3:05:e2:5a:db:1b:88:ce:3c:73:3c:
         d9:1f:3a:cc:d4:a0:9b:4e:41:67:74:52:1d:d8:70:43:e6:08:
         91:71:2b:b4:07:28:89:3b:3e:be:f1:91:ae:1b:5f:89:bb:3a:
         da:8b:6e:16:de:ff:8d:3d:b7:6e:65:5d:76:bf:98:33:7d:8c:
         e0:4f:91:02:1b:a8:c3:47:fb:64:d6:0f:f2:0a:c4:dd:61:aa:
         6d:60:c5:6d:b5:b9:dd:d4:c8:f9:e1:75:7b:6b:49:ff:c9:39:
         6a:3d:76:0f:61:0f:7d:ef:e9:df:9b:90:97:32:6a:a3:6d:57:
         40:60:dd:66:42:02:c3:18:31:ee:a1:a8:2a:e2:a2:ec:24:ce:
         bd:a5:85:50:2b:44:96:63:6e:e2:ff:82:6f:b5:12:66:92:08:
         f3:e1:16:7e:dc:4e:6f:bc:55:97:d3:45:08:1a:12:4d:8f:07:
         92:89:cf:21:cd:2d:3d:96:e6:e4:c6:d5:fa:86:6b:72:00:20:
         3b:f8:95:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2
NDI5RDg4QjgwHhcNMjYwMTA0MTYzNDMzWhcNMjYwMTExMTYzNDMzWjAYMRYwFAYD
VQQDDA02OTVhOTY5YS01YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3XCzoI1mGzEO7mQ7pKqq8695ZrpUDTzh9FG5exZ++EpQtN1vEG/WTrURFqU4
80dmaTFJoSUf70SB6myXOAnKkcEEN26OdKRCOf0pZGxYYUUVHBamZRRFxfggt2o+
ospWj1K3w9mKKY3xCdQxFsamq3Bay9eF7cFoaqSnyPfWzeN25ovs/3uimCdq2Swz
E63hGqU9LrVho8tl3pa+bEx4FfhLPaqW7591nC+CqHVX2IJIITP2yCXxXqVMr085
nXaegbUveGlf7DJ24BwqAk6CchR4a/0fO91l2Ng7HnS4sEd/n78XAxBdpqRHQ2Rk
kT5K9OEouSwOM121LY75kqLDswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBRqoge
PC4eREoJF21EE3kzwdSfMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5
NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp
TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT
em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDWsVfHzL4+xYDNIfUbPm/txf0XM0quTIb/B+3nYYdIkWSG6/GLiEjG
l1czQK14eUQ+j801YcTvuGSGVax74wXiWtsbiM48czzZHzrM1KCbTkFndFId2HBD
5giRcSu0ByiJOz6+8ZGuG1+Juzrai24W3v+NPbduZV12v5gzfYzgT5ECG6jDR/tk
1g/yCsTdYaptYMVttbnd1Mj54XV7a0n/yTlqPXYPYQ997+nfm5CXMmqjbVdAYN1m
QgLDGDHuoagq4qLsJM69pYVQK0SWY27i/4JvtRJmkgjz4RZ+3E5vvFWX00UIGhJN
jweSic8hzS09lubkxtX6hmtyACA7+JWw
-----END CERTIFICATE-----
Generated at Mon Jan 5 03:28:49 2026 by rpki-client