This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File:                     TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier:          E+xjjHAqPekUv7QNvMkG43RCqHj2oug4RFFhwQ8+VW4=
Subject key identifier:   BF:0F:8C:43:BB:A6:41:57:58:90:D6:BF:93:3F:64:BF:2B:C9:E5:DC
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1A3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number:          1821
Signing time:             Tue 20 Jan 2026 16:36:14 +0000
Manifest this update:     Tue 20 Jan 2026 16:36:14 +0000
Manifest next update:     Tue 27 Jan 2026 16:36:14 +0000
Files and hashes:         1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: osLOUmplI4r4D5g+gpwKPCHfl9ztw8iLrRrB4kO2WTI=)
                          2: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
                          3: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
                          4: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
                          5: CACD55A2F04611F087BCEF76546F56BC.roa (hash: 1U1Fd4t2YRi0fU8MQWqgTVD6JsOngQ62vewQPl3JSa4=)
                          6: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
                          7: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
                          8: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 16:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6717 (0x1a3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Jan 20 16:36:14 2026 GMT
            Not After : Jan 27 16:36:14 2026 GMT
        Subject: CN=696faefe-4149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:3c:7d:a9:b7:40:f2:31:ce:06:cd:55:eb:
                    7c:e6:f3:e8:c3:ab:ff:a7:da:51:eb:2a:73:3d:aa:
                    84:03:08:7b:01:13:86:cc:5d:40:22:d5:05:a9:13:
                    00:09:88:11:a1:ae:52:c7:20:f0:2f:60:39:f8:c5:
                    a6:56:f8:0e:53:d2:e9:56:10:18:de:47:3c:0f:dc:
                    d6:be:1e:ff:e0:26:a8:d2:9e:55:cc:63:7c:cf:0d:
                    0a:48:92:38:e5:b3:f6:80:d8:57:84:08:fb:2f:10:
                    36:a3:ff:c1:af:fc:d9:7f:c0:05:1d:18:a1:62:6c:
                    48:3e:3e:31:fe:61:4c:11:52:63:cd:6f:30:78:10:
                    e1:8e:f1:59:f4:d4:bf:1d:39:4e:f9:bd:0c:d5:ab:
                    e5:10:db:fe:a8:c8:65:72:16:f9:f2:78:27:06:9b:
                    40:12:ab:42:18:a5:f3:49:f2:33:82:b9:60:1b:be:
                    19:e8:ac:2d:93:4e:a8:e5:7e:b3:93:52:6c:7e:70:
                    78:8b:89:8e:14:c8:bb:8d:41:ab:79:fb:5d:4e:a7:
                    c3:b3:c2:89:6e:24:15:43:4d:09:fc:28:a3:8b:4c:
                    dc:04:03:1a:be:50:22:b4:db:78:2b:90:87:a1:90:
                    a8:d3:42:61:73:7e:f6:91:ec:56:68:2a:af:52:24:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0F:8C:43:BB:A6:41:57:58:90:D6:BF:93:3F:64:BF:2B:C9:E5:DC
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:14:36:3e:e5:1d:9c:71:43:74:61:7c:1f:f0:92:63:f4:1a:
         6f:a6:46:fb:97:28:a7:f3:48:f3:57:74:da:f4:03:c4:a9:e0:
         da:06:61:60:95:aa:51:0b:24:8c:82:ab:f0:97:a5:cd:31:a8:
         36:81:77:c3:6e:e9:80:32:bc:a9:42:e8:10:f3:bc:46:a5:03:
         2a:06:f4:30:11:5c:19:e0:3a:96:bb:a3:ca:4a:78:ac:12:cf:
         a2:30:af:56:07:76:1e:0c:9e:78:de:1a:a4:3c:dc:e0:12:9b:
         d5:75:a9:b9:26:e5:03:54:b7:56:6a:19:09:68:85:90:19:94:
         2b:26:3f:3e:3e:69:a9:ee:67:b7:fa:10:06:3e:8b:e9:d0:96:
         ed:bf:21:06:6e:91:a3:86:b5:1d:fe:58:cb:72:3a:6f:03:18:
         04:0c:fa:20:6c:eb:a3:2f:34:79:12:89:51:77:95:6f:44:1b:
         a8:51:02:11:a8:1e:e6:37:fb:3c:e1:0a:87:b9:d4:f6:dc:5f:
         5f:a5:68:80:b4:b9:23:50:3a:d1:90:78:21:c8:40:20:a0:0e:
         0d:61:6a:66:55:0c:42:c1:77:ef:c6:f0:c4:8f:50:bf:96:5e:
         b1:d6:47:1e:31:d1:a7:85:8e:db:65:11:d8:5e:f4:8b:58:f2:
         23:d0:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:59:14 2026 by rpki-client