This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File:                     TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier:          ouTa1akVlspNotoJA5hbaX7qnzSpQ+RvvaT+WoeiaWQ=
Subject key identifier:   70:B6:09:79:81:29:D7:16:5A:2D:1F:AF:60:6C:46:11:24:92:46:62
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1A2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number:          1815
Signing time:             Sat 10 Jan 2026 16:36:07 +0000
Manifest this update:     Sat 10 Jan 2026 16:36:07 +0000
Manifest next update:     Sat 17 Jan 2026 16:36:07 +0000
Files and hashes:         1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: Jfrgh93xe+InJlXK7Y+CxFFVGJM+WEggBdETiOMFjck=)
                          2: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
                          3: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
                          4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
                          5: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
                          6: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
                          7: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
                          8: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: NBI2SzAsfMMyvzm9HMKH7VfCX2Mv5szs8xFiRJF3X2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 16:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6699 (0x1a2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Jan 10 16:36:07 2026 GMT
            Not After : Jan 17 16:36:07 2026 GMT
        Subject: CN=69627ff7-6271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:87:6c:92:dd:fa:f8:69:1a:01:21:12:c0:
                    8c:61:ba:f8:b1:50:d2:5b:39:ca:db:bf:5a:12:86:
                    96:cf:91:b8:10:cf:df:99:ef:ef:00:c1:bb:c9:59:
                    c0:b7:7d:40:b3:a5:6a:b9:06:f6:57:d7:fe:b0:c1:
                    8f:c6:c5:b4:5c:40:7e:7a:36:43:4b:34:03:3a:84:
                    01:36:da:34:4e:4a:b3:30:94:27:67:98:4a:07:76:
                    92:6f:51:b8:f4:72:2b:dc:a2:c5:59:96:36:51:bb:
                    1c:c7:ef:d3:63:1a:db:07:10:b6:33:0a:66:06:05:
                    3b:d4:a3:27:5f:71:bb:e3:47:57:aa:e1:88:01:b2:
                    c7:37:6a:9a:5c:83:a4:b0:6d:02:1e:58:18:89:d2:
                    28:f8:0b:b6:40:78:14:85:94:e8:c4:d3:5f:f3:52:
                    93:0e:72:a1:70:ce:42:ec:23:7e:ef:fa:5a:d0:cd:
                    78:af:2e:c2:5c:2e:1b:f1:7d:39:88:c7:77:15:fe:
                    b5:54:c6:8a:29:33:e2:76:23:ae:cd:5d:2c:b7:2c:
                    19:a1:b2:d0:49:c4:a5:1b:8b:3b:de:c2:d1:f6:18:
                    57:95:18:03:d4:0f:1d:e4:90:da:fb:d2:0d:69:00:
                    50:0c:01:9b:c5:92:22:15:60:5c:26:59:12:c4:a7:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B6:09:79:81:29:D7:16:5A:2D:1F:AF:60:6C:46:11:24:92:46:62
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:31:e3:8f:1a:50:00:c0:96:a2:3b:3e:96:36:de:4c:66:ce:
         92:bd:34:0c:ed:6b:ff:bb:57:b3:f1:8c:ff:eb:96:c3:86:2c:
         a5:5c:ad:e3:c1:54:f0:d5:b9:c6:b3:6a:30:0a:e1:41:2e:39:
         c8:e2:d2:9b:24:d3:95:b5:d7:d7:68:d7:74:2d:40:28:7d:bd:
         e5:ce:e2:9f:98:df:9b:0c:30:71:09:36:12:93:fa:8f:b4:a1:
         c4:58:18:4c:5f:63:2a:78:95:7b:e8:9c:70:ba:aa:c2:e7:9e:
         2d:f5:72:93:26:7d:07:3f:07:44:77:15:b9:dc:45:64:18:74:
         e7:aa:87:4b:fe:9a:5d:f4:c7:a3:4b:ae:a9:38:a8:d2:83:e3:
         4c:5c:3a:d0:be:0d:1f:cd:0b:e9:8a:35:ad:26:88:f0:8c:c6:
         0b:49:e6:1f:d5:89:ed:a9:d5:cf:87:39:c0:73:f8:b2:0d:77:
         91:b9:6c:8e:9f:22:03:08:39:ec:22:3b:ab:e6:4d:e4:f9:84:
         98:f8:64:2c:05:94:d6:49:7c:13:62:1f:0e:e4:83:7d:78:3b:
         ad:f8:4f:12:1c:fc:59:77:60:61:46:4d:a7:74:2e:77:6d:32:
         94:0c:db:f0:a5:f7:da:35:a7:4a:cd:c3:51:30:5b:3e:18:9d:
         00:27:1f:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2
NDI5RDg4QjgwHhcNMjYwMTEwMTYzNjA3WhcNMjYwMTE3MTYzNjA3WjAYMRYwFAYD
VQQDDA02OTYyN2ZmNy02MjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1q6HbJLd+vhpGgEhEsCMYbr4sVDSWznK279aEoaWz5G4EM/fme/vAMG7yVnA
t31As6VquQb2V9f+sMGPxsW0XEB+ejZDSzQDOoQBNto0TkqzMJQnZ5hKB3aSb1G4
9HIr3KLFWZY2Ubscx+/TYxrbBxC2MwpmBgU71KMnX3G740dXquGIAbLHN2qaXIOk
sG0CHlgYidIo+Au2QHgUhZToxNNf81KTDnKhcM5C7CN+7/pa0M14ry7CXC4b8X05
iMd3Ff61VMaKKTPidiOuzV0stywZobLQScSlG4s73sLR9hhXlRgD1A8d5JDa+9IN
aQBQDAGbxZIiFWBcJlkSxKddWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHC2CXmB
KdcWWi0fr2BsRhEkkkZiMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5
NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp
TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT
em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDXMeOPGlAAwJaiOz6WNt5MZs6SvTQM7Wv/u1ez8Yz/65bDhiylXK3j
wVTw1bnGs2owCuFBLjnI4tKbJNOVtdfXaNd0LUAofb3lzuKfmN+bDDBxCTYSk/qP
tKHEWBhMX2MqeJV76JxwuqrC554t9XKTJn0HPwdEdxW53EVkGHTnqodL/ppd9Mej
S66pOKjSg+NMXDrQvg0fzQvpijWtJojwjMYLSeYf1YntqdXPhznAc/iyDXeRuWyO
nyIDCDnsIjur5k3k+YSY+GQsBZTWSXwTYh8O5IN9eDut+E8SHPxZd2BhRk2ndC53
bTKUDNvwpffaNadKzcNRMFs+GJ0AJx+s
-----END CERTIFICATE-----
Generated at Sun Jan 11 09:01:29 2026 by rpki-client