This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File:                     TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier:          aGYbbgQ7hT+d133WPvZEJZ5CSuhrkLKRz92MkveL4+g=
Subject key identifier:   F2:08:24:00:0B:84:30:FE:5E:07:23:C3:1F:74:E8:84:75:C4:35:A0
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1A43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number:          1827
Signing time:             Sat 31 Jan 2026 16:36:21 +0000
Manifest this update:     Sat 31 Jan 2026 16:36:20 +0000
Manifest next update:     Sat 07 Feb 2026 16:36:20 +0000
Files and hashes:         1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: 0v6l5hnJX/36oI1QQeslkk03xCpbbbvpxXX3GCiLOIs=)
                          2: CACD55A2F04611F087BCEF76546F56BC.roa (hash: 1U1Fd4t2YRi0fU8MQWqgTVD6JsOngQ62vewQPl3JSa4=)
                          3: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
                          4: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
                          5: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
                          6: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
                          7: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
                          8: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Feb 2026 16:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6723 (0x1a43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Jan 31 16:36:20 2026 GMT
            Not After : Feb  7 16:36:20 2026 GMT
        Subject: CN=697e2f84-bff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:6a:b6:52:46:72:eb:76:e7:66:dc:94:7c:
                    2b:fd:03:00:15:19:a8:9e:f2:4b:d1:97:c4:0e:6a:
                    e7:db:be:74:dd:11:2f:c3:c3:1b:9c:38:64:30:91:
                    6b:c9:93:81:b0:7c:29:f0:9f:3c:91:39:f0:5b:52:
                    7d:49:18:0f:64:73:f1:9d:8e:e5:14:54:5c:10:19:
                    29:25:40:7b:92:7c:1c:d9:37:a9:44:41:7e:37:19:
                    a4:f9:9b:52:71:ad:0e:8c:e4:79:72:2a:76:3f:30:
                    d9:fe:80:66:1e:40:10:9b:91:26:11:e2:b5:e6:a6:
                    4f:fa:7f:92:4f:e0:78:49:33:04:34:2a:00:5b:4e:
                    07:60:61:8a:a0:ec:b1:47:f4:2e:3b:33:41:07:0a:
                    72:f6:3f:db:66:05:ae:3e:ee:12:9d:1b:29:86:a6:
                    5d:7b:9f:eb:b5:4c:4e:60:18:cb:59:c5:8f:3c:d4:
                    b0:47:25:58:77:52:89:31:4c:ae:96:42:c4:38:1a:
                    d6:4d:27:f0:43:8d:47:8b:fa:09:14:f1:8b:d6:e7:
                    c6:22:af:54:f6:af:fd:5f:cc:40:1b:2d:62:c0:03:
                    3b:6a:d3:95:f3:9a:7d:48:fd:e7:e3:98:b2:b7:b9:
                    0a:66:ce:3c:ca:5d:ed:90:b1:10:30:42:f8:b3:57:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:08:24:00:0B:84:30:FE:5E:07:23:C3:1F:74:E8:84:75:C4:35:A0
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:95:ed:c8:9e:9d:19:d6:37:44:1e:52:85:85:34:fe:6e:c3:
         9f:04:db:49:99:5d:79:ea:5a:07:c7:14:3a:64:bc:a9:81:fd:
         33:7c:2b:6e:be:e8:4c:01:c3:bc:31:8e:21:46:e7:4f:00:9c:
         7b:46:3e:a9:6a:07:91:5c:da:c4:00:2b:92:51:28:fc:b3:b5:
         32:31:c2:d4:be:12:70:1d:ff:9c:a9:d5:3f:24:6f:9c:66:33:
         3b:63:af:03:81:42:f5:37:d2:0c:fb:5e:1e:88:da:41:2d:1e:
         2f:35:81:2f:07:03:d4:fc:a5:49:95:f2:4c:73:cd:ac:a1:2d:
         a2:bf:e1:a4:fe:e1:e4:60:1e:a2:ab:5f:4b:63:4a:fb:70:7b:
         cb:6b:fd:83:fd:52:72:b3:6a:e4:b7:76:dc:81:03:21:1f:51:
         39:a7:b3:fa:b6:4a:c6:c3:f6:f0:a7:b6:f6:54:e2:05:e8:40:
         54:c0:0d:3d:29:c5:cd:d1:97:7c:b2:66:c3:55:39:62:eb:70:
         b3:d3:7d:7e:74:35:f6:5c:db:40:d4:f8:6c:fa:de:fa:23:f8:
         ae:d1:ac:01:22:c6:d0:93:7a:47:a5:bb:e6:20:09:67:f2:79:
         03:ec:5c:59:a6:c5:7f:98:67:ec:02:a5:83:92:02:2c:4f:c0:
         3e:76:24:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 1 12:44:10 2026 by rpki-client