This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
File:                     tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json)
Hash identifier:          dAVCXbbesxDDB4dHkRD52Zh1hF1FNqNYMASI9J4Q0jU=
Subject key identifier:   B7:28:6C:91:C1:5E:33:00:7B:13:CF:2C:8D:CA:7E:CC:AE:4D:FC:5B
Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91
Certificate issuer:       /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
Manifest number:          78
Signing time:             Sat 17 Jan 2026 05:59:21 +0000
Manifest this update:     Sat 17 Jan 2026 05:59:20 +0000
Manifest next update:     Sat 24 Jan 2026 05:59:20 +0000
Files and hashes:         1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: LI45uNgbcIw/zSdrVV/ty3J1rsVfB3fIF+boTX2CcmY=)
                          2: E641780E535211F0A795A950C4F9AE02.roa (hash: /6fZjzm6zMKlJavcLCHUvZwJwnYnVUAiwPFKfA2za2E=)
                          3: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: JnKzQUCZZIkzk+PTJ2yOthp2jewtbhpdupguptGlDRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl
                          rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 05:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
        Validity
            Not Before: Jan 17 05:59:20 2026 GMT
            Not After : Jan 24 05:59:20 2026 GMT
        Subject: CN=696b2539-ade4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:d3:16:bd:78:d7:ed:93:ce:89:3d:0f:f6:
                    5a:c8:83:78:3e:0c:c0:99:1b:a5:ee:8c:d6:73:1d:
                    6c:3b:b2:4f:52:6e:44:12:b9:f1:06:d8:da:b1:82:
                    0a:4b:a3:89:12:68:c2:18:90:6f:5c:12:93:94:bb:
                    ff:c6:5c:b6:c6:ae:16:fa:2d:82:58:30:2a:db:26:
                    f1:92:61:55:c2:18:8d:2c:04:50:ec:76:5f:fd:37:
                    59:9b:b7:c3:c0:95:05:bb:52:8c:32:b2:02:e0:92:
                    c8:b7:fe:2c:be:bb:c8:fd:f9:78:2f:35:18:34:96:
                    0a:d5:da:1e:7a:96:c4:71:78:6b:73:3e:95:24:47:
                    ff:af:97:96:c6:6d:07:28:cc:8c:4f:16:c2:c6:c1:
                    4b:b9:1d:cc:c9:a3:a9:ce:18:0b:73:bc:6f:ec:d3:
                    91:e8:92:a9:1b:df:49:e1:ec:94:69:cb:40:ca:82:
                    a5:9f:8b:78:0a:19:d4:77:47:ab:6f:25:09:b0:35:
                    84:1b:4e:6d:14:d7:04:f8:79:ec:46:54:a3:22:c3:
                    f6:1b:88:be:28:cc:d8:d5:f9:76:22:4a:da:e9:d3:
                    2e:25:93:ee:c4:f4:07:f0:cf:b9:a9:25:01:fa:a8:
                    cb:00:da:53:e3:9d:a5:74:bf:c0:dc:7f:ad:76:97:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:28:6C:91:C1:5E:33:00:7B:13:CF:2C:8D:CA:7E:CC:AE:4D:FC:5B
            X509v3 Authority Key Identifier:
                keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c3:cf:63:18:33:55:12:14:24:ba:00:5f:c3:90:69:0a:e4:
         ba:0e:51:c0:83:6d:eb:ff:99:47:ff:1b:15:eb:00:1b:32:80:
         6f:33:43:f6:45:f5:b4:00:d3:b6:0b:56:41:24:4a:ea:b3:ea:
         df:74:63:4a:ea:36:e2:58:9f:57:2b:bb:3d:7e:d4:ed:3b:bf:
         f2:d6:f2:2b:2f:4a:c9:67:e0:9c:bd:33:55:d0:75:80:29:fb:
         b7:b9:bf:30:0b:3f:8f:39:df:5c:84:34:ef:36:14:1d:d5:77:
         f1:81:6f:c2:b4:fb:d2:fb:a2:a3:8d:49:d1:07:2c:6f:67:70:
         28:c6:bc:55:80:da:62:f5:b9:09:b1:a0:86:fb:5c:24:8e:52:
         ad:ef:48:4d:8a:5b:d4:77:9c:22:91:9f:e1:76:09:64:74:0f:
         8f:43:2c:15:5b:b3:c3:a5:d0:ce:01:08:db:ab:4b:cc:13:c2:
         db:58:8c:4b:9c:a2:31:a5:c8:cc:57:fb:e8:fa:ad:dc:8e:71:
         58:7f:6c:2f:7c:04:7e:bf:f5:18:ee:93:07:3f:1e:ae:e7:db:
         06:87:90:0c:e6:fd:f3:87:0d:a4:c2:6c:28:90:ff:f3:40:7b:
         fb:0c:c3:e5:07:be:36:48:38:a0:13:a0:c4:28:78:7c:ec:8e:
         3f:9a:02:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:01:46 2026 by rpki-client