This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          7/RcxU1nOMXL2CtCRzzqBjmSg04QeXVj/Wb/aXfhgxw=
Subject key identifier:   08:C0:33:2C:24:9B:36:86:37:83:C1:9A:71:1A:C2:3F:02:B2:F2:6B
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0CED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0C4B
Signing time:             Tue 20 Jan 2026 18:34:30 +0000
Manifest this update:     Tue 20 Jan 2026 18:34:30 +0000
Manifest next update:     Tue 27 Jan 2026 18:34:30 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: 2/0nQxvypGwJkePS80M8TLahPpBf6DqDnh8yJhrLf5w=)
                          2: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: l0zJiMqUs38T7gj8LgR61k0ZJBInXfpY/Qkr3IvYCnU=)
                          3: 52636904771911F083181320C4F9AE02.roa (hash: /N8Je2h9Ml0PEQGrFc9NWTNF1W+nc4xwFKtdjj8nfho=)
                          4: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: FuJ+0zC5emsysfIUM1yM5haaZPmnTrgVqP1fYVReGjo=)
                          5: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: ec9OX9UoLwyn7wN5VObF9v2iz3RI0N5kTbWroMU/2/c=)
                          6: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: w60zjM5Rho09NvawEfZQYqYpztssq7KJEuwPjRdxeWo=)
                          7: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tT6wpY26Z4BuIfJge3UrKFFEij5wdhpGksDHGEKyueE=)
                          8: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: 2c2fswoHtuwwjSDYm9YL0aP4fxZNIBHz0gEM3XmMKGw=)
                          9: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: EDVStKKxG06lw8JN0F9X4jCTKiN0LdF9zVSZbm6YceU=)
                          10: E3903588DA3311F082FD85DA8AD3641D.roa (hash: EIkvBGNH5qK3+2nje6yCtU9+YLtk6KnHnSU6Aq8nm+k=)
                          11: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: atOk9wYqp34gIO2eKlS4DkecCVwSIujOckF38AN4BrA=)
                          12: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: mYZTJsIJ7du6lrRHsZhFQos72s6lXlq/gx3QFyxY95k=)
                          13: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: mr1shSg9tdqYjDdey+BXiwnN08ArL/8XDM1KQaxVcCg=)
                          14: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: KHyJIG6frQiFoPJvg1lo79fhG8UBhK1qYbLoHf3tBMY=)
                          15: 5164F13EDBD811F0A0A88CE756641951.roa (hash: dzkg5DJUbZBryBBl0bj8Y0ekyIFso09dXRIHhTkjR50=)
                          16: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 4baJUQaJ57JlaoSVexNlINX3qHBtfZSmHXr0z4zuVeE=)
                          17: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: 2+UD4SRzge5CHFOfNK8qJ8s2gmC4j2WFn9LceyV1EXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3309 (0xced)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Jan 20 18:34:30 2026 GMT
            Not After : Jan 27 18:34:30 2026 GMT
        Subject: CN=696fcab6-01aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:a5:fa:0c:f8:9b:87:88:f7:48:90:51:08:
                    90:0f:41:3a:82:50:21:8a:db:7f:c9:e5:0a:86:2f:
                    4a:11:50:5d:95:0d:c8:f4:40:dc:bd:74:ce:28:ee:
                    b7:ed:8b:dc:5b:62:dd:48:c5:40:2f:86:72:cd:28:
                    26:65:30:af:bd:90:8f:c8:62:46:b7:59:1e:36:35:
                    e2:e7:b6:24:36:90:b0:3a:4d:05:9f:72:c8:8d:3f:
                    67:a8:6d:4a:2a:ed:e9:49:d4:b9:7b:ab:ea:5f:81:
                    cc:33:5a:22:d0:d5:0f:a7:f1:b6:ee:33:d1:85:b5:
                    20:80:ae:ef:a6:75:cb:fa:4c:92:4e:b2:4d:b1:e7:
                    a4:5c:cc:1b:fa:e3:6c:07:16:c7:3c:12:60:34:64:
                    99:69:41:8c:d8:e8:20:dc:60:4a:40:49:c1:b8:26:
                    05:07:c3:98:c0:25:61:98:8e:5d:90:6f:68:68:84:
                    6b:99:da:ae:cb:53:96:e6:40:52:6a:53:bc:0e:44:
                    4c:c1:2c:57:be:f0:37:18:fb:ba:eb:c3:2b:fe:cd:
                    8f:9f:4c:43:2d:ca:fa:ff:d3:d2:ea:3b:1c:3c:5a:
                    f5:19:be:9d:b7:02:cf:df:65:6f:b2:fd:c3:41:9b:
                    39:e5:b3:ea:8e:43:93:38:97:5a:62:79:be:95:82:
                    48:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C0:33:2C:24:9B:36:86:37:83:C1:9A:71:1A:C2:3F:02:B2:F2:6B
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9e:3c:53:ba:07:e7:1c:c9:0d:46:68:9e:0c:7b:13:9c:80:
         36:89:80:6b:c8:c6:0a:43:b3:70:95:7f:67:26:26:c4:3c:5a:
         55:c1:3d:18:de:8e:de:82:ce:51:4f:04:3c:c0:6b:b2:b5:6d:
         28:ca:6d:86:ad:14:6f:cf:6a:15:9d:d4:72:41:5e:fd:f9:5c:
         40:bf:a9:98:9a:84:4d:8f:6e:00:70:f6:01:e6:63:b4:57:9d:
         94:8f:5e:f0:f4:00:41:42:a1:77:a5:5d:d7:b2:d6:f2:5c:c3:
         d4:d6:49:a2:c6:15:a2:da:b8:cb:d7:36:91:59:e6:9c:1b:e5:
         2d:10:ef:39:f2:4b:c3:41:f0:bf:e7:d8:b4:c2:81:3e:c9:14:
         d1:f7:82:84:b8:c1:ed:a5:ff:ec:27:b2:90:b1:26:1d:46:d3:
         08:cd:6c:ad:dc:66:3d:35:f3:25:ef:f7:99:c7:2d:b0:dd:a3:
         a8:dc:22:14:d2:48:53:70:ca:71:51:b9:1f:93:23:c9:9a:f6:
         ef:af:49:b0:96:14:74:cb:91:42:32:88:b9:2c:91:06:a0:18:
         ab:6c:ea:8a:58:dc:e1:45:9d:aa:6b:dc:70:53:99:2f:10:5f:
         5b:73:74:5e:44:b6:e8:54:8f:ac:6e:a7:59:18:2e:f3:b7:fb:
         2a:59:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:52:04 2026 by rpki-client