This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
File:                     t45_48stS1oeuSimkLxled-IG-k.mft (raw, json)
Hash identifier:          i8QybLaK10u54e8hlzceVtWz07MyEpJi8H0ES6yWXms=
Subject key identifier:   04:EA:A1:82:DB:E2:9F:37:68:38:11:AF:77:F7:C2:76:7B:88:49:F9
Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9
Certificate issuer:       /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
Manifest number:          013A
Signing time:             Sat 17 Jan 2026 03:37:23 +0000
Manifest this update:     Sat 17 Jan 2026 03:37:22 +0000
Manifest next update:     Sat 24 Jan 2026 03:37:22 +0000
Files and hashes:         1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: onsATmTYmxMTCWy5FP8u+lJQiDZMF5MnkeI93LGrlxY=)
                          2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: 0tGMxqd+nrlGxUWseUpDWpwKJjNQ5GQu0j7Ro3HieYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl
                          rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 03:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
        Validity
            Not Before: Jan 17 03:37:22 2026 GMT
            Not After : Jan 24 03:37:22 2026 GMT
        Subject: CN=696b03f3-eb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:61:50:d2:0f:7d:70:ef:3f:db:21:c5:63:
                    a0:4b:5f:41:40:92:d3:2b:2f:f4:79:88:ff:9e:ed:
                    85:14:96:1b:68:5c:f6:45:3f:28:7a:41:3c:de:73:
                    9e:82:60:ae:4c:76:64:da:5a:89:9c:77:84:58:3c:
                    23:5a:1d:33:b0:28:1d:22:47:d3:ee:f9:71:6a:01:
                    32:d4:b5:80:b9:76:43:e4:46:dd:8d:21:ed:ad:7b:
                    df:d0:a7:38:a5:7f:55:79:8c:82:f3:02:7d:eb:b4:
                    ed:86:23:1a:ce:e6:04:48:29:62:4b:07:68:88:51:
                    c0:7c:5f:b8:cf:1e:23:3d:a3:8e:67:7f:27:69:9a:
                    28:24:66:1d:78:d6:c1:c2:bd:14:44:2f:4b:a6:95:
                    9c:1d:8b:e1:bc:9a:d1:31:84:9c:fc:38:3f:55:8a:
                    f9:71:de:b6:8f:e0:19:36:59:6a:77:cc:b3:2d:3b:
                    88:80:0c:00:87:20:44:eb:51:f8:9d:08:28:52:ff:
                    dc:c5:e7:3a:71:37:17:e4:59:d8:a4:0b:57:4b:b6:
                    78:fd:40:f7:76:26:d5:68:c1:b5:94:6b:2d:e5:7c:
                    0d:ef:f2:6d:10:3f:47:ef:c7:21:aa:d6:9e:e4:21:
                    a5:b4:04:3f:fb:78:79:51:46:99:30:02:f8:e2:5f:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EA:A1:82:DB:E2:9F:37:68:38:11:AF:77:F7:C2:76:7B:88:49:F9
            X509v3 Authority Key Identifier:
                keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:2c:a0:1a:73:0b:99:80:1b:1d:5e:ec:ff:18:1f:4a:8f:36:
         2b:a3:7d:b0:11:e4:71:d8:35:a8:10:cf:8c:51:e0:57:ec:8e:
         65:06:c5:2c:e4:75:c8:1d:42:2c:e7:ce:45:79:b9:84:79:e4:
         59:70:f3:4e:2a:5e:96:22:ab:2b:82:bd:04:c9:bb:7d:58:68:
         c2:74:1b:e5:23:33:b7:ec:3d:6b:ec:00:fe:38:d0:c4:7e:51:
         65:4d:70:1e:1f:95:08:f8:30:2b:07:83:c3:51:49:28:d7:e5:
         58:a6:94:70:99:00:df:bf:e3:29:2e:6e:f6:87:b9:60:c1:2e:
         28:d0:35:b8:c5:bb:ea:88:e4:af:22:59:c2:10:46:ce:83:12:
         30:ea:f9:91:ca:be:c6:6f:e4:1e:4b:20:66:fa:21:10:ef:c4:
         71:9c:5e:5b:d4:41:fd:97:48:7c:32:a6:b0:21:9f:6d:bf:eb:
         e6:93:b7:94:38:8b:c3:5a:cf:cc:10:c0:9d:12:38:20:2a:4b:
         ea:a9:b9:0c:f8:8f:ed:cb:0b:3a:c6:6a:57:32:9f:23:c9:28:
         74:0d:e5:b7:44:c8:97:91:15:6a:8b:28:b2:26:2f:0f:26:7d:
         ba:aa:af:a8:22:64:b9:6b:a3:7f:61:78:b8:26:6d:2d:82:cb:
         ab:9d:05:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIyRTMxMTAvBgNVBAUTKEI3OEU3RkUzQ0IyRDRCNUExRUI5MjhBNjkwQkM2NTc5
REY4ODFCRTkwHhcNMjYwMTE3MDMzNzIyWhcNMjYwMTI0MDMzNzIyWjAYMRYwFAYD
VQQDDA02OTZiMDNmMy1lYjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApehhUNIPfXDvP9shxWOgS19BQJLTKy/0eYj/nu2FFJYbaFz2RT8oekE83nOe
gmCuTHZk2lqJnHeEWDwjWh0zsCgdIkfT7vlxagEy1LWAuXZD5EbdjSHtrXvf0Kc4
pX9VeYyC8wJ967TthiMazuYESCliSwdoiFHAfF+4zx4jPaOOZ38naZooJGYdeNbB
wr0URC9LppWcHYvhvJrRMYSc/Dg/VYr5cd62j+AZNllqd8yzLTuIgAwAhyBE61H4
nQgoUv/cxec6cTcX5FnYpAtXS7Z4/UD3dibVaMG1lGst5XwN7/JtED9H78chqtae
5CGltAQ/+3h5UUaZMAL44l/ukwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATqoYLb
4p83aDgRr3f3wnZ7iEn5MB8GA1UdIwQYMBaAFLeOf+PLLUtaHrkoppC8ZXnfiBvp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy83QUE4OTQzRTE3
MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMxb2V1U2lta0x4bGVkLUlH
LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Q0NV80OHN0UzFvZXVTaW1rTHhsZWQtSUctay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjJFMy83QUE4OTQzRTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMx
b2V1U2lta0x4bGVkLUlHLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDZLKAacwuZgBsdXuz/GB9KjzYro32wEeRx2DWoEM+MUeBX7I5lBsUs
5HXIHUIs585FebmEeeRZcPNOKl6WIqsrgr0Eybt9WGjCdBvlIzO37D1r7AD+ONDE
flFlTXAeH5UI+DArB4PDUUko1+VYppRwmQDfv+MpLm72h7lgwS4o0DW4xbvqiOSv
IlnCEEbOgxIw6vmRyr7Gb+QeSyBm+iEQ78RxnF5b1EH9l0h8MqawIZ9tv+vmk7eU
OIvDWs/MEMCdEjggKkvqqbkM+I/tyws6xmpXMp8jySh0DeW3RMiXkRVqiyiyJi8P
Jn26qq+oImS5a6N/YXi4Jm0tgsurnQV5
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:11:15 2026 by rpki-client