This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
File:                     TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json)
Hash identifier:          UJkFT5p88PtPTHMkVFcRKk1xAz2myLhX3OpAuyqYVI0=
Subject key identifier:   40:C8:08:2E:65:3F:DC:79:C1:0E:AF:18:79:26:67:72:07:88:C1:05
Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
Certificate issuer:       /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
Manifest number:          0139
Signing time:             Sun 01 Feb 2026 03:57:50 +0000
Manifest this update:     Sun 01 Feb 2026 03:57:50 +0000
Manifest next update:     Sun 08 Feb 2026 03:57:50 +0000
Files and hashes:         1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: Kz7gGxorVX/OPhftAtoYv4qjZePgl42nh/x5DuBSuRw=)
                          2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: ktZfaMlA6IUEVI7ymclMb6B8SOgTxjLIP6VRKiXLA/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
                          rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Feb 2026 03:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
        Validity
            Not Before: Feb  1 03:57:50 2026 GMT
            Not After : Feb  8 03:57:50 2026 GMT
        Subject: CN=697ecf3e-e0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:e6:ec:fe:fe:ca:ef:e5:b4:77:cc:fc:ea:
                    7f:2b:c4:50:74:39:07:87:16:88:be:7f:8f:d4:22:
                    89:e1:d8:bb:9c:29:23:13:34:34:0b:73:87:0c:47:
                    6d:07:05:1d:35:25:fc:5d:e9:99:95:d5:91:12:45:
                    b3:b0:84:f7:af:95:84:0b:79:3f:54:81:b2:88:b6:
                    cc:e4:84:6b:11:ae:b3:53:6e:ab:21:a2:11:77:10:
                    96:8d:a9:c1:86:dc:e2:52:64:55:3c:a4:fc:2a:02:
                    e9:50:a6:bc:ee:cd:3a:bb:47:ba:8b:6a:f4:f7:c7:
                    05:60:7b:67:9a:e1:a9:e1:e1:e9:2c:99:fc:a9:b7:
                    af:43:41:b9:53:3e:3a:69:4d:a7:55:0e:cb:82:1d:
                    19:74:a4:63:90:14:36:f2:16:d3:bf:90:20:f3:8c:
                    97:2a:10:a5:24:51:ac:89:bf:04:1e:7a:f2:62:8e:
                    8b:db:ec:90:de:e5:c6:82:bc:1c:16:5f:32:45:6c:
                    ce:21:1d:55:b0:6e:12:02:12:9e:c9:a9:ab:bf:62:
                    cf:1d:81:65:10:f3:b6:53:14:f4:81:c2:77:04:b7:
                    d0:83:f8:41:09:4b:5f:22:fc:ee:4d:c9:30:8c:03:
                    01:49:21:1e:38:f0:ca:c2:d3:d0:6f:8c:05:f5:25:
                    43:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C8:08:2E:65:3F:DC:79:C1:0E:AF:18:79:26:67:72:07:88:C1:05
            X509v3 Authority Key Identifier:
                keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:80:07:75:1e:8c:43:cc:de:57:42:10:dc:97:02:e1:64:9d:
         8a:c5:4c:13:02:f6:f4:20:da:a4:8a:6b:db:c2:4a:24:11:5e:
         44:80:6e:20:9b:5c:1b:53:7b:20:99:6c:07:8d:6b:86:02:09:
         fb:4b:31:cb:59:aa:60:95:de:14:50:04:0a:74:e9:a7:8d:23:
         b9:16:2b:63:d7:6e:89:34:61:d4:51:e1:bd:c8:e5:d2:ba:04:
         25:5d:20:76:f2:39:ee:11:41:b0:28:a4:f6:0c:3c:aa:f2:d4:
         d5:c2:fc:6f:4d:d0:60:1e:46:23:a2:03:53:c9:59:d9:8a:9e:
         7f:bc:09:6f:ed:c6:13:65:ff:34:64:b8:d0:65:78:20:d0:5a:
         92:60:70:3a:ff:7e:18:fb:94:45:b4:c1:75:84:fa:0a:a6:f0:
         f1:b7:0d:8d:67:21:38:96:e7:7d:b6:9f:02:27:44:0e:ef:50:
         51:c8:39:02:ad:83:51:4e:45:8d:4e:a8:b3:e9:c7:38:7c:62:
         c4:82:96:3c:8f:78:b8:1d:b4:a0:37:f1:f0:e5:6b:28:25:9b:
         a1:9b:16:42:de:58:65:b8:b9:85:2e:b1:f0:2e:d7:02:ee:78:
         9b:cc:d1:02:3b:95:cf:5d:91:f4:00:b2:25:d9:08:ac:a7:06:
         e5:df:7f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 01:54:28 2026 by rpki-client