This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
File:                     TYBwR6bhsNMLr2Qme_lSJIr906k.mft (raw, json)
Hash identifier:          YXemKpDXPS3Bf8bqd2KrCXfIldMLWuWdintJGpBNqp4=
Subject key identifier:   50:D1:07:FD:C1:68:C1:46:9E:88:6A:DC:87:60:D4:C7:DD:F4:1B:E5
Authority key identifier: 4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
Certificate issuer:       /CN=A91F7D5E/serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
Manifest number:          04
Signing time:             Sat 17 Jan 2026 07:09:19 +0000
Manifest this update:     Sat 17 Jan 2026 07:09:19 +0000
Manifest next update:     Sat 24 Jan 2026 07:09:19 +0000
Files and hashes:         1: TYBwR6bhsNMLr2Qme_lSJIr906k.crl (hash: A8YF0x4XNxdrQP31FrsBs4CdHhzwOhq90dDGQ9I3obI=)
                          2: 07DEEBF0F20311F09027AFE1496F56BC.roa (hash: uhKOf6J41v8UfFe3z/uKWb3z+BSl3Uo3Du5bhDGPMic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D5E, serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
        Validity
            Not Before: Jan 17 07:09:19 2026 GMT
            Not After : Jan 24 07:09:19 2026 GMT
        Subject: CN=696b359f-4db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:ea:7d:33:78:89:0c:22:85:fe:b1:28:09:
                    99:fb:f6:4e:d0:41:47:cf:d1:0f:2d:09:d9:99:7a:
                    45:4b:41:94:57:38:28:fa:be:96:b2:06:e5:37:d2:
                    5e:3b:5c:41:8b:29:13:10:8f:ca:b4:98:34:1f:95:
                    09:ee:ba:11:34:9d:0b:4e:f8:63:ed:dc:ae:e5:fc:
                    dc:c5:1b:8f:98:c2:d3:e1:f6:a2:e2:ab:c4:5a:b9:
                    ae:8d:40:6e:ad:da:68:cc:6b:54:a6:7d:98:76:b4:
                    10:9b:a1:d6:69:f7:ee:94:09:61:74:b6:94:23:0a:
                    12:b0:08:ca:bc:51:65:d6:43:4a:73:98:4f:56:6e:
                    8f:45:52:8b:91:14:cf:02:bc:10:bc:70:d9:d1:f9:
                    32:a3:92:59:21:21:f0:85:aa:d7:95:36:df:d8:2d:
                    6d:e9:0e:83:76:90:8b:45:2c:04:7d:80:32:79:e2:
                    16:1b:69:96:94:d8:e5:e5:63:95:24:b7:90:ff:0b:
                    55:86:64:44:13:68:53:d0:cf:7f:15:58:21:8b:67:
                    6c:7d:17:61:4c:e9:30:b9:31:f6:17:83:32:14:02:
                    0d:2f:44:ca:ee:1a:1e:54:fe:29:1e:b1:ca:3f:8d:
                    7e:aa:bf:5e:11:ef:42:e3:93:14:2c:46:56:9b:b1:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D1:07:FD:C1:68:C1:46:9E:88:6A:DC:87:60:D4:C7:DD:F4:1B:E5
            X509v3 Authority Key Identifier:
                keyid:4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:2c:d7:9b:6e:b0:3f:e2:bb:86:aa:dd:c2:06:30:d2:2a:
         01:a7:c7:c2:19:3e:e3:18:1d:bc:34:d0:a8:0a:97:ec:6c:0a:
         45:f1:1c:c9:0f:91:3a:cf:49:93:cc:d3:61:b2:f9:6a:f6:90:
         63:d7:6c:9c:68:b8:93:87:97:ac:94:98:77:5d:38:64:f4:6c:
         45:da:e5:6d:15:4b:b2:6d:c4:3c:1d:0e:78:b8:e4:6b:d2:43:
         83:7a:4c:b0:9a:89:4c:8c:8e:8f:f4:88:41:93:80:b8:fe:7d:
         58:72:6b:41:bc:5b:df:af:ae:12:89:c3:a1:56:4d:61:72:51:
         98:dd:b2:c5:2d:13:c0:ae:a0:80:b0:d1:f7:73:a4:4b:64:f0:
         5e:e6:02:62:0b:1e:2b:8f:0a:7f:41:68:fe:f1:94:e8:f4:ec:
         d3:d7:cb:7a:ae:57:be:ab:eb:cc:e5:85:fc:28:55:58:e7:6f:
         2f:eb:05:eb:67:cb:d5:66:00:0f:60:86:3c:c6:68:23:c5:24:
         ee:5b:d6:4e:b1:29:4b:35:c1:17:3c:b8:2c:f4:5f:76:bd:dd:
         bf:08:a4:d6:ef:37:ae:9c:26:a9:c3:49:86:11:f6:40:3f:88:
         d0:f2:7f:ab:6f:99:92:c9:f7:8c:a3:e9:c5:07:cb:9d:83:81:
         23:fa:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:12:53 2026 by rpki-client