This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File:                     UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier:          ilst8bMgORr0Rk3SLtvydGYiH3XoBZO9Sq6WNG2gBuo=
Subject key identifier:   54:DD:C7:8C:0B:78:27:9D:B2:9D:02:6E:EB:A4:21:CB:BD:AE:1F:96
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer:       /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial:       105B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number:          1053
Signing time:             Fri 16 Jan 2026 15:34:01 +0000
Manifest this update:     Fri 16 Jan 2026 15:34:01 +0000
Manifest next update:     Fri 23 Jan 2026 15:34:01 +0000
Files and hashes:         1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: 2ModMyvW7v7+h8gQWIdc0tbjWl1jE9A3H4k4C2c2JHs=)
                          2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: IX9d9TIKewpWNDigl1ZdHd+4/uZo37EA6gD3nX3eWyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4187 (0x105b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
        Validity
            Not Before: Jan 16 15:34:01 2026 GMT
            Not After : Jan 23 15:34:01 2026 GMT
        Subject: CN=696a5a69-b669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:1e:c1:3a:c3:fc:d9:9b:cc:8a:91:a5:ab:
                    f0:87:f0:f3:64:33:91:41:f5:b5:83:c5:67:bc:60:
                    04:9f:93:01:b8:99:6d:67:b0:56:4d:5d:61:f2:79:
                    8a:97:2a:68:93:ec:43:bb:cc:39:18:8a:ea:e8:1f:
                    99:af:65:6b:c6:4d:f3:36:2c:fb:f5:7c:80:48:54:
                    8a:82:2d:83:d1:7c:be:28:98:e7:9b:2c:db:e3:cd:
                    85:e2:54:35:16:57:9d:37:b8:08:b2:4f:7b:86:c2:
                    79:95:d3:68:c4:4f:50:8d:4d:9f:9a:37:1a:bd:23:
                    6f:8b:b5:b4:bd:14:55:29:18:3c:f2:ab:0c:c1:ac:
                    50:4f:98:36:5f:f7:15:af:9a:ea:1f:1b:a8:5b:12:
                    48:c8:0c:33:04:c1:fc:24:9f:95:aa:3a:1c:22:47:
                    a0:e9:69:62:a2:c7:e1:2c:9e:ef:bb:1c:3c:08:96:
                    fb:86:41:0a:d1:1c:e5:34:d5:3e:38:ff:16:3a:2e:
                    f2:92:ec:01:8b:1d:09:d6:a4:55:e6:86:b3:d5:bf:
                    08:b3:5c:82:7f:13:d8:86:bf:81:88:19:d9:32:b6:
                    e5:6c:f5:2d:27:1c:cf:cc:e8:ec:70:74:9a:34:ce:
                    39:16:ad:31:cc:73:4a:37:be:7c:cc:da:f9:ae:85:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DD:C7:8C:0B:78:27:9D:B2:9D:02:6E:EB:A4:21:CB:BD:AE:1F:96
            X509v3 Authority Key Identifier:
                keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:00:24:7e:51:ab:a3:ef:fb:fe:04:a6:88:e6:5f:1e:f6:78:
         ee:23:19:51:7a:b1:57:c5:5f:b1:25:69:c6:ec:87:f2:30:19:
         42:b0:9e:4d:11:dc:bb:14:2d:7d:88:df:da:dd:40:d2:58:a8:
         4d:90:18:e7:21:87:9f:f9:fd:12:41:8e:c0:e0:21:2d:e1:eb:
         d2:23:1e:5f:88:ed:d1:37:cb:94:e8:a1:28:b2:59:1b:f6:5b:
         77:20:93:af:cc:56:58:6e:9c:7b:42:27:18:de:dd:7a:64:2f:
         50:99:6a:93:5f:8a:30:ac:99:14:4c:75:52:f2:0c:7e:ac:6b:
         04:5a:7b:1e:ed:5d:71:36:52:0f:06:f1:ce:0d:f9:d7:aa:19:
         00:61:e7:1c:c9:aa:a6:cd:5f:b8:2d:03:6e:dd:8d:66:23:2f:
         c6:53:0b:ca:19:28:13:2b:49:cb:71:95:96:60:6d:c1:dd:c7:
         78:a4:e2:01:c9:90:78:ba:d7:df:33:58:8c:dd:39:d2:27:ee:
         3f:99:72:e7:4d:93:aa:98:9e:57:c4:0b:d8:5a:d4:80:af:21:
         0d:3f:e9:38:1f:9d:bf:7d:c1:9e:a7:23:ac:2b:7a:31:0f:de:
         c7:5d:a2:6b:05:5d:fa:58:80:c3:0e:4e:86:9d:b1:0f:b9:fd:
         09:5e:64:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:10:28 2026 by rpki-client