This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
File:                     TSkgNoEWBfjziJgBUhslcnoc12U.mft (raw, json)
Hash identifier:          MYLaMWWLXLExtP9X1INAf0MNZSi1ZhV/K4YIRQVAhME=
Subject key identifier:   AF:27:98:92:2A:F2:0F:E9:39:31:46:A5:36:F0:5B:42:26:C2:DB:D8
Authority key identifier: 4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
Certificate issuer:       /CN=A9154DE2/serialNumber=4D292036811605F8F3889801521B25727A1CD765
Certificate serial:       037B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
Manifest number:          0377
Signing time:             Sun 11 Jan 2026 00:03:17 +0000
Manifest this update:     Sun 11 Jan 2026 00:03:16 +0000
Manifest next update:     Sun 18 Jan 2026 00:03:16 +0000
Files and hashes:         1: TSkgNoEWBfjziJgBUhslcnoc12U.crl (hash: CVn9bXq2QNW6GZNHaPlL6htZbMjJkEBIqYRjQ9ZLlbw=)
                          2: EB4F77B8D5E411ECB31AC843C4F9AE02.roa (hash: T+/E3ylnKO/PWrVwuEVYj1NKgrY3/SChhT5eNdM1fbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
                          rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 00:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891 (0x37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154DE2, serialNumber=4D292036811605F8F3889801521B25727A1CD765
        Validity
            Not Before: Jan 11 00:03:16 2026 GMT
            Not After : Jan 18 00:03:16 2026 GMT
        Subject: CN=6962e8c5-6b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:ea:b6:3f:65:ed:85:35:ac:39:77:2b:cf:
                    37:9a:f9:a7:df:97:f5:38:35:63:4b:c1:50:e2:db:
                    a6:e8:12:8a:33:ac:d8:1d:54:56:5d:19:4a:db:56:
                    eb:cf:ee:77:73:05:7b:0b:c0:af:60:dd:77:b0:98:
                    49:03:ce:c4:c4:b8:ac:8c:e8:d3:81:9b:51:87:63:
                    f9:04:e6:a6:3d:7f:64:be:9c:b8:e8:7f:12:31:80:
                    67:e7:d4:d5:c7:2e:10:30:59:f0:17:46:d8:17:98:
                    68:e0:ec:0e:fd:d6:38:15:82:64:00:01:c5:2a:0e:
                    77:cf:31:9c:7e:f8:5d:0b:b4:ef:91:f5:15:b1:57:
                    c8:78:35:58:50:1c:b4:22:cb:89:f2:97:9a:83:a3:
                    a5:3c:b1:b5:89:6b:e7:f2:ac:ea:2c:21:b0:03:20:
                    a0:bf:bb:b9:d1:e9:a0:c6:cc:1c:1d:e7:8c:6b:74:
                    43:e4:41:92:88:9d:4b:54:21:2b:b6:c7:04:3f:9e:
                    8c:16:3c:59:ff:6a:07:ce:c3:4d:ec:68:36:95:9d:
                    9d:21:8c:59:e6:71:c3:3f:a3:07:c2:61:c6:7d:56:
                    ab:13:fe:84:15:03:fc:7f:39:fe:56:01:cc:b9:92:
                    c5:66:0a:4d:66:67:72:d1:81:98:ab:34:d8:15:01:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:27:98:92:2A:F2:0F:E9:39:31:46:A5:36:F0:5B:42:26:C2:DB:D8
            X509v3 Authority Key Identifier:
                keyid:4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5d:a0:de:32:31:6d:25:7a:6a:8f:6d:a6:51:ab:7d:62:94:
         d3:c0:fc:72:d0:ca:ec:f9:99:ab:4e:02:b3:7f:38:7f:b6:92:
         22:d7:e5:07:83:5c:f2:4a:56:32:71:a0:00:d2:58:18:48:6f:
         09:1d:2a:ae:1d:6b:11:a9:99:d2:14:9e:c8:98:e5:d7:dd:58:
         6b:a7:cf:c6:f7:81:5d:68:3e:37:91:8c:a8:02:72:80:7f:33:
         2b:35:99:50:ba:e0:51:b3:7d:a2:3b:ab:f8:91:67:4a:27:82:
         97:fe:6c:be:69:a5:10:4e:25:38:50:4b:dc:74:01:dd:19:97:
         7e:45:0d:f9:33:f0:00:ff:bb:b9:5d:d3:4f:5d:d0:5f:10:ba:
         71:cf:ae:2f:41:f1:c7:4c:2e:f2:4b:d5:13:4a:51:f2:46:18:
         51:87:ea:6b:0c:ce:15:20:2c:47:4e:4c:70:28:bd:03:a5:19:
         d4:6c:49:58:c7:fd:e2:67:8d:c3:96:d3:fe:0c:78:f1:fd:94:
         0d:2d:3c:d6:1f:4b:27:02:42:a3:77:c9:18:77:fc:a5:7c:f2:
         a0:cb:b1:a1:22:96:2c:74:2b:43:e2:59:b3:5d:7c:1c:f0:43:
         34:04:c5:b2:f2:af:fc:9f:11:a6:db:29:59:5a:f0:33:f3:14:
         20:d5:37:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRERTIxMTAvBgNVBAUTKDREMjkyMDM2ODExNjA1RjhGMzg4OTgwMTUyMUIyNTcy
N0ExQ0Q3NjUwHhcNMjYwMTExMDAwMzE2WhcNMjYwMTE4MDAwMzE2WjAYMRYwFAYD
VQQDDA02OTYyZThjNS02YjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzR/qtj9l7YU1rDl3K883mvmn35f1ODVjS8FQ4tum6BKKM6zYHVRWXRlK21br
z+53cwV7C8CvYN13sJhJA87ExLisjOjTgZtRh2P5BOamPX9kvpy46H8SMYBn59TV
xy4QMFnwF0bYF5ho4OwO/dY4FYJkAAHFKg53zzGcfvhdC7TvkfUVsVfIeDVYUBy0
IsuJ8peag6OlPLG1iWvn8qzqLCGwAyCgv7u50emgxswcHeeMa3RD5EGSiJ1LVCEr
tscEP56MFjxZ/2oHzsNN7Gg2lZ2dIYxZ5nHDP6MHwmHGfVarE/6EFQP8fzn+VgHM
uZLFZgpNZmdy0YGYqzTYFQGWcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8nmJIq
8g/pOTFGpTbwW0ImwtvYMB8GA1UdIwQYMBaAFE0pIDaBFgX484iYAVIbJXJ6HNdl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NERFMi8xQzU0MjJEMEQ1
REQxMUVDQTE0Q0M2MjNDNEY5QUUwMi9UU2tnTm9FV0JmanppSmdCVWhzbGNub2Mx
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RTa2dOb0VXQmZqemlKZ0JVaHNsY25vYzEyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NERFMi8xQzU0MjJEMEQ1REQxMUVDQTE0Q0M2MjNDNEY5QUUwMi9UU2tnTm9FV0Jm
anppSmdCVWhzbGNub2MxMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgXaDeMjFtJXpqj22mUat9YpTTwPxy0Mrs+ZmrTgKzfzh/tpIi1+UH
g1zySlYycaAA0lgYSG8JHSquHWsRqZnSFJ7ImOXX3Vhrp8/G94FdaD43kYyoAnKA
fzMrNZlQuuBRs32iO6v4kWdKJ4KX/my+aaUQTiU4UEvcdAHdGZd+RQ35M/AA/7u5
XdNPXdBfELpxz64vQfHHTC7yS9UTSlHyRhhRh+prDM4VICxHTkxwKL0DpRnUbElY
x/3iZ43DltP+DHjx/ZQNLTzWH0snAkKjd8kYd/ylfPKgy7GhIpYsdCtD4lmzXXwc
8EM0BMWy8q/8nxGm2ylZWvAz8xQg1Te1
-----END CERTIFICATE-----
Generated at Mon Jan 12 02:25:21 2026 by rpki-client