This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
File:                     tendxr8J-JRYVWCHRC2UjEQDRTA.mft (raw, json)
Hash identifier:          61RTzOWCtH2V2KIINbw5vvXW1zOAoBfQvv78E3Tl+8Y=
Subject key identifier:   71:A4:EF:36:02:50:B2:55:5F:DA:3D:85:EB:4F:D4:FA:73:E1:75:F0
Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30
Certificate issuer:       /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
Manifest number:          0215
Signing time:             Sun 11 Jan 2026 01:31:45 +0000
Manifest this update:     Sun 11 Jan 2026 01:31:44 +0000
Manifest next update:     Sun 18 Jan 2026 01:31:44 +0000
Files and hashes:         1: tendxr8J-JRYVWCHRC2UjEQDRTA.crl (hash: IZEdW718RVoMS5pgBJFOTctE/swCJEKDxUNI4bRanTM=)
                          2: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (hash: 9/AcvjliR95434ywgMrtXlXwFBmsQrBKTnsFFaaHZi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl
                          rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 01:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915568B, serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
        Validity
            Not Before: Jan 11 01:31:44 2026 GMT
            Not After : Jan 18 01:31:44 2026 GMT
        Subject: CN=6962fd81-7a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f0:d5:13:b0:f7:47:d7:2e:53:e5:78:35:15:
                    36:b7:30:eb:26:d0:e2:f5:ff:40:a1:ce:06:12:b1:
                    ae:88:06:c5:6c:c3:ae:7c:28:20:76:c5:96:46:cb:
                    58:d0:a1:a9:83:07:5a:7c:6b:96:02:35:f9:36:57:
                    ba:3c:ff:5e:4b:ee:a8:01:ff:1b:d2:cd:ca:d1:2b:
                    c7:7f:54:d1:2d:3f:68:05:26:18:69:e9:d0:32:bf:
                    6b:3b:72:5d:d1:51:cf:89:c0:32:9b:92:a8:13:62:
                    82:48:a9:b6:df:fb:7a:b6:98:8f:2a:c7:10:83:87:
                    48:6c:56:9a:dd:50:28:10:61:72:9d:63:81:6e:3b:
                    82:fd:05:f8:47:d3:fd:02:3e:34:0e:ef:69:f6:f1:
                    01:5a:ea:9d:f7:7b:85:22:59:77:3f:47:31:68:a9:
                    d5:d9:e8:f7:76:cd:4b:fc:0a:be:c3:c4:63:30:7b:
                    b9:5f:7a:b3:6e:39:9a:08:80:be:a6:03:f4:f8:7c:
                    7f:7e:71:b4:ac:2e:e7:37:55:5e:50:86:24:bf:a8:
                    47:fb:3a:82:31:08:ec:91:11:48:19:07:bc:26:ab:
                    fb:68:63:fd:bd:1f:5c:40:bd:ce:c6:25:ef:d0:38:
                    a6:2e:b5:a6:be:7d:69:c6:00:9b:f3:74:f8:88:29:
                    a4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A4:EF:36:02:50:B2:55:5F:DA:3D:85:EB:4F:D4:FA:73:E1:75:F0
            X509v3 Authority Key Identifier:
                keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:91:a5:2c:18:41:3c:ef:b4:d0:54:11:be:b6:34:b8:fa:a6:
         42:35:b5:97:f2:96:10:21:ef:8d:ca:fa:81:3f:7b:e9:7d:c3:
         2f:53:b0:26:cc:75:2f:71:ba:3e:0c:f5:2f:a8:9d:61:38:a8:
         27:c1:5e:a6:2c:85:43:89:94:73:24:3e:54:2a:e2:e8:bb:58:
         17:ff:27:f3:27:87:68:17:bb:ee:ff:82:93:1e:44:e9:93:ae:
         27:aa:a6:87:73:e5:0b:e6:e7:4d:ab:a0:6c:cf:66:f8:7d:de:
         bb:3f:fc:59:a0:57:5f:b5:d7:30:78:32:74:36:41:81:7a:f6:
         43:5d:b3:34:ae:38:67:47:a7:16:77:bc:da:ed:a9:6e:d1:6c:
         60:04:a9:ab:0b:9c:56:b6:b1:5e:56:bb:1d:91:1a:d0:80:16:
         db:34:45:a7:3b:50:a1:3e:0d:c1:20:c9:aa:ca:a3:7f:ba:ab:
         30:14:3d:1a:9f:17:e9:62:6b:57:2c:ed:c1:62:50:ea:67:a1:
         87:9a:91:f4:0f:dc:bb:56:8c:ea:f1:a3:44:31:53:e9:76:36:
         7b:87:06:90:cd:91:ff:72:0a:c0:03:e5:da:72:8a:9e:f5:17:
         95:e5:fe:8c:a0:7e:d7:e2:de:24:80:74:a0:ed:42:ef:25:22:
         f1:03:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:15:36 2026 by rpki-client