This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
File:                     tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json)
Hash identifier:          Dgs5ngUKTIpixiedDVVuj2XxQR42XJ+11VayaJkdlak=
Subject key identifier:   A7:84:FD:58:95:27:A2:0E:64:6D:0B:63:FB:3A:DF:B2:1E:18:D7:8F
Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
Certificate issuer:       /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
Manifest number:          0118
Signing time:             Thu 01 Jan 2026 04:24:41 +0000
Manifest this update:     Thu 01 Jan 2026 04:24:40 +0000
Manifest next update:     Thu 08 Jan 2026 04:24:40 +0000
Files and hashes:         1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: Qkd/1TUndNqSD/p7/sgfnBwhaQhqNZ7HJw9BAQ51EP0=)
                          2: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: ZlBqKGquKmDZSHNnRJSZITSYuAIz8r1LwmFTYmRFcj4=)
                          3: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: RTDmiAUTa+6e7BNeD1q7cr5hG3t1MJJWblXaDUXHJew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
                          rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 04:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
        Validity
            Not Before: Jan  1 04:24:40 2026 GMT
            Not After : Jan  8 04:24:40 2026 GMT
        Subject: CN=6955f709-be25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:1d:b3:eb:dc:b6:36:c6:f4:70:c6:5f:47:
                    7d:87:94:54:12:e4:a3:2f:96:59:89:86:89:d1:6b:
                    46:d5:fa:72:15:81:b3:44:12:52:e1:8f:fd:73:32:
                    68:e5:fc:e4:89:66:61:bf:61:8d:c8:0a:cd:24:f4:
                    df:fe:e7:b5:e5:40:25:38:b2:10:82:6b:02:31:9d:
                    d5:e3:50:ce:28:68:96:2f:26:d2:22:26:78:70:04:
                    b0:3d:8f:2f:60:80:db:11:7b:df:5b:8e:b9:8b:6b:
                    45:c3:21:5c:29:81:32:85:c5:f4:98:54:91:38:81:
                    f3:3a:6d:e8:87:5e:39:8c:74:4b:49:c5:23:a4:cf:
                    0a:d0:c9:21:40:45:d6:fc:8c:72:5e:16:13:15:49:
                    b7:23:93:b3:63:a7:df:b1:ba:78:85:66:ab:da:b0:
                    71:35:82:a3:58:68:1d:7a:5f:f0:4e:68:3f:1e:75:
                    26:9c:a9:6e:e7:c0:de:0f:14:b4:87:8e:38:a0:74:
                    8d:a8:7a:6b:fb:d3:b6:16:9b:02:54:52:35:ed:16:
                    73:63:7b:d2:5a:a3:dd:3c:47:f5:69:cf:cc:18:f8:
                    7e:32:77:37:f9:d0:8b:50:0d:e7:9a:26:65:73:46:
                    8e:92:42:05:fc:b3:a2:2b:16:01:4a:e3:43:90:94:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:84:FD:58:95:27:A2:0E:64:6D:0B:63:FB:3A:DF:B2:1E:18:D7:8F
            X509v3 Authority Key Identifier:
                keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:08:b6:62:5b:6f:e5:9d:b6:83:48:cf:2a:c8:61:37:6e:1f:
         43:f8:83:35:f6:75:5e:22:c3:f8:b4:65:9e:8b:5c:63:8d:40:
         d2:16:f3:85:39:18:40:cc:42:52:bf:55:b9:7f:40:8c:25:b2:
         f0:b9:94:9b:fc:2e:1f:e7:bb:80:3c:32:c4:0d:ed:ce:bd:31:
         ab:99:16:e6:4c:84:5a:70:a9:70:0d:aa:d6:14:34:a5:69:6d:
         03:e7:43:ad:6a:30:b1:13:b3:19:ec:6e:b1:ec:c8:42:e5:c0:
         3b:8c:47:82:82:34:34:ab:e4:f7:54:fc:da:cc:5e:14:37:c8:
         6c:42:3d:a3:8b:40:b3:2b:cd:73:49:ba:f3:fd:e9:89:bb:99:
         e2:95:1e:a0:57:1c:f5:bf:61:88:95:74:63:d9:8c:6b:69:8f:
         2f:f4:6f:fb:31:90:06:ed:56:1c:fb:03:9e:b4:45:e6:e2:b5:
         c7:65:76:e0:87:45:3c:68:be:80:0b:67:6f:ae:8d:ea:56:74:
         43:62:8f:3b:ad:03:0b:3c:c7:11:1c:49:a2:86:30:34:52:71:
         a0:98:89:41:ad:24:77:d7:47:b3:3f:cb:b8:79:fe:fb:c7:a6:
         89:77:64:ce:1c:1e:67:fb:0f:70:2c:b6:b0:b1:55:3a:bd:5a:
         f7:5f:ea:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 11:04:34 2026 by rpki-client