This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
File:                     tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json)
Hash identifier:          yNgCWXC+uW7KM8b/OEzNYnr0f8hT56CoWlMuBH7mB3M=
Subject key identifier:   A6:26:16:32:01:F8:7A:28:96:A3:69:FD:59:BC:BB:37:21:DD:84:F8
Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
Certificate issuer:       /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Certificate serial:       04C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
Manifest number:          04BE
Signing time:             Sat 10 Jan 2026 23:06:41 +0000
Manifest this update:     Sat 10 Jan 2026 23:06:40 +0000
Manifest next update:     Sat 17 Jan 2026 23:06:40 +0000
Files and hashes:         1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: n61wPpys8svUEhbHR+p0rwJUlxdAig1DmbXsmDFEfs4=)
                          2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: iL8DbZfU13LX2Ap/5AtahLEn5kXxcngJgS8iYsEF4yY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 23:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
        Validity
            Not Before: Jan 10 23:06:40 2026 GMT
            Not After : Jan 17 23:06:40 2026 GMT
        Subject: CN=6962db81-6cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:00:7d:d7:a8:25:ed:89:21:97:b2:29:42:
                    99:e6:30:3d:14:51:56:69:9e:9e:48:06:47:93:59:
                    95:38:9e:bf:ee:73:0f:d0:79:2d:81:cf:34:1f:0c:
                    68:ff:e7:78:7e:e9:b9:03:e4:eb:65:20:fb:58:c0:
                    2b:6a:cf:37:0a:bf:b7:9e:cd:07:a9:59:a7:3b:93:
                    e1:1f:cc:84:e4:1a:0e:16:ab:d3:84:b4:d6:f1:ac:
                    f8:36:59:41:07:23:4b:2e:84:57:6b:b6:6a:b7:a5:
                    19:b2:26:d9:ba:d9:c2:3b:a4:49:0a:57:a6:6f:77:
                    82:b7:56:ea:09:55:f7:6d:f3:f8:98:4b:a6:b4:75:
                    cb:6f:77:de:7a:5a:70:9a:a7:f6:7d:5b:34:c5:13:
                    14:0f:5e:27:38:d3:76:77:55:28:1a:a4:fb:14:f0:
                    b8:46:63:c1:ca:c7:5f:82:9d:82:c3:fc:db:3c:43:
                    1a:fc:65:c2:a9:64:c7:cc:82:d8:f8:99:7a:66:17:
                    3f:f1:a4:b2:58:85:12:f3:de:24:19:00:91:5a:69:
                    58:15:da:d9:4f:79:2d:91:86:ea:cd:ad:bf:2d:7f:
                    bc:0b:3c:96:c4:10:87:e5:3f:b9:30:91:85:0a:11:
                    3c:e6:bc:85:df:ff:de:67:c3:eb:8b:25:58:30:af:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:26:16:32:01:F8:7A:28:96:A3:69:FD:59:BC:BB:37:21:DD:84:F8
            X509v3 Authority Key Identifier:
                keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5e:c2:bc:a8:25:d0:c9:1b:e3:be:9b:6b:4f:f7:01:85:0f:
         26:32:b9:ef:bb:48:68:a4:0d:1f:fe:b2:90:9f:0d:95:93:d5:
         5e:61:99:8b:22:3b:a1:02:77:74:0c:af:2d:21:a7:e5:e8:cf:
         b2:22:5a:79:ad:31:9e:e7:2b:87:ed:04:a0:80:fe:c6:e7:95:
         52:1e:9c:e7:91:d3:64:23:34:c8:3b:4b:1d:4e:d9:1c:cf:67:
         27:a8:d0:78:d9:f0:69:a8:c5:b8:0d:c8:5b:fe:b8:18:24:cc:
         40:e4:65:43:05:8c:46:f9:95:67:ba:52:78:84:1e:1f:92:d5:
         b1:f3:c3:8a:bc:a6:5f:99:59:de:dc:22:3b:b7:96:73:b1:11:
         31:29:6b:7f:3e:58:61:98:7b:34:2d:78:94:a5:4d:74:6c:f2:
         79:d7:4f:79:46:e5:2e:46:ba:e1:47:ad:91:7e:fc:e4:a1:dd:
         d8:c2:51:d2:a6:c5:56:c2:c4:58:c1:42:dd:fc:b4:f4:32:45:
         96:53:2b:c7:37:3d:f0:2b:2d:4f:77:89:4c:6a:3d:76:4e:d9:
         29:89:59:2d:ac:49:78:5e:39:31:a4:80:a5:23:8e:fd:8e:c3:
         a8:e7:5b:fd:26:66:47:01:c8:95:af:71:b4:57:2b:0e:6f:bb:
         b5:48:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:32:45 2026 by rpki-client