This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
File:                     tGhODWIsua_RLLX6PkiF382FAE0.mft (raw, json)
Hash identifier:          9eBDJCaw5YX0GI3Eu8ZMPRKZEkztJ/Zj1n8cqdAYz+U=
Subject key identifier:   EF:3D:DA:2C:5F:F3:09:3C:69:CE:E0:B3:35:48:33:97:D0:B2:0A:48
Authority key identifier: B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D
Certificate issuer:       /CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D
Certificate serial:       0425
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
Manifest number:          041C
Signing time:             Sat 10 Jan 2026 23:35:04 +0000
Manifest this update:     Sat 10 Jan 2026 23:35:04 +0000
Manifest next update:     Sat 17 Jan 2026 23:35:04 +0000
Files and hashes:         1: tGhODWIsua_RLLX6PkiF382FAE0.crl (hash: lQLlmmPxgqsFxOMRfNlqP1Q48qrp0qseF4p7TOR80eY=)
                          2: C458350E979C11EC8E769C43C4F9AE02.roa (hash: D0wo+x5/eI47vVGDL5twz0n4up2ZDNjTCVO1Xyw3jxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl
                          rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 23:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4636, serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D
        Validity
            Not Before: Jan 10 23:35:04 2026 GMT
            Not After : Jan 17 23:35:04 2026 GMT
        Subject: CN=6962e228-6105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:a8:51:ad:c8:28:15:f5:aa:5b:d4:4b:eb:
                    ed:92:f7:e6:e4:e2:4f:05:8a:c9:d5:c9:a6:ed:b0:
                    bb:fb:6e:85:7e:47:4f:4b:6c:9c:17:39:9c:b7:f2:
                    5e:a1:dc:d8:8d:13:a8:38:ff:69:9b:54:7e:23:22:
                    06:35:70:f1:29:7e:1d:64:aa:4f:f6:40:97:07:1b:
                    10:f4:f7:a5:0b:a0:69:12:18:c9:64:dc:83:19:34:
                    f0:18:15:69:17:20:29:77:76:21:51:f1:87:0f:28:
                    f5:ab:3b:82:77:34:31:15:8f:1e:99:a9:73:82:28:
                    b9:f6:29:79:2d:cd:ef:7c:90:2a:d6:29:ae:90:c9:
                    69:41:c2:a7:3a:3b:c9:a2:fd:62:0e:95:af:ca:9d:
                    50:80:24:e9:8d:f8:1b:92:7e:8c:38:53:8d:6a:f0:
                    8b:2f:33:3a:a5:7d:96:36:7f:8f:79:39:52:1d:dc:
                    9e:94:f9:39:74:35:05:4f:9b:7e:b2:44:6d:89:dc:
                    b9:88:5f:fd:4c:44:a8:1e:0a:bd:6d:6a:b7:57:e7:
                    a7:52:b8:b0:db:f5:6a:a3:58:a2:35:22:4f:95:f4:
                    5c:3c:d2:5e:3f:fc:07:e0:9f:7c:78:0b:77:0a:7c:
                    91:39:eb:50:92:ac:c3:dc:1e:6b:2e:92:b6:b6:ae:
                    e8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3D:DA:2C:5F:F3:09:3C:69:CE:E0:B3:35:48:33:97:D0:B2:0A:48
            X509v3 Authority Key Identifier:
                keyid:B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7b:42:18:9d:9b:c1:2e:f1:44:1c:26:bf:03:d5:72:02:70:
         33:4e:8a:67:83:be:aa:f1:80:6c:53:9a:e8:3d:84:da:64:4b:
         c3:c8:dc:34:1f:ca:f5:4e:57:9c:47:3e:54:00:7a:dc:33:d9:
         0c:5f:f3:2d:6d:40:70:b0:29:34:47:ee:c4:40:75:34:e7:31:
         aa:c1:09:0d:2d:ad:46:84:62:a9:06:d2:97:42:c9:4b:5f:59:
         80:6d:69:6f:d5:27:0b:51:be:47:e2:eb:de:89:42:75:85:55:
         64:81:b8:1f:c8:48:2f:61:27:fb:74:78:d2:6f:e4:ac:28:fa:
         a1:f6:a7:14:6f:7a:ad:a3:6e:b2:c3:57:0f:62:1e:ed:ef:c0:
         d5:3e:70:96:19:be:7e:78:c9:14:66:3c:7e:2f:d0:4a:fc:a9:
         34:a6:6d:2f:8f:8e:fc:05:85:c9:1a:09:df:5a:8e:53:1b:33:
         7a:0e:37:91:98:09:eb:52:fe:5e:a7:67:17:4c:31:55:47:1c:
         9d:95:e8:bc:70:55:df:e4:64:72:6a:b0:a5:40:f5:cd:2f:8c:
         6d:63:73:40:a5:18:48:22:fe:62:b6:af:88:90:e1:30:ff:34:
         bb:6e:5c:52:98:1a:eb:be:ef:0c:c6:3d:06:93:6c:9f:1f:56:
         4f:3c:c3:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ2MzYxMTAvBgNVBAUTKEI0Njg0RTBENjIyQ0I5QUZEMTJDQjVGQTNFNDg4NURG
Q0Q4NTAwNEQwHhcNMjYwMTEwMjMzNTA0WhcNMjYwMTE3MjMzNTA0WjAYMRYwFAYD
VQQDDA02OTYyZTIyOC02MTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpSoUa3IKBX1qlvUS+vtkvfm5OJPBYrJ1cmm7bC7+26FfkdPS2ycFzmct/Je
odzYjROoOP9pm1R+IyIGNXDxKX4dZKpP9kCXBxsQ9PelC6BpEhjJZNyDGTTwGBVp
FyApd3YhUfGHDyj1qzuCdzQxFY8emalzgii59il5Lc3vfJAq1imukMlpQcKnOjvJ
ov1iDpWvyp1QgCTpjfgbkn6MOFONavCLLzM6pX2WNn+PeTlSHdyelPk5dDUFT5t+
skRtidy5iF/9TESoHgq9bWq3V+enUriw2/Vqo1iiNSJPlfRcPNJeP/wH4J98eAt3
CnyROetQkqzD3B5rLpK2tq7ozQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO892ixf
8wk8ac7gszVIM5fQsgpIMB8GA1UdIwQYMBaAFLRoTg1iLLmv0Sy1+j5Ihd/NhQBN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYzNi8yQzlCQzMzQzk3
OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3VhX1JMTFg2UGtpRjM4MkZB
RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RHaE9EV0lzdWFfUkxMWDZQa2lGMzgyRkFFMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDYzNi8yQzlCQzMzQzk3OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3Vh
X1JMTFg2UGtpRjM4MkZBRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQe0IYnZvBLvFEHCa/A9VyAnAzTopng76q8YBsU5roPYTaZEvDyNw0
H8r1TlecRz5UAHrcM9kMX/MtbUBwsCk0R+7EQHU05zGqwQkNLa1GhGKpBtKXQslL
X1mAbWlv1ScLUb5H4uveiUJ1hVVkgbgfyEgvYSf7dHjSb+SsKPqh9qcUb3qto26y
w1cPYh7t78DVPnCWGb5+eMkUZjx+L9BK/Kk0pm0vj478BYXJGgnfWo5TGzN6DjeR
mAnrUv5ep2cXTDFVRxydlei8cFXf5GRyarClQPXNL4xtY3NApRhIIv5itq+IkOEw
/zS7blxSmBrrvu8Mxj0Gk2yfH1ZPPMOD
-----END CERTIFICATE-----
Generated at Sun Jan 11 19:54:10 2026 by rpki-client