This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
File:                     L71gGUYMdo4C0QZloGiN0flxhG8.mft (raw, json)
Hash identifier:          UE1Z12fmZrP5m0282WdRX9USqRk2QlmA1EhEvM1BtvE=
Subject key identifier:   20:3F:BE:77:AA:21:50:87:F6:99:61:DF:49:60:BC:35:91:FE:11:D4
Authority key identifier: 2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F
Certificate issuer:       /CN=A9110C8B/serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
Manifest number:          03
Signing time:             Fri 23 Jan 2026 07:12:05 +0000
Manifest this update:     Fri 23 Jan 2026 07:12:04 +0000
Manifest next update:     Fri 30 Jan 2026 07:12:04 +0000
Files and hashes:         1: L71gGUYMdo4C0QZloGiN0flxhG8.crl (hash: eDY/s+UnBMJWsdOmqJcukJYksVewlVXKoZVDUzHTkmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl
                          rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C8B, serialNumber=2FBD6019460C768E02D10665A0688DD1F971846F
        Validity
            Not Before: Jan 23 07:12:04 2026 GMT
            Not After : Jan 30 07:12:04 2026 GMT
        Subject: CN=69731f45-adc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:16:93:69:4d:f4:34:e7:9a:d5:7d:d2:0d:
                    1d:ce:24:a2:bf:b3:0a:43:ab:27:49:56:6a:78:32:
                    ce:9a:97:39:bb:06:a1:01:47:c2:ef:32:dc:4a:28:
                    d1:4a:fd:9c:41:e1:38:c5:f7:b7:d3:b4:96:e8:10:
                    2b:ce:2a:0c:66:92:81:ec:85:81:fa:2d:b3:0e:27:
                    62:c2:6e:e5:66:fb:7e:91:80:e3:98:49:72:b9:7c:
                    fe:18:0c:d4:a4:93:15:52:4f:06:0e:12:4a:a4:93:
                    72:ec:e7:0f:0c:2a:04:2a:de:37:35:a6:8d:f0:ca:
                    fe:06:67:3d:ba:06:68:79:8b:d8:de:6f:fd:cb:05:
                    dc:0c:84:aa:4b:a2:2a:87:1e:d0:65:f7:39:ae:25:
                    2d:13:5d:a8:ad:a8:ef:7d:dd:e4:a1:47:57:3f:f0:
                    4c:48:0a:8d:95:83:16:40:15:45:8d:16:37:b3:e3:
                    14:97:dd:47:df:eb:65:84:18:e3:04:5b:1e:9b:fd:
                    3e:b1:cb:06:c3:70:76:4a:c6:05:e0:c9:5d:6c:c1:
                    89:86:84:7f:6e:03:c7:92:77:ec:7c:d5:7e:84:90:
                    aa:72:62:b3:b6:92:a3:12:3e:b4:c2:ba:92:47:b9:
                    a7:84:23:ed:c1:2a:8a:26:9f:de:9f:64:a5:0d:69:
                    8d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3F:BE:77:AA:21:50:87:F6:99:61:DF:49:60:BC:35:91:FE:11:D4
            X509v3 Authority Key Identifier:
                keyid:2F:BD:60:19:46:0C:76:8E:02:D1:06:65:A0:68:8D:D1:F9:71:84:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L71gGUYMdo4C0QZloGiN0flxhG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9E696922F66A11F0A3FB90886F6F56BC/L71gGUYMdo4C0QZloGiN0flxhG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a3:64:b8:95:71:ca:91:e6:0a:16:43:f1:1d:6b:0d:29:21:
         78:ac:a3:9c:39:3c:3c:f6:81:f4:51:26:3c:0b:0c:38:20:cb:
         e6:5b:18:b6:4d:9f:3e:b2:46:3d:77:aa:79:02:e8:a2:82:95:
         9d:0d:f8:7c:de:63:c4:ec:4d:bd:18:f9:58:e3:a3:f2:77:73:
         0a:70:01:8f:1d:61:5a:dc:00:12:43:47:ef:8b:36:31:5a:a6:
         a6:b6:ac:d6:72:f8:44:c6:84:36:6f:c8:d9:c5:3e:05:8b:57:
         e9:bc:8a:01:ba:b2:50:0c:54:86:2e:0a:d4:e5:32:9c:e6:a7:
         0d:64:ba:c7:ae:b5:bb:d3:a6:48:96:27:8b:30:8d:4f:13:4f:
         03:fa:e5:43:59:3d:5e:da:55:9b:9d:0f:6c:da:2a:59:ec:1e:
         cc:0a:9a:a1:8a:7c:e2:e6:60:3c:1b:f9:d4:65:6d:3d:01:a1:
         a0:ce:d7:66:92:6e:20:15:f1:2c:36:54:0b:2f:28:51:8a:84:
         2f:97:8e:94:20:c3:01:9f:bb:c1:ba:9b:8b:28:0e:4b:c0:f6:
         a6:77:4b:1d:c0:9b:f1:5d:c7:e2:55:cd:4a:9f:8e:3c:43:55:
         cb:68:89:16:a8:9e:a0:da:01:c0:04:9f:99:52:4b:74:87:c5:
         c1:d1:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:02 2026 by rpki-client