This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
File:                     lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json)
Hash identifier:          M4kSitcv01HT6n8UtbN8XQKD5iv73+BUl+NX2+joynw=
Subject key identifier:   D0:76:46:BB:5F:A7:2A:58:5A:AC:AB:70:10:07:3B:19:42:7F:89:88
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Certificate issuer:       /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
Manifest number:          21
Signing time:             Fri 23 Jan 2026 06:48:54 +0000
Manifest this update:     Fri 23 Jan 2026 06:48:53 +0000
Manifest next update:     Fri 30 Jan 2026 06:48:53 +0000
Files and hashes:         1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: qhjhw/5IRtDX5ipv25uvuIUCiU/xlcMyBpxuN93TGeo=)
                          2: 1E74642AEEC611F0B6553517716F56BC.roa (hash: SOSLWLvLrsjjJ6AEtm/F/8vErniCw4XxHqkv+EwD6A4=)
                          3: 1F740B32EEC611F0B6553517716F56BC.roa (hash: GkuChrKCeIjrx/7RKi1sDVvBepAqIC5AXcgUnelT0n4=)
                          4: 1EF20696EEC611F0B6553517716F56BC.roa (hash: 3GuxeAjrlB+hxfwnx2ev/UrANIlreKIaPOJsJtCLgaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
        Validity
            Not Before: Jan 23 06:48:53 2026 GMT
            Not After : Jan 30 06:48:53 2026 GMT
        Subject: CN=697319d6-0326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:62:43:03:0e:98:8b:ac:eb:b7:8a:de:35:
                    b6:b2:3c:77:99:55:16:96:e1:d4:f4:92:e7:d1:dd:
                    5e:e6:5f:45:15:e4:4e:71:9f:d3:21:f1:fb:5d:64:
                    f9:ad:d6:9f:56:e8:12:b1:33:8d:77:88:f7:99:44:
                    cf:1a:02:4e:7e:a9:86:8c:e5:c7:59:fc:e0:03:f7:
                    c2:e1:c2:28:96:f5:d4:10:b6:b8:8b:30:ee:54:a9:
                    53:2f:d6:04:c9:69:6f:63:57:20:80:93:81:79:0e:
                    d8:7f:ed:b3:54:4c:78:03:3f:0e:a8:72:3b:f2:27:
                    11:e4:92:c7:3c:3d:d7:91:b6:97:0f:2e:4b:be:78:
                    27:ce:32:4e:6c:d8:3c:d1:1c:8e:d4:55:20:f5:09:
                    90:30:d5:44:d7:ca:80:83:06:9a:41:09:05:ad:ca:
                    ea:01:1a:72:46:03:7a:a3:19:a2:34:9e:4c:a6:3d:
                    03:90:4f:79:cd:9b:33:0f:7d:0b:79:b2:91:a7:2c:
                    c4:6b:f4:f7:2a:9e:e4:cc:49:a8:8c:a4:b5:4e:c9:
                    b5:10:ea:63:bc:13:99:24:5a:3b:77:2d:32:68:de:
                    5a:a3:fd:c0:6b:04:31:d4:73:c9:32:aa:e7:b1:48:
                    b7:cc:ee:49:af:d3:cc:b5:ac:5c:8e:54:eb:53:8b:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:76:46:BB:5F:A7:2A:58:5A:AC:AB:70:10:07:3B:19:42:7F:89:88
            X509v3 Authority Key Identifier:
                keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:97:1e:a3:48:19:56:ba:8f:e7:f9:49:09:80:11:61:91:63:
         24:92:ad:a7:db:47:95:79:f9:86:b8:61:be:2c:20:69:0d:1c:
         55:a6:c0:be:1a:b2:00:43:0e:00:bf:9a:11:69:14:f3:eb:d7:
         61:15:94:50:70:85:12:93:34:dc:83:7d:57:f9:be:50:02:d5:
         02:bf:68:fe:53:b3:4b:5d:97:fd:8d:bb:f8:ad:59:d1:d2:55:
         27:86:c8:78:5f:2f:5c:8d:c8:59:b7:57:c7:9b:68:6e:4a:07:
         f6:61:3a:1c:14:2d:e0:8f:37:4c:22:9f:85:21:a8:60:ac:0f:
         fb:aa:0d:11:02:f4:2f:03:e1:42:b4:b5:69:68:54:00:04:2f:
         25:08:74:08:04:59:18:0e:fe:39:69:d4:90:7f:23:84:b6:27:
         d1:3c:08:2b:40:08:e5:c9:96:6f:ea:5f:d4:81:bf:ed:f0:c3:
         48:96:fc:a1:63:3d:dd:c1:28:e5:76:7a:f2:07:13:c4:5c:9d:
         f7:47:fd:ee:47:39:cd:e3:9e:08:db:97:58:9d:08:5d:89:a5:
         0c:92:11:dc:95:08:a3:bc:44:e9:d4:82:0d:5c:4e:13:7b:2b:
         67:90:18:8e:58:e7:0e:7c:5a:bb:29:6f:a5:fd:00:ca:75:93:
         3a:d4:43:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:24 2026 by rpki-client