This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          Vou3vnytQocmPtv0rGZZGae/mOlnwZ8Y4rWei8UbAzA=
Subject key identifier:   FD:45:0C:59:04:55:FF:B2:D2:21:3B:80:96:0D:9A:39:38:3D:86:43
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       25E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          2572
Signing time:             Sat 24 Jan 2026 15:33:10 +0000
Manifest this update:     Sat 24 Jan 2026 15:33:10 +0000
Manifest next update:     Sat 31 Jan 2026 15:33:10 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: SXArz7IrWcgW8h1TIQUgInGN2zqmemtd0tK7+gh/H7Y=)
                          2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: AfvEohb/PfXr6q8VsGeLfKrSZSjnU6OR4EKMkOZ59zw=)
                          3: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: UuYB4WzvgQjLH0B44aPDoKSEcVPBbWtM3rQy9k0A+k0=)
                          4: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: pA2CTOoVDstDIwP9+WcJpg+mmFpi5C2LMeocnNKjKiw=)
                          5: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: BvTYdQgytihNDhZkOmbkqugOTnkp3U/T+b4vjOkSQoo=)
                          6: 407F0056629711EEB706DD75C4F9AE02.roa (hash: zE+GZQ/y6NnrgGwNjCL6jq7bqAj/QObhERffdYT4PxE=)
                          7: 260428EC312211EEAF54935BC4F9AE02.roa (hash: hc9wCWP1WEpuKLSMKP8mb2EgyLJQaateqF+mXzUo/B4=)
                          8: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: C5yWlFetiSSgG+uEjcV1GWZbX9dn852PkeX+hr5OgJI=)
                          9: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: h8hBMw4qTUysR1Qt2RKGUo5X0wweJ0CeRUcowINA2fg=)
                          10: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: PWkDZi06ADjI6yjBBU4aYQrWTgNSnaqa8au2v37zNL0=)
                          11: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: ve1V1cZ/meI9rVUCyJeBrMdO5d8EYgeTD4/df18i1ts=)
                          12: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: fsHld7Bvq7MRzGsdvGdzdVtfpdT2fFcdHDJmOjRKRlI=)
                          13: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: JqU56gVLxGJgAJvjCh6VO0y5qM6pE+RiW8LanHN02lc=)
                          14: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: S0b4btTgQ2n6BX5TKX1B9HC0w3N4D2HJohEDqkDcWjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9704 (0x25e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan 24 15:33:10 2026 GMT
            Not After : Jan 31 15:33:10 2026 GMT
        Subject: CN=6974e636-0111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8a:cd:a2:db:9f:87:cc:67:d6:8e:8b:6a:1d:
                    34:bc:13:f6:8d:fd:96:d6:92:69:0e:b2:23:f6:e8:
                    2b:75:b0:0f:fb:35:1e:76:38:e3:db:94:44:57:72:
                    20:81:e3:24:5d:e7:a8:f6:6b:1b:76:0e:a7:8a:64:
                    8b:80:81:1e:36:f9:44:f5:37:f9:cf:c7:e0:2c:ca:
                    15:36:24:98:13:0a:54:7b:0e:cb:26:8d:a8:77:53:
                    af:35:14:ad:e6:c2:91:b4:b7:c7:3b:4b:17:b4:89:
                    64:23:17:a2:d5:c9:c8:d6:2e:d2:a4:0f:02:6d:18:
                    d0:ad:a3:22:ba:ac:b2:45:73:ff:34:67:70:e3:eb:
                    66:2c:ba:9d:1c:7f:64:9b:92:3d:fd:6c:aa:28:02:
                    24:36:2f:59:8e:b1:37:bc:a5:e0:88:89:05:0b:b6:
                    5e:d3:d3:b3:55:97:63:0c:1e:e6:01:52:b7:8b:3b:
                    d5:be:0d:81:dc:4d:af:8d:8b:6c:16:70:d9:c0:86:
                    5c:35:11:2d:0d:71:7c:9f:df:b6:8a:17:a4:e6:c1:
                    b0:b5:de:a1:31:86:22:3f:ef:42:10:64:7f:c4:73:
                    8b:0b:d6:8f:30:9a:9a:19:4a:b7:35:bc:af:d1:af:
                    9d:cb:e6:6e:28:a9:37:47:a3:26:5b:3d:02:ea:12:
                    8b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:45:0C:59:04:55:FF:B2:D2:21:3B:80:96:0D:9A:39:38:3D:86:43
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d8:6d:89:8d:26:29:62:c8:a9:11:a8:1c:d1:94:29:0d:f0:
         86:f6:1b:a5:e4:8b:1e:ee:f8:64:2d:2e:39:d3:a3:c1:78:f8:
         b1:63:f1:95:78:ea:2f:aa:35:40:8b:67:ab:e6:37:de:77:03:
         fc:0d:16:0e:b1:87:24:52:1e:fd:f0:42:1c:47:e2:0e:80:6f:
         0b:69:44:88:32:19:73:34:cf:6c:8f:0b:ec:e6:cf:ee:16:a4:
         ca:dc:ab:ef:b3:6a:04:71:b8:a2:30:44:1f:64:e7:30:fd:38:
         6e:9b:df:1f:ac:bd:37:9d:80:57:3c:0f:90:c6:74:c6:74:63:
         c9:cc:5d:82:48:77:66:58:05:90:3a:37:c7:9e:41:41:e6:af:
         08:3c:07:2f:f5:97:68:e0:31:d6:ee:b5:93:c0:5c:e2:cb:ae:
         36:d0:df:96:91:94:e5:51:8c:ab:07:bd:60:63:dd:72:61:b2:
         59:4f:46:c2:d3:1e:8b:a8:4d:05:2f:13:71:8c:4e:fd:8b:a5:
         fa:ce:80:e0:1c:79:74:aa:af:53:ba:ee:9e:eb:3e:98:12:e4:
         24:b4:f9:ff:17:e0:78:71:c9:86:14:aa:d5:bf:4a:98:70:46:
         08:20:46:76:83:b8:e2:e0:ba:ed:fd:30:65:0d:a7:af:e6:7f:
         3b:3f:92:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:50:28 2026 by rpki-client