This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
File:                     lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json)
Hash identifier:          ymg6hqSFQ9WAoDSKJ3qDAonD5QePdmbjW2sbsULvM6E=
Subject key identifier:   33:96:27:A6:6D:D5:61:06:6F:16:A2:B2:E4:39:36:EA:25:3F:2E:25
Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
Certificate issuer:       /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
Manifest number:          0259
Signing time:             Sun 25 Jan 2026 01:10:32 +0000
Manifest this update:     Sun 25 Jan 2026 01:10:31 +0000
Manifest next update:     Sun 01 Feb 2026 01:10:31 +0000
Files and hashes:         1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: rjnTiHj862aMJoMyfbZFO7/bziNn0roBW9DySZTHi/o=)
                          2: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: S45/xPYRoVgrsdI2jRLO88Aryn+KvDaMoixBFgOO2jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
                          rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
        Validity
            Not Before: Jan 25 01:10:31 2026 GMT
            Not After : Feb  1 01:10:31 2026 GMT
        Subject: CN=69756d88-385f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:bb:50:a9:a3:81:f5:16:41:96:b0:8e:80:
                    86:f3:1c:51:51:2d:b9:e2:e3:65:7a:13:c0:85:29:
                    5b:53:8e:b7:42:9c:bb:30:05:b3:0b:4d:a3:57:19:
                    bd:c6:85:17:c9:57:2d:e4:51:2a:4a:c2:da:b5:e0:
                    45:40:b9:7e:80:ee:fc:b7:d1:c6:08:66:4b:1c:37:
                    7d:7f:fa:6e:aa:d4:76:12:8b:ab:2b:09:9f:8d:51:
                    52:76:c2:8a:58:d6:c3:6e:03:e7:2b:7b:f4:55:e2:
                    d2:a3:88:d6:cc:3c:25:4c:55:df:e7:71:f0:57:eb:
                    ad:28:59:78:a8:29:46:e8:2d:2e:8a:9f:c3:7a:c4:
                    d8:08:8b:68:3d:87:de:a8:21:76:2c:1b:e3:45:c0:
                    be:1e:7e:e7:c9:f5:40:95:e0:a8:06:81:cd:6c:7a:
                    54:82:49:16:31:c1:5d:c1:3e:9d:fe:7f:7d:54:f7:
                    49:92:e9:38:36:6b:f0:d4:b8:15:ef:09:93:20:08:
                    bb:98:b6:7e:38:66:d1:87:41:b2:c2:78:28:c1:14:
                    49:62:c9:5e:55:bc:1f:6f:9a:63:33:72:a0:f6:08:
                    03:d7:93:7c:71:49:d7:f8:3e:07:22:6f:83:a5:15:
                    4e:18:1e:f3:e7:40:c1:03:53:fe:93:88:a2:01:b2:
                    d6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:96:27:A6:6D:D5:61:06:6F:16:A2:B2:E4:39:36:EA:25:3F:2E:25
            X509v3 Authority Key Identifier:
                keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:11:60:99:a6:d2:0e:43:82:b6:aa:da:e0:51:dd:be:ab:b7:
         c5:e8:34:c4:88:05:cc:6b:27:18:58:29:45:9e:cd:48:da:79:
         13:77:ae:d4:75:00:70:e2:39:ef:56:0f:92:fe:9a:57:68:34:
         00:59:49:e1:76:5e:6b:de:76:51:12:62:d8:8d:e3:dd:65:25:
         5a:ef:76:36:39:37:87:b7:96:e9:bc:43:d7:26:ea:02:55:51:
         7f:36:cf:b0:a8:16:ee:63:33:e9:a6:a5:20:a6:7a:a0:b4:17:
         35:3e:c3:32:82:54:4e:7c:a9:b5:a0:a1:b6:83:06:2a:08:30:
         30:5c:0f:ac:e1:58:74:5a:31:98:cc:ed:b8:b0:ef:55:07:01:
         f5:c2:4c:94:31:bb:dd:94:9a:63:d0:1d:ed:65:84:dd:2a:05:
         76:d4:fa:92:26:92:4a:85:fb:3e:5e:ed:c4:fc:17:07:b0:5c:
         1c:24:7e:c3:0a:87:35:09:f8:94:91:5c:63:58:57:2c:b8:47:
         84:f5:d1:f7:66:27:d4:1c:c3:73:47:7a:cd:d9:51:46:95:a1:
         3f:e8:66:b7:ed:1a:19:e6:a2:89:c4:87:92:ca:85:1a:ce:f9:
         e4:f0:26:24:0d:eb:71:2b:1b:fa:52:f4:58:32:4a:a9:46:75:
         ec:b1:27:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:52 2026 by rpki-client